Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QslE7AeNuBR0Jt1Po8PhWNwFqHc.roa
File: QslE7AeNuBR0Jt1Po8PhWNwFqHc.roa (raw, json)
Hash identifier: 5tccggIS7O866ifsCZ89L6Wk7xeA2UFcD+uJMoiPq3Q=
Subject key identifier: 42:C9:44:EC:07:8D:B8:14:74:26:DD:4F:A3:C3:E1:58:DC:05:A8:77
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BAA300F292518BA0CFC9463C042C9F251
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QslE7AeNuBR0Jt1Po8PhWNwFqHc.roa
Signing time: Tue 07 Nov 2023 14:29:18 +0000
ROA not before: Tue 07 Nov 2023 14:29:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:30:0f:29:25:18:ba:0c:fc:94:63:c0:42:c9:f2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 7 14:29:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42c944ec078db8147426dd4fa3c3e158dc05a877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:e1:ee:54:46:0f:e6:d2:8a:52:56:88:1b:
6d:0e:d5:ee:bf:7f:4d:e2:a2:93:5c:6b:78:53:b9:
29:88:b5:f7:cb:fb:7d:37:06:66:0c:b6:68:5c:c0:
5e:ab:c8:9a:09:b1:2b:9d:5a:95:79:40:2f:ab:ea:
7b:90:b6:fb:d9:6c:59:d3:2c:92:e9:45:c2:56:80:
06:ae:f6:9b:f8:39:7d:0b:64:ce:16:84:71:a1:b9:
d9:d8:4e:61:0d:d0:fa:9a:15:3d:0d:94:c5:69:8a:
98:77:ba:66:9a:cf:f5:92:7e:fb:93:b2:48:e2:e7:
58:09:ff:01:58:a4:93:fd:27:96:a9:6f:cd:cd:3a:
81:7c:49:29:f7:52:99:96:e4:f3:9c:9c:25:67:c9:
01:2a:70:38:16:2c:06:64:e7:5a:7f:d7:1d:e4:9f:
e8:2e:06:09:cc:59:04:3a:5c:10:58:a4:84:1a:31:
ab:6f:a5:ca:0e:73:c3:fb:4d:a6:3e:de:c7:67:8b:
c7:a7:57:73:e1:2e:9e:cb:5c:b5:63:5a:c6:42:19:
f1:67:46:e0:87:69:a4:74:fa:cd:4e:91:e3:6c:1d:
18:56:88:35:b2:b3:5f:b7:e0:86:20:93:f9:2c:f0:
3b:3b:45:5f:71:76:af:e1:2b:a7:b0:b4:89:c0:a1:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C9:44:EC:07:8D:B8:14:74:26:DD:4F:A3:C3:E1:58:DC:05:A8:77
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QslE7AeNuBR0Jt1Po8PhWNwFqHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.200.0/24
195.58.35.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:0e:eb:c4:e0:0e:cf:5b:e5:64:fd:9a:7a:bf:e0:a1:e6:4d:
ec:8e:05:6e:38:60:29:5b:21:4a:d5:01:53:0a:6f:aa:e8:a8:
27:e7:08:4a:09:99:d0:91:82:d2:a2:fe:01:7e:c0:d1:95:fc:
65:df:39:2d:8c:22:96:01:7e:d7:cf:6b:65:7c:f5:13:a0:19:
27:75:b3:90:20:84:f4:4e:82:dd:e9:17:b3:60:47:5e:87:79:
14:28:63:05:cc:52:2b:4d:fb:e8:82:aa:3e:34:43:3b:b8:84:
fa:c7:51:0b:07:a1:6a:8e:b3:0a:6e:5b:75:0c:f9:ba:57:b3:
9e:c0:0c:23:5b:12:1b:fc:cc:3c:f5:00:9a:7e:f8:ca:74:46:
a1:8f:a1:f4:eb:21:4e:40:80:96:5e:c0:4d:ad:3e:d1:46:bd:
4e:75:ff:b5:2b:08:97:7e:28:35:72:42:60:41:36:2c:6d:ff:
df:d0:64:f8:c6:90:b6:cd:de:f5:46:b9:f1:7b:07:2a:14:f0:
2f:3d:ca:9f:df:0b:fc:dc:bb:69:db:87:89:12:bf:33:14:00:
a1:90:99:9c:0e:bc:9f:b4:ac:72:c8:b3:8c:18:4b:7d:69:a2:
25:5d:cd:50:97:76:48:22:08:34:76:69:45:c5:e3:26:7c:ea:
00:ff:fd:e7
-----BEGIN CERTIFICATE-----
MIIF6TCCBNGgAwIBAgISAYuqMA8pJRi6DPyUY8BCyfJRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMTA3MTQyOTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmM5NDRlYzA3OGRiODE0NzQyNmRkNGZhM2MzZTE1OGRjMDVhODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdnh7lRGD+bSilJWiBttDtXuv39N
4qKTXGt4U7kpiLX3y/t9NwZmDLZoXMBeq8iaCbErnVqVeUAvq+p7kLb72WxZ0yyS
6UXCVoAGrvab+Dl9C2TOFoRxobnZ2E5hDdD6mhU9DZTFaYqYd7pmms/1kn77k7JI
4udYCf8BWKST/SeWqW/NzTqBfEkp91KZluTznJwlZ8kBKnA4FiwGZOdaf9cd5J/o
LgYJzFkEOlwQWKSEGjGrb6XKDnPD+02mPt7HZ4vHp1dz4S6ey1y1Y1rGQhnxZ0bg
h2mkdPrNTpHjbB0YVog1srNft+CGIJP5LPA7O0VfcXav4SunsLSJwKEUdQIDAQAB
o4IC9TCCAvEwHQYDVR0OBBYEFELJROwHjbgUdCbdT6PD4VjcBah3MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvUXNsRTdBZU51QlIwSnQxUG84UGhXTndGcUhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCQYIKwYBBQUHAQcBAf8EgfkwgfYwgfMEAgABMIHsAwQA
wHyyAwQAwHy9AwQAwXwQAwQAwXxQAwQAwXyFAwQAwXzIAwQAwjovAwQAwjqaAwQA
wlcBMAwDBADCVwsDBADCVwwDBADCVxIDBADCVxUDBADCVx4DBADCVygDBADCVzgD
BADCV0kDBADCV1MDBADCV2gDBADCV2wDBAHCV3IDBADCV3oDBADCV3wDBADCV4MD
BAHCV4YDBADCV5cDBADCV6gDBADCV7MDBADCV8gDBADDOiMDBAHDOjoDBAHDOj4D
BADDhQADBAHDhQYDBADDhR4DBAHDhSgDBADDhUkDBAHDhVQDBADUwNYwDQYJKoZI
hvcNAQELBQADggEBAG4O68TgDs9b5WT9mnq/4KHmTeyOBW44YClbIUrVAVMKb6ro
qCfnCEoJmdCRgtKi/gF+wNGV/GXfOS2MIpYBftfPa2V89ROgGSd1s5AghPROgt3p
F7NgR16HeRQoYwXMUitN++iCqj40Qzu4hPrHUQsHoWqOswpuW3UM+bpXs57ADCNb
Ehv8zDz1AJp++Mp0RqGPofTrIU5AgJZewE2tPtFGvU51/7UrCJd+KDVyQmBBNixt
/9/QZPjGkLbN3vVGufF7ByoU8C89yp/fC/zcu2nbh4kSvzMUAKGQmZwOvJ+0rHLI
s4wYS31poiVdzVCXdkgiCDR2aUXF4yZ86gD//ec=
-----END CERTIFICATE-----
Generated at Tue Nov 14 10:29:14 2023 by rpki-client on console-ams.rpki-client.org