Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QC_9bRznibY7efDgFBt5v90NQWA.roa
File: QC_9bRznibY7efDgFBt5v90NQWA.roa (raw, json)
Hash identifier: G2beuyC0GLLlkGUbGfFVJbBBBDDIGTM19HoDc+wHf7Q=
Subject key identifier: 40:2F:FD:6D:1C:E7:89:B6:3B:79:F0:E0:14:1B:79:BF:DD:0D:41:60
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01867E4726751846FCA444333CAD3AE7D053
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QC_9bRznibY7efDgFBt5v90NQWA.roa
Signing time: Thu 23 Feb 2023 12:37:17 +0000
ROA not before: Thu 23 Feb 2023 12:37:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.200.222.0/24 maxlen: 24
109.122.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 11:40:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:47:26:75:18:46:fc:a4:44:33:3c:ad:3a:e7:d0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 23 12:37:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=402ffd6d1ce789b63b79f0e0141b79bfdd0d4160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:bf:21:72:a6:eb:74:2e:6a:ce:5f:cb:9b:
f8:a8:45:84:39:bc:ad:1b:6d:4b:ec:36:53:f5:7d:
2f:47:e2:ac:34:a4:09:28:cd:59:6e:c3:ff:af:42:
a9:1c:1f:53:59:8c:36:78:72:39:e4:ec:cf:46:3b:
d4:72:4a:85:86:26:a4:89:83:84:eb:32:0b:8d:b0:
da:87:13:bb:00:62:a6:99:1e:2d:da:46:3b:55:97:
e4:bf:26:2f:0b:50:67:44:3a:e8:3a:c3:3f:c5:9a:
97:87:46:c7:00:5d:1b:0f:ae:20:f5:ee:a4:bf:e7:
40:a7:c6:00:ad:97:03:14:4c:84:2e:e5:f5:ba:53:
e5:aa:7b:fb:26:c4:9b:f5:7a:73:87:69:77:c9:27:
c0:a9:0a:f9:26:ec:c8:3f:f2:16:0a:50:75:1f:00:
77:72:a2:5a:e5:00:07:3f:73:f4:6e:37:61:55:57:
e0:e4:14:84:31:c0:c1:e0:ab:22:36:a5:dc:1a:b3:
83:a7:bc:81:d0:a6:a2:5a:72:ee:0c:b9:e9:96:43:
da:1d:b4:ae:3d:5c:70:0b:61:e3:55:64:6c:46:a2:
06:d7:a1:71:71:33:cb:07:a2:01:a1:d0:47:ce:50:
ab:2c:55:97:92:47:e8:c8:b7:e2:07:7d:97:a8:f8:
3f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2F:FD:6D:1C:E7:89:B6:3B:79:F0:E0:14:1B:79:BF:DD:0D:41:60
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QC_9bRznibY7efDgFBt5v90NQWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.222.0/24
109.122.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5d:05:26:f7:06:31:44:da:f8:8c:59:75:b2:20:24:34:e5:
a5:13:9d:57:1b:18:7b:47:09:59:f1:20:05:05:2d:b3:f4:15:
cd:08:06:79:a4:49:b1:36:77:97:45:b3:41:ca:9c:a9:d0:60:
f9:5e:e0:78:dc:47:6e:af:15:57:5c:64:5f:4e:fa:7f:92:2e:
2e:5f:8e:a7:2a:7f:fa:24:59:fc:71:62:5d:2d:fa:0f:27:92:
2e:55:07:8c:bc:a5:62:6c:76:fd:a4:6e:e2:e7:34:6d:7a:9f:
6f:a6:c7:5b:07:93:3e:2e:a7:f8:42:b3:0d:eb:e1:3c:85:39:
84:30:a8:98:d3:03:15:77:74:fa:ac:31:e1:5b:9b:fd:92:75:
7b:dd:d8:2f:8e:58:96:0e:87:54:77:4d:8f:d5:01:f4:a4:6b:
4d:85:4a:11:d8:15:3e:ab:92:d6:22:7a:8b:2c:19:a6:7f:0d:
13:6c:e5:52:88:5e:89:28:a8:82:86:c6:9e:25:25:7a:64:c7:
6a:38:27:68:64:0b:3f:11:1f:19:9b:83:99:2b:8b:3a:67:b5:
ba:eb:f9:cf:00:63:00:fe:11:07:18:c0:46:f7:a0:4f:9c:01:
93:4d:51:bb:af:79:c2:8e:9d:f7:00:24:e2:98:2d:ff:de:be:
a0:8d:13:9c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZ+RyZ1GEb8pEQzPK0659BTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMwMjIzMTIzNzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDJmZmQ2ZDFjZTc4OWI2M2I3OWYwZTAxNDFiNzliZmRkMGQ0MTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobO/IXKm63Quas5fy5v4qEWEObyt
G21L7DZT9X0vR+KsNKQJKM1ZbsP/r0KpHB9TWYw2eHI55OzPRjvUckqFhiakiYOE
6zILjbDahxO7AGKmmR4t2kY7VZfkvyYvC1BnRDroOsM/xZqXh0bHAF0bD64g9e6k
v+dAp8YArZcDFEyELuX1ulPlqnv7JsSb9Xpzh2l3ySfAqQr5JuzIP/IWClB1HwB3
cqJa5QAHP3P0bjdhVVfg5BSEMcDB4KsiNqXcGrODp7yB0KaiWnLuDLnplkPaHbSu
PVxwC2HjVWRsRqIG16FxcTPLB6IBodBHzlCrLFWXkkfoyLfiB32XqPg/cwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEAv/W0c54m2O3nw4BQbeb/dDUFgMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvUUNfOWJSem5pYlk3ZWZEZ0ZCdDV2OTBOUVdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8jeAwQA
bXoqMA0GCSqGSIb3DQEBCwUAA4IBAQAcXQUm9wYxRNr4jFl1siAkNOWlE51XGxh7
RwlZ8SAFBS2z9BXNCAZ5pEmxNneXRbNBypyp0GD5XuB43EdurxVXXGRfTvp/ki4u
X46nKn/6JFn8cWJdLfoPJ5IuVQeMvKVibHb9pG7i5zRtep9vpsdbB5M+Lqf4QrMN
6+E8hTmEMKiY0wMVd3T6rDHhW5v9knV73dgvjliWDodUd02P1QH0pGtNhUoR2BU+
q5LWInqLLBmmfw0TbOVSiF6JKKiChsaeJSV6ZMdqOCdoZAs/ER8Zm4OZK4s6Z7W6
6/nPAGMA/hEHGMBG96BPnAGTTVG7r3nCjp33ACTimC3/3r6gjROc
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org