Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qqZn_ISIYtfiaK-1kofdLFlCgM0.roa
File: qqZn_ISIYtfiaK-1kofdLFlCgM0.roa (raw, json)
Hash identifier: 84Lvv9tcXon6XIg4VSAsw7C+MS3jc+7uz9s11yDlnKo=
Subject key identifier: AA:A6:67:FC:84:88:62:D7:E2:68:AF:B5:92:87:DD:2C:59:42:80:CD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B37AF70DA8A35C5D72506320137AA6527
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qqZn_ISIYtfiaK-1kofdLFlCgM0.roa
Signing time: Mon 16 Oct 2023 08:52:06 +0000
ROA not before: Mon 16 Oct 2023 08:52:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 79.110.50.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
185.226.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:af:70:da:8a:35:c5:d7:25:06:32:01:37:aa:65:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 16 08:52:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaa667fc848862d7e268afb59287dd2c594280cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:a3:0c:80:bd:9e:71:23:1c:70:35:6e:4b:
97:9a:e0:40:92:5e:a5:36:45:9b:17:04:ba:78:c1:
60:83:cb:e8:04:8e:47:d8:fc:53:cc:29:5c:6e:00:
18:23:e2:8f:ba:e3:f3:14:27:3b:5d:12:73:49:a7:
d6:1c:b7:99:c2:9f:f2:6a:98:ca:54:26:c3:da:73:
9b:46:30:fa:0c:cf:f1:59:f8:6c:82:62:d8:ad:3f:
ba:b1:8f:0d:30:48:d8:28:62:03:eb:ed:13:60:98:
ff:23:0c:27:dd:78:65:3f:7b:94:33:32:ac:aa:ae:
eb:9d:c5:39:9d:07:c0:23:b5:7f:1f:7e:0b:10:bb:
c4:d4:95:e5:9e:af:03:36:1b:75:51:54:57:75:88:
81:c1:93:21:6f:03:66:96:78:de:26:5e:5e:31:fb:
d9:25:35:58:2b:9e:56:d0:68:9b:e8:ba:fb:dc:8c:
ae:ee:1e:2f:ff:7a:76:19:36:52:71:9f:4d:a8:fd:
f0:c8:5f:a1:d0:37:fe:05:c6:2d:c7:2d:ec:4f:67:
3f:10:c9:9e:f3:24:6d:02:0d:4a:02:47:3f:68:93:
93:db:de:b1:b9:72:ef:95:80:9d:0d:b1:77:09:d8:
b1:6b:c0:a1:2a:36:b8:45:ef:7b:03:1a:08:ea:4e:
e1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A6:67:FC:84:88:62:D7:E2:68:AF:B5:92:87:DD:2C:59:42:80:CD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qqZn_ISIYtfiaK-1kofdLFlCgM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.50.0/24
94.156.176.0/24
178.215.237.0/24
185.226.173.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a5:b4:8a:84:fb:d0:0e:18:17:b4:80:18:7e:cb:71:5a:ca:
d1:f1:9a:8f:58:cb:89:8b:b5:ee:39:78:07:fe:32:16:48:6f:
db:9d:a7:f0:cf:71:65:ec:f2:9f:ce:5b:ad:75:25:ad:f6:40:
87:bf:f2:84:5c:16:f4:ee:fa:73:16:02:eb:6c:ff:25:87:3d:
6e:a0:12:87:ed:06:11:06:a4:b0:64:0b:44:d5:31:23:85:c2:
2b:59:e7:a8:e3:74:53:14:23:6d:c5:59:8e:2c:06:ca:e6:cf:
c1:71:0e:b9:1c:a8:14:8f:c5:f6:0f:fc:e6:e9:7a:44:9e:8c:
d3:43:7c:d1:14:9b:c1:04:64:57:29:ed:5a:dc:45:6f:ff:cd:
69:53:b3:e5:e1:7e:1c:c2:4f:68:b7:66:94:bd:52:b9:1b:14:
0c:1c:ef:9f:c6:6c:d2:44:70:91:19:b1:3a:e1:8b:55:13:f2:
ca:c7:43:8c:f6:23:88:93:f5:79:e1:45:15:83:f0:01:d0:da:
da:9c:a3:25:fb:bd:8c:a5:b0:1d:d4:53:16:65:66:3f:bb:05:
7e:d3:14:89:45:45:7b:f0:02:0d:ec:4e:01:2e:21:87:d2:3e:
83:77:f2:ce:44:15:ad:af:9b:02:cd:9f:f8:13:9b:25:31:ae:
72:c6:4c:e6
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYs3r3DaijXF1yUGMgE3qmUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMDE2MDg1MjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWE2NjdmYzg0ODg2MmQ3ZTI2OGFmYjU5Mjg3ZGQyYzU5NDI4MGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTqjDIC9nnEjHHA1bkuXmuBAkl6l
NkWbFwS6eMFgg8voBI5H2PxTzClcbgAYI+KPuuPzFCc7XRJzSafWHLeZwp/yapjK
VCbD2nObRjD6DM/xWfhsgmLYrT+6sY8NMEjYKGID6+0TYJj/Iwwn3XhlP3uUMzKs
qq7rncU5nQfAI7V/H34LELvE1JXlnq8DNht1UVRXdYiBwZMhbwNmlnjeJl5eMfvZ
JTVYK55W0Gib6Lr73Iyu7h4v/3p2GTZScZ9NqP3wyF+h0Df+BcYtxy3sT2c/EMme
8yRtAg1KAkc/aJOT296xuXLvlYCdDbF3Cdixa8ChKja4Re97AxoI6k7huQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKqmZ/yEiGLX4mivtZKH3SxZQoDNMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcXFabl9JU0lZdGZpYUstMWtvZmRMRmxDZ00wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAT24yAwQA
XpywAwQAstftAwQAueKtMA0GCSqGSIb3DQEBCwUAA4IBAQBCpbSKhPvQDhgXtIAY
fstxWsrR8ZqPWMuJi7XuOXgH/jIWSG/bnafwz3Fl7PKfzlutdSWt9kCHv/KEXBb0
7vpzFgLrbP8lhz1uoBKH7QYRBqSwZAtE1TEjhcIrWeeo43RTFCNtxVmOLAbK5s/B
cQ65HKgUj8X2D/zm6XpEnozTQ3zRFJvBBGRXKe1a3EVv/81pU7Pl4X4cwk9ot2aU
vVK5GxQMHO+fxmzSRHCRGbE64YtVE/LKx0OM9iOIk/V54UUVg/AB0NranKMl+72M
pbAd1FMWZWY/uwV+0xSJRUV78AIN7E4BLiGH0j6Dd/LORBWtr5sCzZ/4E5slMa5y
xkzm
-----END CERTIFICATE-----
Generated at Mon Oct 16 10:07:34 2023 by rpki-client on console-ams.rpki-client.org