Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Q0iX_zf6cYSeOnYQEXsMlYanRvA.roa
File: Q0iX_zf6cYSeOnYQEXsMlYanRvA.roa (raw, json)
Hash identifier: LxlFGTa9i0QivtW6SgZpNH2Grs9m+OX+NGldWm1Pg/w=
Subject key identifier: 43:48:97:FF:37:FA:71:84:9E:3A:76:10:11:7B:0C:95:86:A7:46:F0
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018A9387936A80CE78ED8486826E1D9F70F1
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Q0iX_zf6cYSeOnYQEXsMlYanRvA.roa
Signing time: Thu 14 Sep 2023 11:50:50 +0000
ROA not before: Thu 14 Sep 2023 11:50:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205275
IP address blocks: 81.181.66.0/23 maxlen: 24
194.102.33.0/24 maxlen: 24
217.156.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:87:93:6a:80:ce:78:ed:84:86:82:6e:1d:9f:70:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 14 11:50:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=434897ff37fa71849e3a7610117b0c9586a746f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:47:e3:a4:3f:48:90:1b:7c:9b:a3:31:f9:
67:56:ec:d4:5a:c4:84:ee:2a:08:d2:58:9e:1e:de:
20:59:f0:9d:b0:25:88:b6:8e:7c:89:9f:6a:87:f1:
69:99:f3:76:dd:79:4e:a3:2a:f2:1d:84:02:2e:62:
34:fd:29:bf:8b:1f:fb:3f:c7:0e:d1:08:3b:9d:e9:
7b:ee:85:be:b3:f5:85:2e:4b:5f:65:e7:87:83:9a:
e4:08:3d:08:ed:34:1c:86:e5:1d:89:47:8f:53:22:
c8:39:ba:1c:27:ff:78:9a:98:c4:78:52:56:7e:d8:
db:5b:d8:31:27:dc:4b:0b:1b:86:61:fa:f1:ab:05:
ef:d4:94:c1:90:65:44:22:46:0e:53:27:0c:dd:40:
9e:d3:34:dc:88:cd:24:79:3e:ac:1b:ab:1d:07:ac:
00:d4:6d:66:e4:94:8e:8d:3e:20:be:97:1f:7c:cf:
d6:b1:f2:c0:f7:0e:48:26:d6:fb:5b:67:ad:16:5a:
c2:40:98:5d:d0:db:41:c3:46:e1:a5:08:3f:55:ba:
2d:85:c7:a7:6c:6e:96:d3:21:00:70:1e:56:dd:97:
25:c7:03:4b:20:75:d5:f2:3f:7c:75:5d:a9:58:8f:
8a:ab:c6:ee:47:1d:2f:20:a8:b9:25:b1:ba:62:d1:
8d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:48:97:FF:37:FA:71:84:9E:3A:76:10:11:7B:0C:95:86:A7:46:F0
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Q0iX_zf6cYSeOnYQEXsMlYanRvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.66.0/23
194.102.33.0/24
217.156.26.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:fd:39:25:d8:30:a8:e6:64:fb:41:e3:2f:fc:6b:42:81:f1:
7a:39:83:94:27:ee:94:1a:ad:fa:52:b5:4d:a7:a0:d4:85:02:
08:02:c6:73:a0:cf:09:0c:d9:e1:08:bf:31:19:d6:58:44:3c:
6c:9e:b1:0e:f5:e6:26:cf:7a:ed:3e:ec:56:45:69:7e:7b:cd:
74:bc:21:1e:0c:76:1e:a3:6f:96:5e:c3:46:c1:84:e5:ab:fe:
ab:3f:60:60:2e:bf:5d:ca:b7:7a:e7:bc:e0:11:34:d7:27:19:
56:00:7b:52:17:6f:47:01:91:69:ec:a1:cd:ef:ae:a2:88:e3:
a5:1d:42:a0:9f:b2:c0:46:47:07:19:a2:51:38:85:82:3c:49:
8b:a8:b1:35:98:9d:5a:7b:f5:04:cf:3b:4d:d7:d2:a7:eb:40:
63:70:ff:bf:08:5b:4e:f2:66:48:4b:63:1b:ab:a5:db:e2:0a:
52:c6:48:85:27:bd:2c:0b:1b:41:1d:87:84:b3:48:35:8a:40:
a0:a8:56:fa:2c:8c:cc:7b:08:db:13:1c:6a:ff:b1:96:10:6d:
57:65:42:2c:d8:57:e8:a5:a7:af:c9:31:0b:77:9d:fd:ac:20:
a6:ec:e3:31:11:cc:32:e1:fd:fa:65:44:e1:82:1b:12:79:7c:
54:ac:93:2f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYqTh5NqgM547YSGgm4dn3DxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwOTE0MTE1MDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzQ4OTdmZjM3ZmE3MTg0OWUzYTc2MTAxMTdiMGM5NTg2YTc0NmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsblH46Q/SJAbfJujMflnVuzUWsSE
7ioI0lieHt4gWfCdsCWIto58iZ9qh/FpmfN23XlOoyryHYQCLmI0/Sm/ix/7P8cO
0Qg7nel77oW+s/WFLktfZeeHg5rkCD0I7TQchuUdiUePUyLIObocJ/94mpjEeFJW
ftjbW9gxJ9xLCxuGYfrxqwXv1JTBkGVEIkYOUycM3UCe0zTciM0keT6sG6sdB6wA
1G1m5JSOjT4gvpcffM/WsfLA9w5IJtb7W2etFlrCQJhd0NtBw0bhpQg/Vbothcen
bG6W0yEAcB5W3ZclxwNLIHXV8j98dV2pWI+Kq8buRx0vIKi5JbG6YtGNfQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFENIl/83+nGEnjp2EBF7DJWGp0bwMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvUTBpWF96ZjZjWVNlT25ZUUVYc01sWWFuUnZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBUbVCAwQA
wmYhAwQA2ZwaMA0GCSqGSIb3DQEBCwUAA4IBAQB8/Tkl2DCo5mT7QeMv/GtCgfF6
OYOUJ+6UGq36UrVNp6DUhQIIAsZzoM8JDNnhCL8xGdZYRDxsnrEO9eYmz3rtPuxW
RWl+e810vCEeDHYeo2+WXsNGwYTlq/6rP2BgLr9dyrd657zgETTXJxlWAHtSF29H
AZFp7KHN766iiOOlHUKgn7LARkcHGaJROIWCPEmLqLE1mJ1ae/UEzztN19Kn60Bj
cP+/CFtO8mZIS2Mbq6Xb4gpSxkiFJ70sCxtBHYeEs0g1ikCgqFb6LIzMewjbExxq
/7GWEG1XZUIs2FfopaevyTELd539rCCm7OMxEcwy4f36ZUThghsSeXxUrJMv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org