Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/QZQt0kmCjmE7OJ_mxaDX1965O7k.roa
File: QZQt0kmCjmE7OJ_mxaDX1965O7k.roa (raw, json)
Hash identifier: fiX5hKa7lxGhSqv+AMFPNwEy7l8w+j6JEeo/CwZbQac=
Subject key identifier: 41:94:2D:D2:49:82:8E:61:3B:38:9F:E6:C5:A0:D7:D7:DE:B9:3B:B9
Certificate issuer: /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial: 01856DD417D7788679A93AB6B9D4A7FA44E5
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/QZQt0kmCjmE7OJ_mxaDX1965O7k.roa
Signing time: Sun 01 Jan 2023 14:54:53 +0000
ROA not before: Sun 01 Jan 2023 14:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204506
IP address blocks: 93.157.207.0/24 maxlen: 24
45.152.23.0/24 maxlen: 24
2001:678:210::/48 maxlen: 48
2a0f:4507:8000::/33 maxlen: 33
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:17:d7:78:86:79:a9:3a:b6:b9:d4:a7:fa:44:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Validity
Not Before: Jan 1 14:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41942dd249828e613b389fe6c5a0d7d7deb93bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:59:11:3b:63:23:16:24:3b:87:7a:8e:cc:d4:
8c:e9:5c:80:ac:aa:01:41:3a:d2:e3:4c:6f:f9:37:
48:ec:4e:b8:06:35:08:4c:e2:0b:3e:29:26:6e:ab:
5e:66:76:0f:42:54:bc:de:5a:83:8c:f3:d8:69:ea:
83:e9:b5:ba:5c:50:05:be:1b:9f:4c:62:46:cc:9b:
be:27:c2:d1:1d:c9:a2:74:79:e5:86:d9:da:1a:66:
34:7f:ae:52:3a:0f:ee:dc:74:98:cb:9f:11:23:67:
9a:2e:5e:1f:72:31:4a:b8:18:bf:c1:c5:da:3d:88:
b3:e8:ca:15:a9:d8:ae:b1:13:09:c2:31:f1:99:20:
3b:23:8d:e5:94:4c:6a:4c:2f:73:d7:7c:dd:5a:d0:
90:59:05:26:2b:60:c7:2b:d2:4d:e9:d9:9f:d2:a8:
9d:90:67:fc:35:fb:b3:f1:19:fe:17:02:40:d8:22:
6a:c4:9c:7c:09:df:5c:7d:ed:23:6b:3d:cf:1b:62:
81:df:5c:76:05:a2:c6:59:66:58:90:a6:dd:97:79:
bf:4b:53:d1:ce:9d:0b:d9:4e:b0:95:91:c6:07:d4:
f9:c1:9c:0f:b5:23:fd:be:94:b0:a8:bd:ac:a7:48:
14:eb:93:b4:ff:27:72:ed:c0:b4:ae:00:9b:37:64:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:94:2D:D2:49:82:8E:61:3B:38:9F:E6:C5:A0:D7:D7:DE:B9:3B:B9
X509v3 Authority Key Identifier:
keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/QZQt0kmCjmE7OJ_mxaDX1965O7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.23.0/24
93.157.207.0/24
IPv6:
2001:678:210::/48
2a0f:4507:8000::/33
Signature Algorithm: sha256WithRSAEncryption
22:79:80:c3:ba:bd:25:0a:4f:b7:95:19:c3:88:cd:ef:5b:72:
f5:b3:06:3e:06:ec:b1:a5:6d:00:db:8c:70:2d:b1:86:91:79:
f2:17:40:77:40:81:6b:d4:e3:61:7f:aa:9a:21:8f:19:49:01:
77:86:5b:25:f0:13:3e:95:5a:5c:43:9b:1d:c8:47:8e:87:bb:
5b:6f:30:0a:fe:67:f0:6f:87:46:d1:c3:50:71:19:32:ea:91:
dd:ce:96:64:95:d0:88:83:6f:4a:88:b9:59:cd:e9:88:95:ed:
66:4c:39:f1:b2:cc:78:d8:a8:d5:cc:78:8c:db:c0:0d:fc:52:
5d:f9:c1:39:4d:fd:2f:17:d7:f2:59:8b:5c:73:21:a8:cc:14:
c0:2c:32:50:46:2e:f5:c0:7c:c5:55:65:69:23:c5:82:da:66:
cc:35:4a:95:23:71:cb:ab:e2:1e:a3:36:3e:2c:38:14:88:0f:
bd:d4:67:1b:8c:2b:94:90:f7:27:90:e1:dd:c8:25:fa:d9:fe:
36:8c:c3:1b:c2:1f:4b:12:50:cd:3b:09:97:b7:32:60:95:62:
37:1e:8c:2c:e8:0a:ab:84:2d:a4:7f:5e:da:b0:f0:19:38:51:
b6:69:3b:27:dd:ee:83:eb:01:89:cf:22:e3:7b:0a:a1:32:66:
f1:34:60:9a
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAYVt1BfXeIZ5qTq2udSn+kTlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwM2IyYzM4NzEwNjkwMDJhZDBiMmY0MmIwY2JmNWU5MmUz
YmU0YjMwHhcNMjMwMTAxMTQ1NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTk0MmRkMjQ5ODI4ZTYxM2IzODlmZTZjNWEwZDdkN2RlYjkzYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlkRO2MjFiQ7h3qOzNSM6VyArKoB
QTrS40xv+TdI7E64BjUITOILPikmbqteZnYPQlS83lqDjPPYaeqD6bW6XFAFvhuf
TGJGzJu+J8LRHcmidHnlhtnaGmY0f65SOg/u3HSYy58RI2eaLl4fcjFKuBi/wcXa
PYiz6MoVqdiusRMJwjHxmSA7I43llExqTC9z13zdWtCQWQUmK2DHK9JN6dmf0qid
kGf8Nfuz8Rn+FwJA2CJqxJx8Cd9cfe0jaz3PG2KB31x2BaLGWWZYkKbdl3m/S1PR
zp0L2U6wlZHGB9T5wZwPtSP9vpSwqL2sp0gU65O0/ydy7cC0rgCbN2SH9QIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFEGULdJJgo5hOzif5sWg19feuTu5MB8GA1UdIwQY
MBaAFAA7LDhxBpACrQsvQrDL9ekuO+SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGIt
YjM1YTBhMTQ1M2ZiLzEvUVpRdDBrbUNqbUU3T0pfbXhhRFgxOTY1TzdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGItYjM1YTBhMTQ1M2Zi
LzEvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTASBAIAATAMAwQALZgXAwQA
XZ3PMBcEAgACMBEDBwAgAQZ4AhADBgcqD0UHgDANBgkqhkiG9w0BAQsFAAOCAQEA
InmAw7q9JQpPt5UZw4jN71ty9bMGPgbssaVtANuMcC2xhpF58hdAd0CBa9TjYX+q
miGPGUkBd4ZbJfATPpVaXEObHchHjoe7W28wCv5n8G+HRtHDUHEZMuqR3c6WZJXQ
iINvSoi5Wc3piJXtZkw58bLMeNio1cx4jNvADfxSXfnBOU39LxfX8lmLXHMhqMwU
wCwyUEYu9cB8xVVlaSPFgtpmzDVKlSNxy6viHqM2Piw4FIgPvdRnG4wrlJD3J5Dh
3cgl+tn+NozDG8IfSxJQzTsJl7cyYJViNx6MLOgKq4QtpH9e2rDwGThRtmk7J93u
g+sBic8i43sKoTJm8TRgmg==
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:26 2024 by rpki-client on console-fra.rpki-client.org