Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QTaKLv4ayoZphnvh0HW_fAjlUzk.roa
File: QTaKLv4ayoZphnvh0HW_fAjlUzk.roa (raw, json)
Hash identifier: Pgy8CSAPlcicgzbgzzQeWS6at1S6yBCdtEEJZ2SXcaY=
Subject key identifier: 41:36:8A:2E:FE:1A:CA:86:69:86:7B:E1:D0:75:BF:7C:08:E5:53:39
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB83B853B661E4D584BD62DADB67DA0
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QTaKLv4ayoZphnvh0HW_fAjlUzk.roa
Signing time: Sun 01 Jan 2023 09:44:51 +0000
ROA not before: Sun 01 Jan 2023 09:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12479
IP address blocks: 92.178.0.0/16 maxlen: 24
90.77.0.0/16 maxlen: 24
92.176.0.0/16 maxlen: 24
90.75.0.0/16 maxlen: 24
90.74.0.0/16 maxlen: 24
90.106.0.0/16 maxlen: 24
90.69.0.0/19 maxlen: 19
90.69.0.0/16 maxlen: 24
92.190.0.0/16 maxlen: 24
90.94.0.0/16 maxlen: 24
92.185.0.0/16 maxlen: 24
92.172.0.0/16 maxlen: 24
90.69.80.0/21 maxlen: 21
90.71.0.0/16 maxlen: 24
92.189.0.0/16 maxlen: 24
90.69.112.0/21 maxlen: 21
90.69.32.0/19 maxlen: 19
92.187.0.0/16 maxlen: 24
90.69.64.0/20 maxlen: 20
92.177.0.0/16 maxlen: 24
90.69.176.0/21 maxlen: 21
90.69.184.0/22 maxlen: 22
90.68.0.0/16 maxlen: 24
90.69.188.0/22 maxlen: 22
90.69.192.0/20 maxlen: 20
92.191.0.0/16 maxlen: 24
92.186.0.0/16 maxlen: 24
90.69.208.0/20 maxlen: 20
90.69.224.0/19 maxlen: 19
90.69.124.0/22 maxlen: 22
90.69.128.0/19 maxlen: 19
90.69.160.0/21 maxlen: 21
2a01:c500::/28 maxlen: 46
2a01:c500::/31 maxlen: 42
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:3b:85:3b:66:1e:4d:58:4b:d6:2d:ad:b6:7d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41368a2efe1aca8669867be1d075bf7c08e55339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:14:ac:cc:10:31:87:8f:3f:fb:09:a6:eb:
3f:1c:d6:d9:62:4b:7f:50:58:34:d2:8e:67:37:16:
68:b2:b0:c1:fd:2c:a3:f5:9b:8d:be:ad:06:bb:64:
09:bf:e1:d9:ae:4b:59:a6:4c:85:39:97:1e:36:cf:
15:93:25:a0:86:1a:91:1a:76:d5:b9:52:88:61:70:
15:de:82:6d:32:81:cc:b2:41:6f:f2:c3:1d:fd:b8:
47:51:fc:d2:3b:d8:54:16:c5:85:86:c4:45:87:b7:
11:a6:13:a2:50:19:5e:13:57:3e:46:0f:95:d8:b4:
0d:94:af:15:a3:11:5c:ea:9c:99:55:4f:95:70:e3:
3a:e4:a9:9c:63:af:49:3b:b6:2f:88:8c:6b:2a:95:
ad:4d:0e:96:cd:70:b3:72:14:b9:5c:39:11:a6:0e:
82:cd:7f:8c:9f:25:4c:8d:26:ef:04:ff:59:14:57:
ad:03:17:92:6b:85:9d:bd:34:8e:08:b5:c4:88:d2:
fe:e3:88:44:88:53:5e:f2:fe:1e:78:07:3d:5e:fa:
db:b6:86:ac:07:99:6e:d3:b0:ab:c5:47:a9:58:bb:
2c:66:ca:c9:fd:4f:4a:87:16:04:d9:fe:8e:7e:89:
61:a5:f0:df:a0:63:5b:5f:36:ec:e7:3b:3a:00:95:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:36:8A:2E:FE:1A:CA:86:69:86:7B:E1:D0:75:BF:7C:08:E5:53:39
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QTaKLv4ayoZphnvh0HW_fAjlUzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.68.0.0/15
90.71.0.0/16
90.74.0.0/15
90.77.0.0/16
90.94.0.0/16
90.106.0.0/16
92.172.0.0/16
92.176.0.0-92.178.255.255
92.185.0.0-92.187.255.255
92.189.0.0-92.191.255.255
IPv6:
2a01:c500::/28
Signature Algorithm: sha256WithRSAEncryption
74:74:bc:33:5f:0a:7e:8e:84:ed:56:34:b8:34:28:be:72:83:
8b:15:ed:7d:68:4b:44:8a:43:78:63:ba:9e:18:3b:3b:9d:bc:
44:66:d4:df:27:ec:07:55:0a:f0:4a:8d:bb:8b:ef:b7:c8:6c:
f9:a2:fa:4e:79:b7:45:98:14:66:89:96:90:a3:37:f3:e3:22:
08:79:22:f0:b1:d7:99:4e:d1:c2:82:b3:c8:c3:fc:1d:8e:ef:
6b:8f:a4:5f:d8:b4:7e:85:fe:cc:0c:be:a2:da:fa:ff:e9:46:
c8:e5:fc:e8:f0:a4:20:ff:24:58:f7:73:27:2b:33:79:0a:b4:
cb:31:3c:cb:1f:f1:15:13:88:2a:c9:7f:40:95:58:45:75:37:
c1:8e:ec:74:80:4f:7b:04:9b:1c:30:a9:12:d8:4f:2c:4e:72:
7a:6d:2e:84:5b:11:57:ae:f7:14:b0:7c:50:25:d7:26:6e:11:
7f:fc:b0:fa:3d:79:6f:e2:6c:76:05:29:02:74:92:95:62:8b:
d2:ab:2b:f6:67:22:0a:bf:46:85:f7:53:04:e8:9a:de:27:bf:
49:2f:4f:15:c4:cb:15:f5:8a:57:65:2c:27:88:b6:3d:09:d2:
6e:25:71:fe:82:48:c0:c4:ed:f4:c6:8c:96:d1:dd:45:ea:5c:
be:a5:c5:0f
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAYVsuDuFO2YeTVhL1i2ttn2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjMwMTAxMDk0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTM2OGEyZWZlMWFjYTg2Njk4NjdiZTFkMDc1YmY3YzA4ZTU1MzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo70UrMwQMYePP/sJpus/HNbZYkt/
UFg00o5nNxZosrDB/Syj9ZuNvq0Gu2QJv+HZrktZpkyFOZceNs8VkyWghhqRGnbV
uVKIYXAV3oJtMoHMskFv8sMd/bhHUfzSO9hUFsWFhsRFh7cRphOiUBleE1c+Rg+V
2LQNlK8VoxFc6pyZVU+VcOM65KmcY69JO7YviIxrKpWtTQ6WzXCzchS5XDkRpg6C
zX+MnyVMjSbvBP9ZFFetAxeSa4WdvTSOCLXEiNL+44hEiFNe8v4eeAc9Xvrbtoas
B5lu07CrxUepWLssZsrJ/U9KhxYE2f6OfolhpfDfoGNbXzbs5zs6AJWZuwIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFEE2ii7+GsqGaYZ74dB1v3wI5VM5MB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvUVRhS0x2NGF5b1pwaG52aDBIV19mQWpsVXprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBNBAIAATBHAwMBWkQDAwBa
RwMDAVpKAwMAWk0DAwBaXgMDAFpqAwMAXKwwCgMDBFywAwMAXLIwCgMDAFy5AwMC
XLgwCgMDAFy9AwMGXIAwDQQCAAIwBwMFBCoBxQAwDQYJKoZIhvcNAQELBQADggEB
AHR0vDNfCn6OhO1WNLg0KL5yg4sV7X1oS0SKQ3hjup4YOzudvERm1N8n7AdVCvBK
jbuL77fIbPmi+k55t0WYFGaJlpCjN/PjIgh5IvCx15lO0cKCs8jD/B2O72uPpF/Y
tH6F/swMvqLa+v/pRsjl/OjwpCD/JFj3cycrM3kKtMsxPMsf8RUTiCrJf0CVWEV1
N8GO7HSAT3sEmxwwqRLYTyxOcnptLoRbEVeu9xSwfFAl1yZuEX/8sPo9eW/ibHYF
KQJ0kpVii9KrK/ZnIgq/RoX3UwTomt4nv0kvTxXEyxX1ildlLCeItj0J0m4lcf6C
SMDE7fTGjJbR3UXqXL6lxQ8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org