Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/qI_JAb3HVCPukGYkZV6s0Cs4adY.roa
File: qI_JAb3HVCPukGYkZV6s0Cs4adY.roa (raw, json)
Hash identifier: kUnw1YyWCF18tdMaBcuRRZwhV/Bhjtph9Zh9ZsMhk7Y=
Subject key identifier: A8:8F:C9:01:BD:C7:54:23:EE:90:66:24:65:5E:AC:D0:2B:38:69:D6
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 01856D4AA4DFB2D893DBC7581DD874239B8B
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/qI_JAb3HVCPukGYkZV6s0Cs4adY.roa
Signing time: Sun 01 Jan 2023 12:24:46 +0000
ROA not before: Sun 01 Jan 2023 12:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1213
IP address blocks: 77.87.24.0/21 maxlen: 24
87.32.0.0/12 maxlen: 24
45.144.8.0/22 maxlen: 24
91.193.188.0/22 maxlen: 24
91.123.224.0/20 maxlen: 24
193.1.0.0/16 maxlen: 24
2001:770::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:a4:df:b2:d8:93:db:c7:58:1d:d8:74:23:9b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Jan 1 12:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a88fc901bdc75423ee906624655eacd02b3869d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:f9:14:16:c8:3c:ff:6e:54:64:a9:b3:a6:
96:4d:c8:b6:e7:c9:5a:95:bd:eb:ff:8e:ea:5c:4e:
43:5c:dc:5e:0b:7b:23:da:30:09:61:36:80:f1:4b:
69:60:42:e5:2a:ab:57:71:7e:54:8e:b1:a5:0a:55:
7e:9a:e1:73:1a:a0:f5:35:5c:3f:ec:63:84:0c:a1:
36:c4:97:5a:fa:a6:35:ce:75:54:3f:16:c1:d1:e6:
8e:c0:99:8a:03:45:ed:7b:e9:da:be:88:cb:a9:bc:
48:4a:c8:de:03:ba:c0:f9:d2:b5:99:a7:00:59:ea:
5f:60:57:fd:28:23:fd:5b:0b:81:8f:6c:60:98:b4:
4e:b9:fb:6f:e1:ba:75:d2:cf:88:7e:f3:a2:ca:56:
7a:b6:7f:3d:8f:2e:3d:34:33:02:1e:ab:9f:fa:1a:
a9:70:a7:bb:ab:07:ec:96:b3:47:1b:28:24:31:84:
00:55:3a:cb:fa:c0:8f:3b:1c:27:31:89:f3:26:91:
7e:bc:be:75:76:be:a5:b8:c5:71:ba:ef:55:8d:1f:
ac:b6:6e:f9:2d:98:a0:71:7c:91:4f:f7:c9:aa:4f:
b4:65:aa:5a:38:a4:4a:b3:4b:c1:df:01:45:7b:f3:
5f:fc:c6:f0:8c:8d:ee:23:57:2e:61:5d:f1:49:0b:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8F:C9:01:BD:C7:54:23:EE:90:66:24:65:5E:AC:D0:2B:38:69:D6
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/qI_JAb3HVCPukGYkZV6s0Cs4adY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.8.0/22
77.87.24.0/21
87.32.0.0/12
91.123.224.0/20
91.193.188.0/22
193.1.0.0/16
IPv6:
2001:770::/32
Signature Algorithm: sha256WithRSAEncryption
02:3b:43:25:01:4f:3f:85:ec:39:aa:41:01:32:39:8f:c0:dc:
e1:b1:b0:0c:28:6c:40:38:79:3f:0d:8f:e4:09:02:25:64:49:
f1:3e:f9:0d:da:87:b5:95:a3:b4:c2:62:c0:90:e4:84:19:b1:
fe:58:ae:69:e4:eb:bf:68:df:19:1e:5a:19:6e:de:58:06:99:
79:2a:68:36:a7:b2:41:8f:1f:fb:55:63:8d:5d:64:e5:08:04:
9f:65:91:2d:66:62:33:cd:e0:9b:92:bb:79:c1:76:2f:53:2b:
5a:dc:99:c2:d8:48:40:ff:19:49:5a:8c:e6:8e:65:6c:b5:67:
7d:51:fc:c7:0f:1e:df:a2:fb:9e:37:3e:59:59:34:2f:d4:7a:
c1:c4:45:b0:30:6e:4a:9d:d1:fb:e8:25:bf:38:86:7b:fc:a5:
e4:28:21:ce:f6:18:7e:48:01:11:3e:5f:06:f6:99:7a:66:cf:
f7:bd:e1:f8:b0:64:19:15:7a:49:b0:c7:6f:6d:22:6e:30:a7:
d6:83:95:c8:52:3f:7a:a2:ab:1b:9a:9a:7e:f5:1a:ca:ff:46:
7a:9a:92:ba:47:71:b1:93:97:83:bb:72:3b:82:e2:48:1f:b4:
81:e0:e6:1a:e1:36:57:0a:a0:58:52:fd:05:e6:68:3e:e8:c7:
a3:21:89:b7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAYVtSqTfstiT28dYHdh0I5uLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjY2NDllNGYyYzc5NWZmZTU0MGY5ZDk3ZjI2ZTk5YzVj
NWUzZmYwHhcNMjMwMTAxMTIyNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODhmYzkwMWJkYzc1NDIzZWU5MDY2MjQ2NTVlYWNkMDJiMzg2OWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGb5FBbIPP9uVGSps6aWTci258la
lb3r/47qXE5DXNxeC3sj2jAJYTaA8UtpYELlKqtXcX5UjrGlClV+muFzGqD1NVw/
7GOEDKE2xJda+qY1znVUPxbB0eaOwJmKA0Xte+navojLqbxISsjeA7rA+dK1macA
WepfYFf9KCP9WwuBj2xgmLROuftv4bp10s+IfvOiylZ6tn89jy49NDMCHquf+hqp
cKe7qwfslrNHGygkMYQAVTrL+sCPOxwnMYnzJpF+vL51dr6luMVxuu9VjR+stm75
LZigcXyRT/fJqk+0ZapaOKRKs0vB3wFFe/Nf/MbwjI3uI1cuYV3xSQsXZwIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFKiPyQG9x1Qj7pBmJGVerNArOGnWMB8GA1UdIwQY
MBaAFJ0mZJ5PLHlf/lQPnZfybpnFxeP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzVjMDctZWIzMC00MDhmLTg1OGEt
ZWE0NjljODYwZGM2LzEvcUlfSkFiM0hWQ1B1a0dZa1pWNnMwQ3M0YWRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kYzVjMDctZWIzMC00MDhmLTg1OGEtZWE0NjljODYwZGM2
LzEvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAoBAIAATAiAwQCLZAIAwQD
TVcYAwMEVyADBARbe+ADBAJbwbwDAwDBATANBAIAAjAHAwUAIAEHcDANBgkqhkiG
9w0BAQsFAAOCAQEAAjtDJQFPP4XsOapBATI5j8Dc4bGwDChsQDh5Pw2P5AkCJWRJ
8T75DdqHtZWjtMJiwJDkhBmx/liuaeTrv2jfGR5aGW7eWAaZeSpoNqeyQY8f+1Vj
jV1k5QgEn2WRLWZiM83gm5K7ecF2L1MrWtyZwthIQP8ZSVqM5o5lbLVnfVH8xw8e
36L7njc+WVk0L9R6wcRFsDBuSp3R++glvziGe/yl5CghzvYYfkgBET5fBvaZembP
973h+LBkGRV6SbDHb20ibjCn1oOVyFI/eqKrG5qafvUayv9GepqSukdxsZOXg7ty
O4LiSB+0geDmGuE2VwqgWFL9BeZoPujHoyGJtw==
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:08 2024 by rpki-client on console-fra.rpki-client.org