Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QMEtNt-rAvpuxuU5NtT6melVUa8.roa
File: QMEtNt-rAvpuxuU5NtT6melVUa8.roa (raw, json)
Hash identifier: HSQUxvL0WySfWGRj7va2Lh5JZjyuHLTdOYxWylEABQM=
Subject key identifier: 40:C1:2D:36:DF:AB:02:FA:6E:C6:E5:39:36:D4:FA:99:E9:55:51:AF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018F38018DBC0036D23EA32E757506933C19
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QMEtNt-rAvpuxuU5NtT6melVUa8.roa
Signing time: Thu 02 May 2024 06:32:56 +0000
ROA not before: Thu 02 May 2024 06:32:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 193.124.7.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 11 May 2024 10:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:01:8d:bc:00:36:d2:3e:a3:2e:75:75:06:93:3c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 2 06:32:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40c12d36dfab02fa6ec6e53936d4fa99e95551af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:b3:f6:fd:46:72:55:b7:e6:65:f2:b7:58:
88:4d:16:81:dc:6a:d4:47:5a:e9:fc:4c:8f:a0:19:
d1:08:fc:b8:6b:7e:ee:73:2f:38:8c:1b:f9:7b:f1:
38:3d:a0:fd:da:db:67:03:e4:63:26:03:8a:3b:d3:
7c:f6:fd:ee:f8:3f:fe:25:80:02:12:d1:fe:8c:dd:
69:40:d1:e9:3a:78:48:71:37:b4:aa:b8:f8:6c:a8:
08:66:98:82:cd:f8:85:3b:a1:41:52:6b:5a:fe:8b:
06:6b:92:84:f6:6d:33:bc:ba:6c:ff:58:d6:df:81:
66:bd:01:54:ca:74:9d:47:7c:55:1d:44:9e:11:5f:
b6:55:89:fa:ef:32:74:3f:af:a2:93:60:ec:f0:f4:
56:19:dc:4f:85:99:2d:8a:63:3a:d1:e5:8b:75:93:
27:b8:ef:26:1e:2d:15:49:56:50:97:e9:92:6b:1d:
2d:3b:73:65:2c:2f:bd:29:d2:a1:3a:4d:63:84:67:
95:32:3e:ed:06:0f:aa:f6:2f:4b:e6:df:38:b7:5e:
64:ba:e6:ee:68:a9:a9:05:ea:d4:ad:e0:01:07:77:
28:9b:60:76:0d:34:a7:6c:02:6d:04:cb:db:0e:a9:
9b:ce:c8:42:22:81:ea:ad:fd:e4:db:a2:0f:7b:1e:
fd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C1:2D:36:DF:AB:02:FA:6E:C6:E5:39:36:D4:FA:99:E9:55:51:AF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QMEtNt-rAvpuxuU5NtT6melVUa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
194.87.245.0/24
195.133.92.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:d3:02:c2:5f:3f:1b:ed:a6:5d:73:05:23:92:bd:03:04:4d:
4d:d2:29:e4:95:a9:ad:77:3c:84:ac:53:86:cf:c5:fd:51:29:
86:cd:08:62:db:fc:46:cb:e7:55:c7:c7:e3:56:50:f0:57:72:
cf:84:8a:b6:61:21:5a:29:ba:22:a8:d5:5c:7b:aa:69:f3:65:
de:7f:ed:8d:b3:00:af:a1:f5:1d:1a:74:f9:1e:53:2e:42:21:
06:f7:ec:b8:33:e3:41:e7:0d:c9:cf:91:10:7f:f6:d9:85:91:
36:37:df:a7:64:76:3a:f6:a7:94:22:86:1f:11:15:23:56:ea:
31:06:77:a2:f4:8b:fc:b5:ca:7e:95:31:94:30:fe:16:ac:16:
ad:c1:87:47:be:32:90:53:c2:ca:63:ec:fe:65:bb:be:4f:75:
80:56:85:b3:d9:c9:74:5a:72:fc:27:91:7c:e3:2e:b6:59:51:
36:f4:74:64:e9:ff:c6:ff:1c:5e:8b:7e:bb:f4:45:74:80:25:
ed:28:cb:ef:71:77:05:01:e7:c4:e7:24:12:46:5d:53:50:a1:
79:0a:73:ef:9f:71:39:c1:ed:24:de:1b:02:45:3a:20:08:06:
1c:59:b3:c4:e0:f1:ac:bd:20:63:e5:da:f6:47:f3:76:20:59:
39:0f:97:46
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY84AY28ADbSPqMudXUGkzwZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwNTAyMDYzMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGMxMmQzNmRmYWIwMmZhNmVjNmU1MzkzNmQ0ZmE5OWU5NTU1MWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+Kz9v1GclW35mXyt1iITRaB3GrU
R1rp/EyPoBnRCPy4a37ucy84jBv5e/E4PaD92ttnA+RjJgOKO9N89v3u+D/+JYAC
EtH+jN1pQNHpOnhIcTe0qrj4bKgIZpiCzfiFO6FBUmta/osGa5KE9m0zvLps/1jW
34FmvQFUynSdR3xVHUSeEV+2VYn67zJ0P6+ik2Ds8PRWGdxPhZktimM60eWLdZMn
uO8mHi0VSVZQl+mSax0tO3NlLC+9KdKhOk1jhGeVMj7tBg+q9i9L5t84t15kuubu
aKmpBerUreABB3com2B2DTSnbAJtBMvbDqmbzshCIoHqrf3k26IPex79lwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEDBLTbfqwL6bsblOTbU+pnpVVGvMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvUU1FdE50LXJBdnB1eHVVNU50VDZtZWxWVWE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwXwHAwQA
wlf1AwQBw4VcMA0GCSqGSIb3DQEBCwUAA4IBAQAL0wLCXz8b7aZdcwUjkr0DBE1N
0inklamtdzyErFOGz8X9USmGzQhi2/xGy+dVx8fjVlDwV3LPhIq2YSFaKboiqNVc
e6pp82Xef+2NswCvofUdGnT5HlMuQiEG9+y4M+NB5w3Jz5EQf/bZhZE2N9+nZHY6
9qeUIoYfERUjVuoxBnei9Iv8tcp+lTGUMP4WrBatwYdHvjKQU8LKY+z+Zbu+T3WA
VoWz2cl0WnL8J5F84y62WVE29HRk6f/G/xxei3679EV0gCXtKMvvcXcFAefE5yQS
Rl1TUKF5CnPvn3E5we0k3hsCRTogCAYcWbPE4PGsvSBj5dr2R/N2IFk5D5dG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:15 2024 by rpki-client on console-fra.rpki-client.org