Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QZR1MvHQoz-ZFQGDSpOF4UgGNE0.roa
File: QZR1MvHQoz-ZFQGDSpOF4UgGNE0.roa (raw, json)
Hash identifier: WFGiEDhqcPjs7hYQp5wYCjHliEgsdHVwetsdaiu7sNg=
Subject key identifier: 41:94:75:32:F1:D0:A3:3F:99:15:01:83:4A:93:85:E1:48:06:34:4D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F1501D9DA4AD34581D6D4EF0C429FEC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QZR1MvHQoz-ZFQGDSpOF4UgGNE0.roa
Signing time: Sun 01 Jan 2023 20:45:25 +0000
ROA not before: Sun 01 Jan 2023 20:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50939
IP address blocks: 80.96.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:01:d9:da:4a:d3:45:81:d6:d4:ef:0c:42:9f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41947532f1d0a33f991501834a9385e14806344d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:0a:d8:69:58:d6:e1:d0:5f:8f:04:b0:86:
c0:ad:0d:82:9b:d7:d3:88:66:6d:38:dd:8e:ff:bb:
7f:5d:95:73:c6:ec:e0:3e:87:8d:c8:37:0f:22:9f:
09:30:9c:f5:1f:a8:84:85:e1:76:f3:22:a6:73:c4:
9c:ed:da:ea:7b:35:a5:ce:bc:0b:c8:fd:2a:dd:e0:
96:4d:bd:18:4b:70:ac:2f:46:e6:f7:2d:ed:14:a7:
c3:6a:45:36:96:fa:60:5b:ad:65:bc:8e:ea:96:96:
d7:27:f9:fa:f3:91:43:41:19:24:2c:08:ee:d2:c6:
ff:6c:76:ea:8e:fd:94:c2:a4:2d:94:99:56:d7:98:
04:38:ad:e9:64:86:8e:bb:24:fc:b6:67:3e:bb:8e:
da:36:57:85:4e:70:9a:17:06:d4:a0:30:b1:a3:db:
b9:af:d5:27:24:f5:67:d7:c9:52:41:49:0c:8b:92:
05:4e:ae:c5:c9:7f:95:75:73:4b:d8:1c:26:8c:ac:
25:39:ce:83:96:61:82:75:45:77:88:b9:b1:88:98:
95:3d:86:20:fd:1f:9b:53:0a:6b:fb:21:33:e5:b7:
53:02:40:83:47:26:e3:27:3e:aa:16:9a:95:df:f6:
b3:bd:a4:c0:4b:80:c0:6e:e0:b0:26:25:a7:55:40:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:94:75:32:F1:D0:A3:3F:99:15:01:83:4A:93:85:E1:48:06:34:4D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QZR1MvHQoz-ZFQGDSpOF4UgGNE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:ae:59:a9:9f:f2:77:0e:c5:ab:8a:f1:64:d5:f9:a9:0d:a0:
a0:0c:cb:6b:86:e8:03:49:95:d5:b1:a7:01:13:ba:b5:b9:3c:
15:b0:a4:c3:8a:21:d4:71:30:71:d7:bf:eb:15:9f:e7:04:89:
34:f8:85:ea:d5:59:7e:a9:46:ca:1b:f0:e1:b4:5b:07:5b:f3:
20:3f:66:fc:aa:7c:c5:27:85:45:2a:3b:e5:7d:f3:26:00:b9:
16:66:41:9f:14:66:e8:ff:c0:f9:8d:ca:c8:8b:93:6b:b0:0b:
dd:cd:71:3c:f1:00:bb:29:a9:40:bf:1f:fe:3d:ef:cd:67:dc:
15:34:59:3a:ab:58:45:2b:db:82:21:f2:42:e2:c9:02:2f:63:
8d:6b:30:fa:8f:32:84:0b:2a:ed:34:c8:20:17:a4:03:b0:a2:
73:fb:39:f7:51:81:31:ce:84:f6:30:d8:60:9c:2c:70:27:9d:
f7:90:1f:d9:cf:96:d8:1f:16:2f:c6:1b:34:52:5a:65:6f:02:
3f:ab:a2:2d:f8:14:be:1e:ce:50:02:3e:f9:46:bd:42:8e:c2:
c1:9b:2d:44:1b:89:30:08:66:02:3b:eb:2e:66:98:39:a4:79:
0a:ad:ae:6d:51:89:61:2a:2d:82:7c:4a:6e:f4:da:bc:bc:51:
c8:35:ca:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvFQHZ2krTRYHW1O8MQp/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwMTAxMjA0NTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTk0NzUzMmYxZDBhMzNmOTkxNTAxODM0YTkzODVlMTQ4MDYzNDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhUK2GlY1uHQX48EsIbArQ2Cm9fT
iGZtON2O/7t/XZVzxuzgPoeNyDcPIp8JMJz1H6iEheF28yKmc8Sc7drqezWlzrwL
yP0q3eCWTb0YS3CsL0bm9y3tFKfDakU2lvpgW61lvI7qlpbXJ/n685FDQRkkLAju
0sb/bHbqjv2UwqQtlJlW15gEOK3pZIaOuyT8tmc+u47aNleFTnCaFwbUoDCxo9u5
r9UnJPVn18lSQUkMi5IFTq7FyX+VdXNL2BwmjKwlOc6DlmGCdUV3iLmxiJiVPYYg
/R+bUwpr+yEz5bdTAkCDRybjJz6qFpqV3/azvaTAS4DAbuCwJiWnVUCwQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEGUdTLx0KM/mRUBg0qTheFIBjRNMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvUVpSMU12SFFvei1aRlFHRFNwT0Y0VWdHTkUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUGAgMA0G
CSqGSIb3DQEBCwUAA4IBAQA7rlmpn/J3DsWrivFk1fmpDaCgDMtrhugDSZXVsacB
E7q1uTwVsKTDiiHUcTBx17/rFZ/nBIk0+IXq1Vl+qUbKG/DhtFsHW/MgP2b8qnzF
J4VFKjvlffMmALkWZkGfFGbo/8D5jcrIi5NrsAvdzXE88QC7KalAvx/+Pe/NZ9wV
NFk6q1hFK9uCIfJC4skCL2ONazD6jzKECyrtNMggF6QDsKJz+zn3UYExzoT2MNhg
nCxwJ533kB/Zz5bYHxYvxhs0UlplbwI/q6It+BS+Hs5QAj75Rr1CjsLBmy1EG4kw
CGYCO+suZpg5pHkKra5tUYlhKi2CfEpu9Nq8vFHINcrZ
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:48 2024 by rpki-client on console-ams.rpki-client.org