Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qmwgsoxeG8HdNopwzkua45uKjyc.roa
File: qmwgsoxeG8HdNopwzkua45uKjyc.roa (raw, json)
Hash identifier: jaEQZZE5SUFVtAqi82yh9QhH9DgGBCphZkb1BlFLElM=
Subject key identifier: AA:6C:20:B2:8C:5E:1B:C1:DD:36:8A:70:CE:4B:9A:E3:9B:8A:8F:27
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189DE8BA05F5E92C48D132A15FE3DAB07D5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qmwgsoxeG8HdNopwzkua45uKjyc.roa
Signing time: Thu 10 Aug 2023 08:23:59 +0000
ROA not before: Thu 10 Aug 2023 08:23:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 185.216.69.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 16:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:8b:a0:5f:5e:92:c4:8d:13:2a:15:fe:3d:ab:07:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 10 08:23:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa6c20b28c5e1bc1dd368a70ce4b9ae39b8a8f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6f:37:c6:8c:d7:fe:0f:d2:08:b2:f9:99:a2:
ef:a9:98:bf:61:56:5b:5a:7b:48:e3:f4:10:84:bb:
f0:d7:6d:5e:1e:9c:89:fe:f5:4d:63:f8:f6:5d:da:
be:88:67:2a:15:39:f8:96:38:c4:fb:ba:95:05:9a:
25:33:31:8c:6f:5c:b4:d8:5c:55:de:65:0a:c7:5a:
54:b1:10:04:aa:5d:11:47:29:38:5c:71:df:54:13:
04:9c:be:da:d1:b3:fb:fa:66:04:cb:22:67:14:a9:
31:e5:88:d6:9f:69:4c:6f:0d:20:80:b6:e4:ac:b4:
28:7a:fc:00:c3:90:54:06:85:6b:29:17:05:4f:08:
ba:3d:c1:e2:24:fb:f8:45:ef:c0:1d:3c:40:de:b8:
22:fd:99:86:78:80:3f:c4:c7:fe:1b:a7:4a:5e:ab:
dd:95:e3:be:7c:f3:1a:c5:bb:74:c3:fe:d1:36:eb:
16:47:c0:b0:82:00:26:34:5b:4e:c8:1d:9c:35:7b:
1e:e4:86:98:d5:57:b9:a3:d4:56:18:0a:df:67:28:
d3:e5:65:27:28:1f:0a:96:80:be:b8:b0:83:af:fa:
4d:77:b3:0c:ff:08:4f:64:4e:a6:67:53:7b:cf:56:
10:45:b0:34:dc:9a:24:b5:08:77:a8:34:b3:f9:5d:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6C:20:B2:8C:5E:1B:C1:DD:36:8A:70:CE:4B:9A:E3:9B:8A:8F:27
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qmwgsoxeG8HdNopwzkua45uKjyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.51.0/24
93.123.84.0/24
109.206.237.0/24
185.216.69.0/24
185.218.138.0/24
Signature Algorithm: sha256WithRSAEncryption
21:04:03:54:8e:8a:60:fe:2f:01:3d:04:9f:67:13:76:ee:53:
ea:0a:d9:e3:48:4a:38:52:0c:7f:26:54:7b:55:65:03:5a:8f:
61:39:97:97:91:b3:06:1d:6a:a1:d0:b2:f8:99:7b:cb:6a:5c:
76:08:16:6e:54:7f:f5:cf:b3:cd:9a:fc:9f:16:0c:67:4b:96:
46:8b:5a:db:59:1d:8d:5a:27:c5:23:65:63:de:ce:c6:24:04:
68:1d:d4:e7:8c:d8:ca:ba:b3:64:91:7c:15:fd:cd:27:a3:56:
74:2a:68:e5:f0:f0:6e:7a:fb:4d:30:ce:36:ca:61:8c:41:07:
79:78:c0:1a:e5:e9:e9:da:0f:78:66:c9:59:ca:df:15:a2:d0:
9d:f4:40:dd:d7:17:f2:9b:ea:ee:5d:56:6b:37:08:b3:5e:7b:
30:8b:9c:3d:c3:20:07:c9:9a:d4:89:67:a2:cc:4c:c4:11:1f:
4f:b2:80:18:79:b4:8f:a8:6c:15:91:e0:cc:d0:fb:ed:51:b8:
56:56:c5:94:f6:47:6d:31:9d:38:a5:4d:ef:83:0c:65:d4:62:
43:ca:a2:e2:02:15:61:2d:96:93:9a:ad:5e:59:03:9f:ab:f4:
0c:6f:83:70:47:ea:7e:e5:5b:3b:43:c6:32:ba:79:a3:7a:36:
e7:5d:88:8b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYnei6BfXpLEjRMqFf49qwfVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwODEwMDgyMzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTZjMjBiMjhjNWUxYmMxZGQzNjhhNzBjZTRiOWFlMzliOGE4ZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm283xozX/g/SCLL5maLvqZi/YVZb
WntI4/QQhLvw121eHpyJ/vVNY/j2Xdq+iGcqFTn4ljjE+7qVBZolMzGMb1y02FxV
3mUKx1pUsRAEql0RRyk4XHHfVBMEnL7a0bP7+mYEyyJnFKkx5YjWn2lMbw0ggLbk
rLQoevwAw5BUBoVrKRcFTwi6PcHiJPv4Re/AHTxA3rgi/ZmGeIA/xMf+G6dKXqvd
leO+fPMaxbt0w/7RNusWR8CwggAmNFtOyB2cNXse5IaY1Ve5o9RWGArfZyjT5WUn
KB8KloC+uLCDr/pNd7MM/whPZE6mZ1N7z1YQRbA03JoktQh3qDSz+V20BQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKpsILKMXhvB3TaKcM5LmuObio8nMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcW13Z3NveGVHOEhkTm9wd3prdWE0NXVLanljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUEwzAwQA
XXtUAwQAbc7tAwQAudhFAwQAudqKMA0GCSqGSIb3DQEBCwUAA4IBAQAhBANUjopg
/i8BPQSfZxN27lPqCtnjSEo4Ugx/JlR7VWUDWo9hOZeXkbMGHWqh0LL4mXvLalx2
CBZuVH/1z7PNmvyfFgxnS5ZGi1rbWR2NWifFI2Vj3s7GJARoHdTnjNjKurNkkXwV
/c0no1Z0Kmjl8PBuevtNMM42ymGMQQd5eMAa5enp2g94ZslZyt8VotCd9EDd1xfy
m+ruXVZrNwizXnswi5w9wyAHyZrUiWeizEzEER9PsoAYebSPqGwVkeDM0PvtUbhW
VsWU9kdtMZ04pU3vgwxl1GJDyqLiAhVhLZaTmq1eWQOfq/QMb4NwR+p+5Vs7Q8Yy
unmjejbnXYiL
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:44 2024 by rpki-client on console-ams.rpki-client.org