Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qyshpl4ZdVjpnik8fff54WxuyzE.roa
File: qyshpl4ZdVjpnik8fff54WxuyzE.roa (raw, json)
Hash identifier: d39URjIxBN+rYSdkb6s7eBbFvJxUJEJwqCqF9nPmr7I=
Subject key identifier: AB:2B:21:A6:5E:19:75:58:E9:9E:29:3C:7D:F7:F9:E1:6C:6E:CB:31
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018917782A34EE79E5290AB98C9254BC0AFF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qyshpl4ZdVjpnik8fff54WxuyzE.roa
Signing time: Sun 02 Jul 2023 16:38:18 +0000
ROA not before: Sun 02 Jul 2023 16:38:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49316
IP address blocks: 193.124.6.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 15:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:17:78:2a:34:ee:79:e5:29:0a:b9:8c:92:54:bc:0a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 2 16:38:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab2b21a65e197558e99e293c7df7f9e16c6ecb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:1f:78:36:6e:c9:84:b8:00:6f:14:f5:9a:
9b:78:fb:40:30:c5:08:fc:5d:b4:8b:d8:e4:b0:4e:
19:41:0d:30:8d:f8:47:ab:13:20:ba:af:44:82:fd:
2e:cc:c0:59:c5:d9:e7:21:78:60:81:43:ff:b1:83:
b2:b9:48:f3:27:73:98:c9:0b:d9:77:45:3f:1c:ad:
73:ad:27:49:d9:67:d7:aa:91:45:a4:02:c6:5c:16:
b9:8f:b1:f8:27:23:ea:97:39:a6:47:c6:48:40:4e:
fa:1e:b2:ac:fc:93:5e:5b:04:51:bc:a7:cb:fa:94:
25:4f:1e:da:1e:cd:03:4c:91:82:40:d6:1d:ed:26:
8b:cf:2d:73:4b:62:06:a6:04:a5:03:88:2c:d9:8b:
70:8d:79:bd:06:5e:49:5f:99:0c:ec:3a:a3:e7:c9:
a7:9f:74:03:50:b6:df:b2:9d:6a:09:15:58:ab:28:
b2:99:4b:aa:5e:a4:53:a1:36:62:a4:a8:15:cf:c9:
79:14:e3:b7:db:f6:3c:65:bb:a3:6c:6b:8e:19:4b:
bb:bb:1d:2a:45:9d:2d:21:33:a2:95:fb:9c:35:fb:
09:71:7c:ac:6d:d6:64:15:7e:8d:d5:03:80:5e:bc:
61:02:c2:2e:ee:67:4b:f1:6b:fb:0a:aa:d0:0b:85:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2B:21:A6:5E:19:75:58:E9:9E:29:3C:7D:F7:F9:E1:6C:6E:CB:31
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qyshpl4ZdVjpnik8fff54WxuyzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.6.0/24
194.87.30.0/24
212.192.7.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:51:d6:0c:52:5d:79:c2:2d:ed:1d:85:b0:59:27:04:74:6b:
46:95:f4:bc:96:0c:a6:4a:4a:fd:7e:fb:ee:8c:27:63:7d:cc:
a6:a2:37:b0:6b:e9:95:13:5e:96:f0:77:0e:66:e2:93:f3:31:
70:ad:78:07:f6:21:55:97:c8:a0:a8:40:2a:50:ca:1f:aa:47:
c5:e3:f0:89:ee:ac:69:a6:f5:fe:ab:21:19:ff:e2:c6:87:f2:
41:49:0c:21:1a:ea:ba:17:a5:31:c6:1b:5d:35:50:bf:c5:6b:
c6:c1:8a:75:44:df:31:9a:a3:c5:53:11:58:87:33:db:0e:2b:
ef:74:3d:43:ad:36:69:a9:c0:04:7e:39:76:f9:3a:3d:e9:d0:
26:5b:fb:fb:79:69:5a:0f:67:74:93:9c:03:fc:64:12:82:09:
af:de:eb:ad:35:c4:2c:00:a1:fd:23:6f:b6:f0:53:9b:b6:e8:
1a:4e:57:6e:80:84:82:3d:74:25:24:f0:49:3a:e5:2b:71:b5:
ec:07:3d:a1:cf:46:3d:64:16:54:b6:64:63:02:b5:75:69:62:
df:c6:75:28:d2:67:02:35:16:00:7e:03:d7:ea:ba:ec:b3:4a:
a4:8a:c4:96:89:eb:ef:15:90:f6:17:fc:90:55:f9:a6:ed:37:
6c:0e:f7:c6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYkXeCo07nnlKQq5jJJUvAr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNzAyMTYzODE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjJiMjFhNjVlMTk3NTU4ZTk5ZTI5M2M3ZGY3ZjllMTZjNmVjYjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkEfeDZuyYS4AG8U9ZqbePtAMMUI
/F20i9jksE4ZQQ0wjfhHqxMguq9Egv0uzMBZxdnnIXhggUP/sYOyuUjzJ3OYyQvZ
d0U/HK1zrSdJ2WfXqpFFpALGXBa5j7H4JyPqlzmmR8ZIQE76HrKs/JNeWwRRvKfL
+pQlTx7aHs0DTJGCQNYd7SaLzy1zS2IGpgSlA4gs2YtwjXm9Bl5JX5kM7Dqj58mn
n3QDULbfsp1qCRVYqyiymUuqXqRToTZipKgVz8l5FOO32/Y8ZbujbGuOGUu7ux0q
RZ0tITOilfucNfsJcXysbdZkFX6N1QOAXrxhAsIu7mdL8Wv7CqrQC4WpIQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKsrIaZeGXVY6Z4pPH33+eFsbssxMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvcXlzaHBsNFpkVmpwbmlrOGZmZjU0V3h1eXpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwXwGAwQA
wlceAwQA1MAHMA0GCSqGSIb3DQEBCwUAA4IBAQB6UdYMUl15wi3tHYWwWScEdGtG
lfS8lgymSkr9fvvujCdjfcymojewa+mVE16W8HcOZuKT8zFwrXgH9iFVl8igqEAq
UMofqkfF4/CJ7qxppvX+qyEZ/+LGh/JBSQwhGuq6F6UxxhtdNVC/xWvGwYp1RN8x
mqPFUxFYhzPbDivvdD1DrTZpqcAEfjl2+To96dAmW/v7eWlaD2d0k5wD/GQSggmv
3uutNcQsAKH9I2+28FObtugaTldugISCPXQlJPBJOuUrcbXsBz2hz0Y9ZBZUtmRj
ArV1aWLfxnUo0mcCNRYAfgPX6rrss0qkisSWievvFZD2F/yQVfmm7TdsDvfG
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:47 2024 by rpki-client on console-ams.rpki-client.org