Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/QIUIrAQ4mPw8OYUMhvhfVhVcvQA.roa
File: QIUIrAQ4mPw8OYUMhvhfVhVcvQA.roa (raw, json)
Hash identifier: U/DrW4TwBxfRtjD9d8bLCQZN1KC5/k6m9kn2SFWEgHQ=
Subject key identifier: 40:85:08:AC:04:38:98:FC:3C:39:85:0C:86:F8:5F:56:15:5C:BD:00
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018B7544F75F806DB26B5046F1B15ECF2CDB
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/QIUIrAQ4mPw8OYUMhvhfVhVcvQA.roa
Signing time: Sat 28 Oct 2023 07:52:15 +0000
ROA not before: Sat 28 Oct 2023 07:52:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209889
IP address blocks: 194.56.212.0/23 maxlen: 23
194.56.152.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:75:44:f7:5f:80:6d:b2:6b:50:46:f1:b1:5e:cf:2c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 28 07:52:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=408508ac043898fc3c39850c86f85f56155cbd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d8:c3:48:ff:1e:cd:3e:a1:6a:ac:49:7f:ce:
10:45:8c:34:06:c3:f0:04:3c:89:ea:13:45:a8:08:
45:b5:a6:b6:ec:e5:96:57:8d:3e:06:c5:6f:3f:13:
48:51:5f:f2:92:2b:36:9e:e2:f5:2c:e4:63:a0:97:
6c:fa:12:50:d5:bd:84:92:3c:4c:4e:b0:79:9c:82:
d1:0c:5b:58:b9:ee:79:4b:47:f8:87:fe:df:10:22:
93:b4:dc:65:a4:03:0a:c9:f8:c1:95:b4:30:6f:04:
41:06:9e:e6:f7:7a:56:22:64:ab:ab:bf:c6:d8:92:
0c:df:85:fc:5b:fc:8a:d3:6b:29:87:9e:0c:bf:90:
0a:75:a8:d9:03:36:c2:dd:9d:10:37:cc:93:89:82:
f4:68:1f:6c:e4:e4:91:a1:92:d7:22:3f:c3:ce:44:
36:03:73:9a:67:f9:23:19:79:02:82:8e:35:db:7c:
4a:f8:f9:20:d1:60:f9:5c:c5:15:d1:27:36:4f:17:
58:c2:71:b0:52:ff:13:a6:71:5d:06:1e:d9:a3:fd:
45:b7:9d:b1:cc:a5:0d:2b:69:51:c7:0a:9a:e0:9b:
f4:c2:6d:d6:77:ef:f4:e7:de:2e:a3:9d:06:63:03:
6a:b7:1f:ad:62:d7:ba:cd:17:4b:46:87:bf:8b:8e:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:85:08:AC:04:38:98:FC:3C:39:85:0C:86:F8:5F:56:15:5C:BD:00
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/QIUIrAQ4mPw8OYUMhvhfVhVcvQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.152.0/23
194.56.212.0/23
Signature Algorithm: sha256WithRSAEncryption
34:05:30:53:c7:98:03:8e:2b:14:f8:00:af:31:2a:89:51:96:
52:d9:40:03:b9:e4:87:a8:c7:ad:fd:ef:33:a0:15:4c:e4:fa:
0b:65:eb:03:40:f0:c6:45:fa:60:a6:a0:f2:8f:b5:a6:1f:64:
2a:73:6d:21:0b:25:10:eb:7b:c9:ab:ba:bc:55:d6:e2:aa:30:
2c:3c:fa:6a:f3:c2:ea:5c:cd:e8:68:d9:78:3f:5a:29:08:7d:
e5:e4:8a:a3:78:be:11:b6:b8:ba:7a:4b:1f:5e:29:6d:7f:92:
d3:f7:3d:b5:6a:9d:69:53:2e:c8:ab:93:21:96:43:c7:e9:d0:
53:b0:a7:c3:70:18:4a:48:b4:45:b9:83:ae:19:2c:02:5c:6b:
26:6b:15:39:00:96:ab:44:48:ea:93:62:40:a2:5c:11:c6:25:
59:97:66:03:38:a4:8f:88:82:54:df:f4:67:fd:33:24:48:e1:
24:a7:c1:65:b7:5a:a6:56:f0:a7:76:11:a1:3f:17:ce:f4:53:
03:33:ee:dc:fe:79:82:2b:a9:57:c0:30:dc:5f:f6:e8:b7:cf:
c6:dd:7f:06:ba:d5:18:c1:43:15:42:58:f3:02:4b:6a:58:c1:
75:d6:13:9e:44:69:d2:e1:87:e0:bd:93:02:27:64:ce:aa:e2:
70:98:58:8e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYt1RPdfgG2ya1BG8bFezyzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMxMDI4MDc1MjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDg1MDhhYzA0Mzg5OGZjM2MzOTg1MGM4NmY4NWY1NjE1NWNiZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNjDSP8ezT6haqxJf84QRYw0BsPw
BDyJ6hNFqAhFtaa27OWWV40+BsVvPxNIUV/ykis2nuL1LORjoJds+hJQ1b2EkjxM
TrB5nILRDFtYue55S0f4h/7fECKTtNxlpAMKyfjBlbQwbwRBBp7m93pWImSrq7/G
2JIM34X8W/yK02sph54Mv5AKdajZAzbC3Z0QN8yTiYL0aB9s5OSRoZLXIj/DzkQ2
A3OaZ/kjGXkCgo4123xK+Pkg0WD5XMUV0Sc2TxdYwnGwUv8TpnFdBh7Zo/1Ft52x
zKUNK2lRxwqa4Jv0wm3Wd+/0594uo50GYwNqtx+tYte6zRdLRoe/i45NwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFECFCKwEOJj8PDmFDIb4X1YVXL0AMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvUUlVSXJBUTRtUHc4T1lVTWh2aGZWaFZjdlFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwjiYAwQB
wjjUMA0GCSqGSIb3DQEBCwUAA4IBAQA0BTBTx5gDjisU+ACvMSqJUZZS2UADueSH
qMet/e8zoBVM5PoLZesDQPDGRfpgpqDyj7WmH2Qqc20hCyUQ63vJq7q8VdbiqjAs
PPpq88LqXM3oaNl4P1opCH3l5IqjeL4Rtri6eksfXiltf5LT9z21ap1pUy7Iq5Mh
lkPH6dBTsKfDcBhKSLRFuYOuGSwCXGsmaxU5AJarREjqk2JAolwRxiVZl2YDOKSP
iIJU3/Rn/TMkSOEkp8Flt1qmVvCndhGhPxfO9FMDM+7c/nmCK6lXwDDcX/bot8/G
3X8GutUYwUMVQljzAktqWMF11hOeRGnS4YfgvZMCJ2TOquJwmFiO
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org