Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/QWKIdzGX8udrLLw5UJ-yzotTreA.roa
File: QWKIdzGX8udrLLw5UJ-yzotTreA.roa (raw, json)
Hash identifier: XNI5r45XuME32DtaxszNdjVixWDtWXepyJjmrHgJZeg=
Subject key identifier: 41:62:88:77:31:97:F2:E7:6B:2C:BC:39:50:9F:B2:CE:8B:53:AD:E0
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CE6ED1DD2415046DFA30DCCE10BF68B57
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/QWKIdzGX8udrLLw5UJ-yzotTreA.roa
Signing time: Mon 08 Jan 2024 02:35:48 +0000
ROA not before: Mon 08 Jan 2024 02:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14315
IP address blocks: 213.176.2.0/23 maxlen: 24
213.176.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 06:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e6:ed:1d:d2:41:50:46:df:a3:0d:cc:e1:0b:f6:8b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 8 02:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=416288773197f2e76b2cbc39509fb2ce8b53ade0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:a7:97:2b:e8:9a:78:ed:b8:54:d8:f3:12:
9f:44:ff:8e:4c:8a:f9:cd:39:f2:f1:3d:23:a6:f4:
5f:f3:a7:00:db:aa:9a:ed:d3:bd:d5:31:b4:87:10:
b2:05:48:c0:c8:cc:b5:bc:42:00:4b:f1:0a:8f:1f:
da:b4:a4:74:1a:88:95:ea:94:fd:03:ca:46:67:cb:
bb:13:2c:5e:e0:5b:cd:98:b1:4e:bd:5f:aa:31:5d:
8d:dd:33:21:c1:5f:87:ab:0e:4a:80:77:74:e4:45:
90:01:3c:a4:8d:a1:5c:4b:0f:8e:ef:af:a9:8b:09:
49:d1:f8:7e:9a:91:67:0d:46:7e:ea:1d:14:65:6c:
c5:8d:09:3c:5f:a4:30:cd:04:1e:d5:75:49:77:5d:
52:3a:b0:d7:b7:f2:81:5d:3b:bb:03:80:45:27:77:
46:9a:e7:61:dc:57:e0:b9:05:c4:e0:19:2f:79:9d:
0b:a0:59:7b:91:f4:0e:cb:c1:43:fb:2c:8c:45:89:
1a:e2:f8:91:96:7a:81:bf:7f:cb:ab:21:c8:6b:0d:
81:a3:f9:83:01:1c:fe:ee:07:69:57:85:fc:2b:32:
31:b0:79:e4:e2:3f:89:01:dd:9f:ff:d8:f7:fe:cb:
4f:48:e9:81:fd:13:5c:d6:8f:9d:ba:79:d9:26:22:
10:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:62:88:77:31:97:F2:E7:6B:2C:BC:39:50:9F:B2:CE:8B:53:AD:E0
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/QWKIdzGX8udrLLw5UJ-yzotTreA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.2.0/23
213.176.126.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:42:bc:32:94:60:ed:6e:bd:90:5b:a4:5a:51:47:71:65:64:
31:74:fc:a4:ca:3b:1a:6f:f6:5e:76:22:c0:12:f6:f0:b8:73:
10:1b:3a:59:b9:40:c1:38:a5:22:7a:56:d5:fc:4b:1c:72:50:
41:2e:43:77:c1:ff:ee:37:ae:1e:6c:c4:a9:1b:68:f0:4b:55:
bc:63:59:24:b5:80:1c:ce:e8:72:59:35:96:da:c1:9f:94:f6:
a3:4e:95:45:5b:45:a2:a3:1f:6e:9f:5f:91:62:e5:65:25:a5:
6c:86:d7:5b:c4:17:70:d3:ce:3d:c2:ec:a8:99:3e:2f:8d:4d:
fa:e9:9e:a3:c1:1f:8d:7d:c8:30:37:c1:95:e0:a2:37:8f:1b:
b8:fa:bf:bf:a4:52:e3:02:37:b8:96:87:51:55:7c:3d:31:c7:
2a:12:32:74:38:ab:4d:2b:d0:c1:bb:e7:d7:86:41:64:41:55:
ff:42:7b:7b:5b:40:1d:8e:80:22:d2:c2:0c:45:56:cc:96:d2:
81:e7:e1:22:6b:6c:54:59:11:ca:ef:fb:5e:5a:da:e9:fd:16:
c6:f7:9a:90:dc:a8:89:d9:c9:b2:39:5a:b2:d3:1e:61:de:f7:
65:cc:af:8d:cb:cd:9f:eb:4f:49:45:1c:84:79:29:e3:42:a0:
15:8d:b3:97
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzm7R3SQVBG36MNzOEL9otXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwMTA4MDIzNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTYyODg3NzMxOTdmMmU3NmIyY2JjMzk1MDlmYjJjZThiNTNhZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcmnlyvomnjtuFTY8xKfRP+OTIr5
zTny8T0jpvRf86cA26qa7dO91TG0hxCyBUjAyMy1vEIAS/EKjx/atKR0GoiV6pT9
A8pGZ8u7Eyxe4FvNmLFOvV+qMV2N3TMhwV+Hqw5KgHd05EWQATykjaFcSw+O76+p
iwlJ0fh+mpFnDUZ+6h0UZWzFjQk8X6QwzQQe1XVJd11SOrDXt/KBXTu7A4BFJ3dG
mudh3FfguQXE4BkveZ0LoFl7kfQOy8FD+yyMRYka4viRlnqBv3/LqyHIaw2Bo/mD
ARz+7gdpV4X8KzIxsHnk4j+JAd2f/9j3/stPSOmB/RNc1o+dunnZJiIQ2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEFiiHcxl/Lnayy8OVCfss6LU63gMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvUVdLSWR6R1g4dWRyTEx3NVVKLXl6b3RUcmVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB1bACAwQB
1bB+MA0GCSqGSIb3DQEBCwUAA4IBAQCdQrwylGDtbr2QW6RaUUdxZWQxdPykyjsa
b/ZediLAEvbwuHMQGzpZuUDBOKUielbV/EscclBBLkN3wf/uN64ebMSpG2jwS1W8
Y1kktYAczuhyWTWW2sGflPajTpVFW0Wiox9un1+RYuVlJaVshtdbxBdw0849wuyo
mT4vjU366Z6jwR+NfcgwN8GV4KI3jxu4+r+/pFLjAje4lodRVXw9MccqEjJ0OKtN
K9DBu+fXhkFkQVX/Qnt7W0AdjoAi0sIMRVbMltKB5+Eia2xUWRHK7/teWtrp/RbG
95qQ3KiJ2cmyOVqy0x5h3vdlzK+Ny82f609JRRyEeSnjQqAVjbOX
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org