Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QwZ58CoA35maPcxlioT-WAZOdQU.roa
File: QwZ58CoA35maPcxlioT-WAZOdQU.roa (raw, json)
Hash identifier: GP7e25S61BvkDyu6c4CT2oIk796VvXKonEZkfNL5pFk=
Subject key identifier: 43:06:79:F0:2A:00:DF:99:9A:3D:CC:65:8A:84:FE:58:06:4E:75:05
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D1C5A8AA84DAB9EB9B977F897DBFFA280
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QwZ58CoA35maPcxlioT-WAZOdQU.roa
Signing time: Thu 18 Jan 2024 11:35:12 +0000
ROA not before: Thu 18 Jan 2024 11:35:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50738
IP address blocks: 37.139.130.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 06:35:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:5a:8a:a8:4d:ab:9e:b9:b9:77:f8:97:db:ff:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 18 11:35:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=430679f02a00df999a3dcc658a84fe58064e7505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:72:90:9d:ba:64:d0:ae:e6:62:77:ac:8a:
45:78:9a:ad:56:1e:9a:8f:7d:33:4c:bb:b5:55:ce:
e2:df:21:ea:8d:08:1a:8a:2b:ef:1e:f7:05:55:f9:
21:bf:93:98:44:e3:75:64:8a:89:30:0a:72:b3:66:
43:e2:cc:96:46:31:ba:0b:32:e2:a5:b6:5c:3f:95:
0a:3e:a3:52:ff:6f:a9:0a:85:4d:83:6f:ba:0e:50:
ed:e1:ae:c7:a0:74:d1:e3:12:68:7e:ab:26:53:d3:
27:cf:95:e4:bd:c0:d9:c5:1d:72:db:f8:75:87:af:
8c:12:89:31:a6:e2:4a:72:80:0a:2d:82:1d:1a:31:
f7:87:84:a8:18:16:d0:75:d9:7c:98:7e:da:a2:da:
6a:c2:31:c7:95:2c:d6:b9:8f:64:e8:26:5c:ce:06:
fc:ee:a3:b4:d9:00:b1:e9:ee:54:98:5e:4c:b0:3e:
f6:97:8d:6a:ba:37:30:d8:3f:94:83:33:eb:20:73:
b2:95:bb:20:9c:2e:a3:4d:9e:44:40:45:13:df:c8:
fa:dc:d1:de:d3:a9:28:05:6f:c4:9e:dd:43:31:c9:
8a:2f:a0:8a:4c:61:98:0a:2c:08:85:a3:0a:30:5a:
a4:42:94:72:f6:ce:96:78:5c:c6:39:2e:ef:9b:fa:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:06:79:F0:2A:00:DF:99:9A:3D:CC:65:8A:84:FE:58:06:4E:75:05
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QwZ58CoA35maPcxlioT-WAZOdQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.129.84.0/24
45.141.158.0/24
79.110.61.0/24
81.161.239.0/24
87.121.124.0/23
87.121.162.0/24
91.200.192.0/22
171.22.17.0/24
171.22.31.0/24
193.25.216.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f4:67:81:01:b2:59:e7:f7:59:94:4f:83:b8:e8:58:98:a1:
75:f9:6d:97:64:61:df:48:10:66:f7:a5:16:02:41:c0:1f:19:
54:c6:c9:d8:bb:0e:f5:5c:52:d2:f6:8e:4f:42:d3:51:39:1c:
b3:03:48:49:d0:93:5d:88:c5:e1:5b:ff:eb:5e:b8:8a:39:ae:
5d:d1:eb:4c:04:4a:6c:6e:c5:df:89:d5:34:9b:3d:a1:38:fe:
88:29:cb:13:89:d1:31:fd:dd:20:55:66:00:97:d1:a8:93:88:
f0:88:4f:d3:19:9f:0f:a5:8b:09:e8:5d:7d:d4:27:55:0a:85:
28:53:61:23:6f:dc:05:33:eb:1b:bf:01:a4:4a:1e:09:0d:1b:
f2:ca:f2:83:6c:7f:ab:a7:04:25:bc:a6:fe:62:49:73:a6:64:
c9:52:16:4b:77:5a:c9:4b:47:54:b9:aa:03:7d:88:37:b2:c8:
30:db:c6:0e:ce:9d:05:66:70:fb:5c:5c:f1:d8:00:f0:cb:c8:
bc:0d:89:61:f2:b7:3e:df:69:06:fe:6d:ae:90:7e:4b:a3:04:
dd:39:d7:f8:ab:0d:b1:cd:76:1f:bc:17:35:d6:e5:a4:85:c5:
9e:ed:a3:ac:55:30:65:17:49:bd:f5:34:4b:2e:5b:df:6e:6f:
71:89:9b:71
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAY0cWoqoTaueubl3+Jfb/6KAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTE4MTEzNTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzA2NzlmMDJhMDBkZjk5OWEzZGNjNjU4YTg0ZmU1ODA2NGU3NTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOlykJ26ZNCu5mJ3rIpFeJqtVh6a
j30zTLu1Vc7i3yHqjQgaiivvHvcFVfkhv5OYRON1ZIqJMApys2ZD4syWRjG6CzLi
pbZcP5UKPqNS/2+pCoVNg2+6DlDt4a7HoHTR4xJofqsmU9Mnz5XkvcDZxR1y2/h1
h6+MEokxpuJKcoAKLYIdGjH3h4SoGBbQddl8mH7aotpqwjHHlSzWuY9k6CZczgb8
7qO02QCx6e5UmF5MsD72l41qujcw2D+UgzPrIHOylbsgnC6jTZ5EQEUT38j63NHe
06koBW/Ent1DMcmKL6CKTGGYCiwIhaMKMFqkQpRy9s6WeFzGOS7vm/p+WQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFEMGefAqAN+Zmj3MZYqE/lgGTnUFMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUXdaNThDb0EzNW1hUGN4bGlvVC1XQVpPZFFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAJYuCAwQA
LYFUAwQALY2eAwQAT249AwQAUaHvAwQBV3l8AwQAV3miAwQCW8jAAwQAqxYRAwQA
qxYfAwQAwRnYMA0GCSqGSIb3DQEBCwUAA4IBAQBT9GeBAbJZ5/dZlE+DuOhYmKF1
+W2XZGHfSBBm96UWAkHAHxlUxsnYuw71XFLS9o5PQtNRORyzA0hJ0JNdiMXhW//r
XriKOa5d0etMBEpsbsXfidU0mz2hOP6IKcsTidEx/d0gVWYAl9Gok4jwiE/TGZ8P
pYsJ6F191CdVCoUoU2Ejb9wFM+sbvwGkSh4JDRvyyvKDbH+rpwQlvKb+YklzpmTJ
UhZLd1rJS0dUuaoDfYg3ssgw28YOzp0FZnD7XFzx2ADwy8i8DYlh8rc+32kG/m2u
kH5LowTdOdf4qw2xzXYfvBc11uWkhcWe7aOsVTBlF0m99TRLLlvfbm9xiZtx
-----END CERTIFICATE-----
Generated at Wed Feb 28 11:28:43 2024 by rpki-client on console-ams.rpki-client.org