Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QPeynwlIt18AkgtH877uXwPcnQI.roa
File: QPeynwlIt18AkgtH877uXwPcnQI.roa (raw, json)
Hash identifier: Td7/Q/4cIA+njxP60GKHSWleMYRNbxMFqnvGFYpQdJ8=
Subject key identifier: 40:F7:B2:9F:09:48:B7:5F:00:92:0B:47:F3:BE:EE:5F:03:DC:9D:02
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01859BDE5F1E16A717712E58B71792F0F828
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QPeynwlIt18AkgtH877uXwPcnQI.roa
Signing time: Tue 10 Jan 2023 13:28:39 +0000
ROA not before: Tue 10 Jan 2023 13:28:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 45.8.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Feb 2023 14:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:de:5f:1e:16:a7:17:71:2e:58:b7:17:92:f0:f8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 10 13:28:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40f7b29f0948b75f00920b47f3beee5f03dc9d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:21:94:93:52:1a:b8:7a:89:33:61:a0:9d:58:
f3:47:07:68:ff:a9:ed:79:3d:df:bb:91:9b:5b:82:
2c:b6:dc:95:69:21:4c:dc:db:e7:54:d0:d8:49:46:
a5:07:94:8b:76:d4:af:ff:b3:cf:98:d2:b0:36:8b:
10:26:01:3a:7e:44:be:f8:11:54:cf:e3:ca:02:a8:
5f:a4:ff:bb:2e:fd:79:44:8d:ee:e3:fe:29:eb:27:
5b:d1:63:97:76:6d:64:7a:bc:89:a3:4d:f9:ec:11:
f4:d3:73:f5:3f:17:3e:e3:92:9d:15:23:68:1f:90:
3f:e0:0c:26:8e:ff:33:88:4c:35:8c:ea:c4:2a:b8:
16:80:b9:f7:72:17:7f:23:76:71:52:aa:87:75:43:
d9:ef:b3:8b:79:df:56:a4:30:55:86:12:e6:29:82:
30:a1:2b:ad:2b:19:e4:d2:06:a3:35:72:2f:0e:8f:
a3:c0:c6:78:9d:f6:44:17:7a:9f:5d:a4:ea:a7:5c:
ef:43:43:3d:25:a9:9f:96:ef:ea:d1:c2:17:a5:4e:
41:a8:70:33:2d:1a:3d:4c:b4:f0:f0:ca:aa:6c:dd:
db:e6:f3:bf:f9:38:f3:06:c6:54:c2:0d:3f:f8:64:
0e:15:2a:00:f0:2f:2c:df:b2:ff:f3:64:be:24:41:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F7:B2:9F:09:48:B7:5F:00:92:0B:47:F3:BE:EE:5F:03:DC:9D:02
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QPeynwlIt18AkgtH877uXwPcnQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
Signature Algorithm: sha256WithRSAEncryption
94:25:9e:f0:3d:fd:05:dd:8c:fb:9d:14:2c:9b:d2:60:56:f8:
18:77:be:2c:04:21:de:5d:b7:18:cc:f2:12:a7:40:11:49:4c:
a7:84:96:7d:eb:99:a6:be:d8:ec:93:df:62:ce:7c:33:97:82:
08:da:57:ec:01:2d:ee:1c:5f:97:cc:83:c5:dc:82:fd:46:10:
99:58:3a:44:17:61:2c:19:14:b1:16:d8:5e:b5:c5:c7:2f:fd:
e5:1c:c3:1a:65:9c:c3:f4:83:aa:ab:00:02:ed:79:ce:53:30:
2d:44:44:11:b0:39:0e:9e:36:62:c0:41:12:6c:e4:90:6d:5b:
4b:50:35:77:70:42:2e:a2:61:bb:1f:5a:d8:cf:8f:27:62:35:
cf:88:15:63:7b:db:c0:f7:27:a6:fc:8d:6d:67:4b:b0:db:88:
ff:d9:ac:03:5e:b3:b4:d3:83:83:1d:87:e1:58:0c:48:01:df:
95:c8:a6:68:d9:d7:ad:1f:33:36:da:b8:cd:d0:bb:df:b3:d2:
e0:88:3a:c4:3b:e5:95:e7:ad:4f:4e:bd:ba:5d:39:f0:70:4d:
84:17:3a:bb:b1:0b:9d:cf:2d:f1:60:72:e6:e6:a6:e3:ee:ea:
c6:ed:cf:2a:50:bc:c6:85:d9:8c:d0:9e:70:8e:2c:10:a8:1e:
8b:ca:75:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWb3l8eFqcXcS5YtxeS8PgoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTEwMTMyODM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGY3YjI5ZjA5NDhiNzVmMDA5MjBiNDdmM2JlZWU1ZjAzZGM5ZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSGUk1IauHqJM2GgnVjzRwdo/6nt
eT3fu5GbW4IsttyVaSFM3NvnVNDYSUalB5SLdtSv/7PPmNKwNosQJgE6fkS++BFU
z+PKAqhfpP+7Lv15RI3u4/4p6ydb0WOXdm1keryJo0357BH003P1Pxc+45KdFSNo
H5A/4Awmjv8ziEw1jOrEKrgWgLn3chd/I3ZxUqqHdUPZ77OLed9WpDBVhhLmKYIw
oSutKxnk0gajNXIvDo+jwMZ4nfZEF3qfXaTqp1zvQ0M9Jamflu/q0cIXpU5BqHAz
LRo9TLTw8MqqbN3b5vO/+TjzBsZUwg0/+GQOFSoA8C8s37L/82S+JEH85wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFED3sp8JSLdfAJILR/O+7l8D3J0CMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUVBleW53bEl0MThBa2d0SDg3N3VYd1BjblFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQhdMA0G
CSqGSIb3DQEBCwUAA4IBAQCUJZ7wPf0F3Yz7nRQsm9JgVvgYd74sBCHeXbcYzPIS
p0ARSUynhJZ965mmvtjsk99iznwzl4II2lfsAS3uHF+XzIPF3IL9RhCZWDpEF2Es
GRSxFthetcXHL/3lHMMaZZzD9IOqqwAC7XnOUzAtREQRsDkOnjZiwEESbOSQbVtL
UDV3cEIuomG7H1rYz48nYjXPiBVje9vA9yem/I1tZ0uw24j/2awDXrO004ODHYfh
WAxIAd+VyKZo2detHzM22rjN0Lvfs9LgiDrEO+WV561PTr26XTnwcE2EFzq7sQud
zy3xYHLm5qbj7urG7c8qULzGhdmM0J5wjiwQqB6LynVk
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:32 2024 by rpki-client on console-ams.rpki-client.org