Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qkRm_Cqzuyq6KcYBDyqmAGpiyqc.roa
File: qkRm_Cqzuyq6KcYBDyqmAGpiyqc.roa (raw, json)
Hash identifier: EDXiSkovL7a9KDq6DONYdsNNmHdDqa5JgnndE01zitU=
Subject key identifier: AA:44:66:FC:2A:B3:BB:2A:BA:29:C6:01:0F:2A:A6:00:6A:62:CA:A7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01889A2ABDC4C9CCA3A5A381AC4A524B7724
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qkRm_Cqzuyq6KcYBDyqmAGpiyqc.roa
Signing time: Thu 08 Jun 2023 08:41:12 +0000
ROA not before: Thu 08 Jun 2023 08:41:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 94.103.124.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:2a:bd:c4:c9:cc:a3:a5:a3:81:ac:4a:52:4b:77:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 8 08:41:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa4466fc2ab3bb2aba29c6010f2aa6006a62caa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:fd:a5:a2:b2:4e:dc:85:0f:3d:24:ed:e6:
dd:39:c7:5a:1c:16:0f:61:0b:e3:6b:d6:c4:01:47:
6e:f1:2f:cb:12:7d:4a:93:99:39:0c:dc:58:57:d7:
46:d2:7c:7b:bb:03:a6:e5:e6:02:ca:df:4a:6b:90:
0a:88:68:ad:da:25:2d:21:6e:d8:9a:72:b8:9d:91:
38:cd:9b:25:dd:5b:fb:7c:ac:36:e7:aa:9a:72:ca:
d7:a4:c5:22:34:83:43:71:e9:44:20:59:15:ec:28:
89:cc:8e:e3:83:ac:1b:8d:de:c2:9f:85:60:0d:66:
15:cc:92:e2:51:e4:b9:80:7b:67:6b:02:de:76:93:
d6:ec:99:27:45:3d:14:87:b1:3d:f2:ef:49:c9:b8:
64:05:2d:98:72:9e:d5:3c:e5:54:35:55:6d:b7:5b:
12:d3:3c:07:6e:86:d2:4b:9a:3c:db:22:1d:63:ad:
14:2f:97:a8:88:28:1f:ce:60:00:83:36:85:17:ad:
ca:ee:9b:2f:27:8d:72:a5:f8:ae:13:9b:a1:a0:b5:
b6:7f:d0:b3:98:7d:48:71:85:b9:b6:46:e9:c0:56:
43:b1:58:64:c5:b6:c5:1d:e0:80:9f:f7:1f:64:bc:
2e:6d:ce:1c:60:26:77:87:c3:cf:4e:ef:a3:51:13:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:44:66:FC:2A:B3:BB:2A:BA:29:C6:01:0F:2A:A6:00:6A:62:CA:A7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qkRm_Cqzuyq6KcYBDyqmAGpiyqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.124.0/24
94.154.163.0/24
178.215.239.0/24
Signature Algorithm: sha256WithRSAEncryption
75:57:3b:05:31:cc:d0:eb:3e:22:40:67:b4:fb:9a:eb:ee:75:
ab:0d:d3:42:cd:11:d4:57:1d:85:b1:4a:d9:eb:ab:a3:63:90:
36:93:c5:e8:96:c2:9b:ec:51:9d:f7:89:b5:9f:99:91:6f:f0:
75:f6:26:bd:70:f5:fb:c3:3d:6a:71:bf:8b:d4:91:9c:f6:f5:
3e:93:43:42:52:86:c3:67:1b:df:95:4e:bf:3c:bb:53:93:10:
72:d1:7e:b4:84:c8:ac:56:5b:28:a7:95:78:2b:db:85:76:64:
7f:89:a5:27:37:83:28:6e:e9:1b:b9:2a:d0:31:77:b7:ce:94:
62:1d:90:9a:b8:a1:b3:60:7a:15:25:15:b1:e7:6b:9b:84:7a:
df:d4:9c:ad:44:9f:29:db:d4:5e:15:f7:d6:6d:c6:7d:c6:50:
c7:32:e3:9b:3f:79:8b:93:bd:8f:38:a3:eb:9d:06:db:b3:ce:
a3:6a:63:fb:ce:ab:ce:5d:fc:c2:67:0f:01:ed:f3:fd:08:1e:
2f:f3:97:3f:6f:a2:40:d4:7c:de:9a:7f:f2:c4:54:ef:70:1e:
e7:f7:3a:61:f6:a3:b0:d1:d5:d1:f7:ff:fe:b8:85:ff:51:5f:
ba:14:4e:60:8c:35:b6:37:ae:3f:f6:80:37:4c:2e:7e:36:0d:
d7:ad:e0:6a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYiaKr3EycyjpaOBrEpSS3ckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNjA4MDg0MTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTQ0NjZmYzJhYjNiYjJhYmEyOWM2MDEwZjJhYTYwMDZhNjJjYWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHD9paKyTtyFDz0k7ebdOcdaHBYP
YQvja9bEAUdu8S/LEn1Kk5k5DNxYV9dG0nx7uwOm5eYCyt9Ka5AKiGit2iUtIW7Y
mnK4nZE4zZsl3Vv7fKw256qacsrXpMUiNINDcelEIFkV7CiJzI7jg6wbjd7Cn4Vg
DWYVzJLiUeS5gHtnawLedpPW7JknRT0Uh7E98u9JybhkBS2Ycp7VPOVUNVVtt1sS
0zwHbobSS5o82yIdY60UL5eoiCgfzmAAgzaFF63K7psvJ41ypfiuE5uhoLW2f9Cz
mH1IcYW5tkbpwFZDsVhkxbbFHeCAn/cfZLwubc4cYCZ3h8PPTu+jURP0+wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKpEZvwqs7squinGAQ8qpgBqYsqnMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcWtSbV9DcXp1eXE2S2NZQkR5cW1BR3BpeXFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXmd8AwQA
XpqjAwQAstfvMA0GCSqGSIb3DQEBCwUAA4IBAQB1VzsFMczQ6z4iQGe0+5rr7nWr
DdNCzRHUVx2FsUrZ66ujY5A2k8XolsKb7FGd94m1n5mRb/B19ia9cPX7wz1qcb+L
1JGc9vU+k0NCUobDZxvflU6/PLtTkxBy0X60hMisVlsop5V4K9uFdmR/iaUnN4Mo
bukbuSrQMXe3zpRiHZCauKGzYHoVJRWx52ubhHrf1JytRJ8p29ReFffWbcZ9xlDH
MuObP3mLk72POKPrnQbbs86jamP7zqvOXfzCZw8B7fP9CB4v85c/b6JA1Hzemn/y
xFTvcB7n9zph9qOw0dXR9//+uIX/UV+6FE5gjDW2N64/9oA3TC5+Ng3XreBq
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org