Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/qmKlaXhe7nk3ADGHJBgjWAg8xE8.roa
File: qmKlaXhe7nk3ADGHJBgjWAg8xE8.roa (raw, json)
Hash identifier: fFoPjdm6cvDzhcF9KWvbu90qGjj0G2gyoI5P923e7XQ=
Subject key identifier: AA:62:A5:69:78:5E:EE:79:37:00:31:87:24:18:23:58:08:3C:C4:4F
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 018880799708EE59342AF099BC7D64D06A57
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/qmKlaXhe7nk3ADGHJBgjWAg8xE8.roa
Signing time: Sat 03 Jun 2023 08:57:12 +0000
ROA not before: Sat 03 Jun 2023 08:57:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.93.205.0/24 maxlen: 24
80.93.202.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.203.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 16:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:80:79:97:08:ee:59:34:2a:f0:99:bc:7d:64:d0:6a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jun 3 08:57:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa62a569785eee793700318724182358083cc44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:2d:7b:50:c3:7f:1c:f4:07:ed:54:e7:24:
e2:20:ed:e1:4d:72:03:31:de:58:5e:8c:9b:5f:96:
ee:b6:2b:1b:79:c5:e2:69:15:64:54:be:d9:cc:93:
9c:d2:83:3c:1f:5d:26:3c:49:95:10:06:61:fd:b9:
fb:da:c9:17:46:af:9a:dd:4b:b3:e1:15:0a:81:2b:
af:a0:61:86:0e:d0:e6:6b:c5:e3:ba:3b:83:17:4f:
30:a8:2c:21:da:b6:7d:2e:60:ee:61:7e:a5:af:7f:
4f:3a:ab:45:00:f4:72:0a:45:e0:c1:b9:e2:ff:df:
9e:42:e1:aa:64:d6:10:c1:82:53:9c:c0:a4:e1:63:
54:92:c9:0b:b8:be:a7:bc:b5:b3:60:6b:cd:53:9f:
ab:98:22:df:8d:cc:0e:d5:d5:f1:42:66:63:c5:90:
03:fb:b6:26:5e:83:d1:ee:48:b2:c4:32:4e:bc:9e:
33:46:52:0c:88:4e:bc:82:d1:94:c8:25:11:8c:2d:
3e:80:dd:14:62:29:0b:82:4c:28:a7:17:5d:59:f1:
f4:48:c5:48:c9:e9:ec:73:e1:27:cb:da:2f:f5:c9:
e4:3d:38:c9:25:ec:68:4e:cc:86:ac:c3:94:32:83:
92:ad:2a:96:8f:e8:9c:68:a0:4f:9d:4f:04:de:59:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:62:A5:69:78:5E:EE:79:37:00:31:87:24:18:23:58:08:3C:C4:4F
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/qmKlaXhe7nk3ADGHJBgjWAg8xE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.202.0/23
80.93.205.0-80.93.207.255
Signature Algorithm: sha256WithRSAEncryption
89:1a:59:2b:1a:e4:b5:cf:b1:d4:b6:92:38:12:0a:27:a7:be:
3a:1c:11:44:84:cf:8d:bb:b6:54:53:85:bb:7a:23:39:1d:97:
8d:8b:ff:5b:2d:c9:f8:7a:93:98:1a:7f:8e:5f:31:97:a1:4b:
62:ab:9b:13:79:57:41:35:93:b0:90:21:32:55:83:39:18:f2:
a8:f4:5b:45:93:22:3c:1b:f2:81:33:4c:d4:f5:24:da:37:7c:
e7:01:41:83:c6:7e:53:62:55:c5:fb:23:15:f1:15:9c:21:04:
df:30:a7:27:62:ce:be:4f:b4:7b:de:49:c8:24:0f:3d:2d:17:
3a:4a:b6:74:42:e3:ca:d6:bd:72:07:2a:ab:eb:1d:51:fd:16:
1e:4a:6c:aa:4b:15:7a:09:f5:a9:75:93:c3:36:52:95:72:8c:
2a:5b:f0:30:62:46:b6:7c:ef:82:6f:3e:9f:0d:26:93:6c:57:
e7:2b:bd:16:24:82:05:0a:30:eb:76:eb:9f:8f:9f:a8:61:1e:
cd:ec:cb:b0:4e:e8:de:a8:0c:ce:87:91:e7:cd:b4:7d:4b:c8:
fd:bb:71:f3:23:63:f1:61:cf:c5:a6:14:a3:c2:4b:ac:d6:6b:
38:41:9f:81:d1:e7:04:98:af:05:ad:d1:2a:cf:34:71:f9:29:
de:fd:2d:f7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYiAeZcI7lk0KvCZvH1k0GpXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjMwNjAzMDg1NzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTYyYTU2OTc4NWVlZTc5MzcwMDMxODcyNDE4MjM1ODA4M2NjNDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPIte1DDfxz0B+1U5yTiIO3hTXID
Md5YXoybX5butisbecXiaRVkVL7ZzJOc0oM8H10mPEmVEAZh/bn72skXRq+a3Uuz
4RUKgSuvoGGGDtDma8XjujuDF08wqCwh2rZ9LmDuYX6lr39POqtFAPRyCkXgwbni
/9+eQuGqZNYQwYJTnMCk4WNUkskLuL6nvLWzYGvNU5+rmCLfjcwO1dXxQmZjxZAD
+7YmXoPR7kiyxDJOvJ4zRlIMiE68gtGUyCURjC0+gN0UYikLgkwopxddWfH0SMVI
yensc+Eny9ov9cnkPTjJJexoTsyGrMOUMoOSrSqWj+icaKBPnU8E3lkf0QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKpipWl4Xu55NwAxhyQYI1gIPMRPMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvcW1LbGFYaGU3bmszQURHSEpCZ2pXQWc4eEU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBUF3KMAwD
BABQXc0DBARQXcAwDQYJKoZIhvcNAQELBQADggEBAIkaWSsa5LXPsdS2kjgSCien
vjocEUSEz427tlRThbt6Izkdl42L/1styfh6k5gaf45fMZehS2KrmxN5V0E1k7CQ
ITJVgzkY8qj0W0WTIjwb8oEzTNT1JNo3fOcBQYPGflNiVcX7IxXxFZwhBN8wpydi
zr5PtHveScgkDz0tFzpKtnRC48rWvXIHKqvrHVH9Fh5KbKpLFXoJ9al1k8M2UpVy
jCpb8DBiRrZ874JvPp8NJpNsV+crvRYkggUKMOt265+Pn6hhHs3sy7BO6N6oDM6H
kefNtH1LyP27cfMjY/Fhz8WmFKPCS6zWazhBn4HR5wSYrwWt0SrPNHH5Kd79Lfc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:44 2024 by rpki-client on console-fra.rpki-client.org