Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/_QTKMtrchdyZ2ZsPfosnTk4MPig.roa
File: _QTKMtrchdyZ2ZsPfosnTk4MPig.roa (raw, json)
Hash identifier: s7e2HKsqoqXvIUnjyiXhSdZCdu68VwjX75nIVOqnbU8=
Subject key identifier: FD:04:CA:32:DA:DC:85:DC:99:D9:9B:0F:7E:8B:27:4E:4E:0C:3E:28
Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial: 018570FBAEF592AE415B0FEBBA0C105C2331
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/_QTKMtrchdyZ2ZsPfosnTk4MPig.roa
Signing time: Mon 02 Jan 2023 05:37:00 +0000
ROA not before: Mon 02 Jan 2023 05:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199484
IP address blocks: 195.142.152.0/22 maxlen: 24
195.142.154.0/24 maxlen: 24
195.142.185.0/24 maxlen: 24
195.142.186.0/24 maxlen: 24
195.142.184.0/24 maxlen: 24
195.142.184.0/22 maxlen: 22
185.40.72.0/22 maxlen: 24
195.142.187.0/24 maxlen: 24
195.155.98.0/24 maxlen: 24
195.142.192.0/22 maxlen: 24
195.155.96.0/24 maxlen: 24
195.155.97.0/24 maxlen: 24
195.155.99.0/24 maxlen: 24
2a01:4c20::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ae:f5:92:ae:41:5b:0f:eb:ba:0c:10:5c:23:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
Validity
Not Before: Jan 2 05:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd04ca32dadc85dc99d99b0f7e8b274e4e0c3e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:b8:28:0c:26:fd:5c:3a:f5:62:06:47:7b:
b5:cd:96:15:7b:95:12:0a:ef:fd:e0:57:33:b3:e4:
af:66:f6:e5:65:11:ec:a6:57:38:55:22:cd:2d:b2:
63:86:f5:c2:5a:a7:93:75:7d:39:e8:5e:85:23:55:
77:2f:b4:64:1a:a6:0d:37:8a:8a:96:ab:a1:d9:b0:
c9:53:51:55:23:bc:21:46:65:a0:3d:31:73:70:8f:
46:c0:a6:32:5f:a6:3a:21:d6:06:93:25:0f:dd:d7:
14:73:4a:c0:73:92:9b:cd:a8:47:bc:35:b1:5b:4c:
c1:83:c1:a3:bd:ca:07:51:55:16:1b:ca:2a:ce:a3:
b2:4c:90:25:b3:e7:36:62:1b:05:f9:70:08:ca:c9:
f3:72:82:00:81:da:3e:84:4b:05:2c:fc:ff:3f:de:
f5:76:ae:e8:7f:ca:a9:8f:bd:86:75:c7:47:ff:95:
e9:c1:f9:be:32:86:b0:ff:7f:71:f2:64:4b:f5:b9:
53:2f:a7:d2:f8:16:67:88:97:02:35:57:a4:56:e4:
ed:ae:d7:3f:3b:8c:9c:26:a7:18:23:cd:18:4c:63:
cc:da:32:36:b2:8d:7c:87:fb:1f:b4:b7:70:c7:2d:
52:4c:58:aa:db:f7:7e:15:d5:1f:c7:d6:e8:89:5d:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:04:CA:32:DA:DC:85:DC:99:D9:9B:0F:7E:8B:27:4E:4E:0C:3E:28
X509v3 Authority Key Identifier:
keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/_QTKMtrchdyZ2ZsPfosnTk4MPig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.72.0/22
195.142.152.0/22
195.142.184.0/22
195.142.192.0/22
195.155.96.0/22
IPv6:
2a01:4c20::/29
Signature Algorithm: sha256WithRSAEncryption
77:1a:80:f2:3c:1d:f9:96:95:90:08:50:3a:c6:e8:30:f7:22:
74:0f:44:7b:89:bb:c4:89:78:88:6c:c8:9d:9a:35:4d:c9:f8:
d9:be:59:6a:fc:b2:3e:81:03:98:9a:70:10:04:c1:27:d2:41:
5a:90:63:a5:2d:73:82:d3:21:82:b3:ce:c5:f6:32:6d:90:b5:
50:51:ea:69:72:cf:c1:da:88:6f:f0:24:f3:bf:5f:17:89:66:
64:13:f3:5e:1c:42:e2:fd:9f:92:82:7d:dd:03:e5:1d:50:19:
83:50:a5:7c:71:1d:16:49:c2:d5:d4:d9:1e:76:fb:5b:f0:ab:
ae:91:9e:cf:e0:bd:d7:d3:66:34:d7:d4:fb:2d:01:f8:ae:95:
8e:54:85:e2:0c:47:9f:17:fd:2e:7a:2c:18:19:ef:4f:4c:cf:
3d:e5:3b:c0:e9:db:1e:be:1a:00:fb:e2:2b:d9:d9:fd:90:64:
4f:17:7b:81:36:d6:25:2d:50:4f:53:f9:0f:a5:35:a0:58:49:
8b:1b:96:7f:d6:d5:de:5f:9f:d1:3e:23:25:61:57:8f:a5:33:
a1:91:79:27:93:33:a7:08:ec:d2:2f:7e:21:82:ca:91:32:22:
1f:4d:2b:64:c3:23:9b:f0:d0:77:90:9a:bb:cf:f1:b3:b2:82:
8b:ff:97:61
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYVw+671kq5BWw/rugwQXCMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMjM0MjQyOTU3YmIxYmUxMjk2ODE3MjFmOWMyY2QwOGRm
MDdiYWEwHhcNMjMwMTAyMDUzNzAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDA0Y2EzMmRhZGM4NWRjOTlkOTliMGY3ZThiMjc0ZTRlMGMzZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbW4KAwm/Vw69WIGR3u1zZYVe5US
Cu/94Fczs+SvZvblZRHsplc4VSLNLbJjhvXCWqeTdX056F6FI1V3L7RkGqYNN4qK
lquh2bDJU1FVI7whRmWgPTFzcI9GwKYyX6Y6IdYGkyUP3dcUc0rAc5KbzahHvDWx
W0zBg8GjvcoHUVUWG8oqzqOyTJAls+c2YhsF+XAIysnzcoIAgdo+hEsFLPz/P971
dq7of8qpj72GdcdH/5Xpwfm+Moaw/39x8mRL9blTL6fS+BZniJcCNVekVuTtrtc/
O4ycJqcYI80YTGPM2jI2so18h/sftLdwxy1STFiq2/d+FdUfx9boiV14ZwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFP0EyjLa3IXcmdmbD36LJ05ODD4oMB8GA1UdIwQY
MBaAFB4jQkKVe7G+EpaBch+cLNCN8HuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMt
NTYzODUyNmZmNjQxLzEvX1FUS010cmNoZHlaMlpzUGZvc25UazRNUGlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMtNTYzODUyNmZmNjQx
LzEvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCuShIAwQC
w46YAwQCw464AwQCw47AAwQCw5tgMA0EAgACMAcDBQMqAUwgMA0GCSqGSIb3DQEB
CwUAA4IBAQB3GoDyPB35lpWQCFA6xugw9yJ0D0R7ibvEiXiIbMidmjVNyfjZvllq
/LI+gQOYmnAQBMEn0kFakGOlLXOC0yGCs87F9jJtkLVQUeppcs/B2ohv8CTzv18X
iWZkE/NeHELi/Z+Sgn3dA+UdUBmDUKV8cR0WScLV1Nkedvtb8KuukZ7P4L3X02Y0
19T7LQH4rpWOVIXiDEefF/0ueiwYGe9PTM895TvA6dsevhoA++Ir2dn9kGRPF3uB
NtYlLVBPU/kPpTWgWEmLG5Z/1tXeX5/RPiMlYVePpTOhkXknkzOnCOzSL34hgsqR
MiIfTStkwyOb8NB3kJq7z/GzsoKL/5dh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:00 2023 by rpki-client on console-fra.rpki-client.org