Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qPf1tLO4x-6YMQkqp7TUc4a33Cc.roa
File: qPf1tLO4x-6YMQkqp7TUc4a33Cc.roa (raw, json)
Hash identifier: jo1EcPGD29XDTYxJZ/lBFN0obD8ofnmNOkZVXfdnId8=
Subject key identifier: A8:F7:F5:B4:B3:B8:C7:EE:98:31:09:2A:A7:B4:D4:73:86:B7:DC:27
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018573283D76B213AE0CE599445CDD968522
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qPf1tLO4x-6YMQkqp7TUc4a33Cc.roa
Signing time: Mon 02 Jan 2023 15:44:55 +0000
ROA not before: Mon 02 Jan 2023 15:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29551
IP address blocks: 85.93.10.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:3d:76:b2:13:ae:0c:e5:99:44:5c:dd:96:85:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 2 15:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8f7f5b4b3b8c7ee9831092aa7b4d47386b7dc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:da:45:0d:d8:b0:ec:3e:fc:5d:b9:33:06:5c:
91:81:e6:37:6a:9c:c1:fd:10:80:a8:e6:39:cc:72:
55:f6:98:f5:00:6e:c9:5f:c9:c3:22:05:e2:37:eb:
b4:8d:97:b5:d3:f5:7a:88:59:51:a2:e3:21:5b:72:
bf:34:67:a3:50:2b:95:2d:85:11:2a:0f:7c:36:24:
27:cc:b5:3f:1d:aa:f5:ad:a5:15:88:4a:85:97:24:
75:df:9c:23:37:23:0a:14:90:6d:d8:4a:fa:79:c5:
0e:ef:c7:ec:43:c6:76:93:c3:e7:c8:92:d7:dd:ef:
73:6f:a6:b5:d6:a9:87:28:88:03:dd:22:64:f6:ad:
0d:f8:aa:28:d8:67:b8:b3:5e:d6:c1:3a:c0:99:5d:
c9:86:d6:ce:73:7d:ee:18:72:21:f8:aa:4e:ee:c6:
55:4a:a3:2c:f0:f0:5a:ed:11:8d:e0:60:51:ed:55:
b4:d1:a0:fa:0b:3d:1e:20:13:fb:d1:4c:6d:b2:11:
17:29:2d:21:2c:0f:9f:ce:0e:db:cd:4c:76:f0:d4:
f8:9c:7d:30:e9:88:97:53:a8:ca:80:34:39:fc:3b:
a5:12:57:c1:ec:56:31:cc:55:23:29:e4:bb:e0:1c:
e4:80:32:2e:a9:ab:54:95:81:51:36:d1:5f:fa:dd:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F7:F5:B4:B3:B8:C7:EE:98:31:09:2A:A7:B4:D4:73:86:B7:DC:27
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qPf1tLO4x-6YMQkqp7TUc4a33Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.10.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:48:f1:fa:1b:db:80:20:29:94:7f:4d:87:b0:42:d6:2f:db:
be:59:8a:67:e9:4e:09:9c:e0:1b:e7:ff:0b:c5:83:9b:ba:d4:
0f:2d:a7:3d:f4:49:1c:ba:71:30:39:99:a5:8a:93:0b:18:3c:
c8:3d:88:38:c7:ba:06:21:0f:37:34:1d:bd:e7:5a:3a:a8:a2:
a4:0a:8c:81:27:56:ff:9a:77:c0:25:ba:55:88:aa:9e:06:ca:
c1:59:80:95:a3:ed:59:1a:88:84:6c:33:09:c9:c8:03:5d:c1:
e3:8c:92:83:05:a8:81:3b:53:1b:0a:6a:2b:49:a2:66:02:6b:
37:c7:37:94:23:91:95:4d:d5:26:b8:b9:3b:0a:55:e9:67:92:
c7:af:d6:4a:f7:91:9e:ac:6b:13:28:93:12:93:8f:a3:a8:b8:
08:3c:55:a1:81:65:db:4f:96:3b:33:24:c4:dc:52:fb:63:dc:
f8:7c:25:87:f0:be:ab:0a:06:ea:90:e7:d0:8d:cd:75:1f:92:
1f:7c:5d:ff:5d:4a:85:89:4f:9a:39:b6:a0:a0:49:dd:f7:c8:
f0:7c:7d:c4:06:de:3c:47:3a:8c:02:24:69:dc:58:04:65:13:
1a:c6:98:19:69:44:91:51:75:60:ef:bd:5c:52:98:8e:8b:f8:
f8:fe:93:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzKD12shOuDOWZRFzdloUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjMwMTAyMTU0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGY3ZjViNGIzYjhjN2VlOTgzMTA5MmFhN2I0ZDQ3Mzg2YjdkYzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNpFDdiw7D78XbkzBlyRgeY3apzB
/RCAqOY5zHJV9pj1AG7JX8nDIgXiN+u0jZe10/V6iFlRouMhW3K/NGejUCuVLYUR
Kg98NiQnzLU/Har1raUViEqFlyR135wjNyMKFJBt2Er6ecUO78fsQ8Z2k8PnyJLX
3e9zb6a11qmHKIgD3SJk9q0N+Koo2Ge4s17WwTrAmV3JhtbOc33uGHIh+KpO7sZV
SqMs8PBa7RGN4GBR7VW00aD6Cz0eIBP70UxtshEXKS0hLA+fzg7bzUx28NT4nH0w
6YiXU6jKgDQ5/DulElfB7FYxzFUjKeS74BzkgDIuqatUlYFRNtFf+t2IPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKj39bSzuMfumDEJKqe01HOGt9wnMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvcVBmMXRMTzR4LTZZTVFrcXA3VFVjNGEzM0NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVV0KMA0G
CSqGSIb3DQEBCwUAA4IBAQCaSPH6G9uAICmUf02HsELWL9u+WYpn6U4JnOAb5/8L
xYObutQPLac99EkcunEwOZmlipMLGDzIPYg4x7oGIQ83NB2951o6qKKkCoyBJ1b/
mnfAJbpViKqeBsrBWYCVo+1ZGoiEbDMJycgDXcHjjJKDBaiBO1MbCmorSaJmAms3
xzeUI5GVTdUmuLk7ClXpZ5LHr9ZK95GerGsTKJMSk4+jqLgIPFWhgWXbT5Y7MyTE
3FL7Y9z4fCWH8L6rCgbqkOfQjc11H5IffF3/XUqFiU+aObagoEnd98jwfH3EBt48
RzqMAiRp3FgEZRMaxpgZaUSRUXVg771cUpiOi/j4/pM5
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org