Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/qlbhH137VSOX2QqksaCFs34KbF0.roa
File: qlbhH137VSOX2QqksaCFs34KbF0.roa (raw, json)
Hash identifier: 2PvVoHqfyHk4519uM7up+dAAoVQRykoH+Q4ygLKeHTM=
Subject key identifier: AA:56:E1:1F:5D:FB:55:23:97:D9:0A:A4:B1:A0:85:B3:7E:0A:6C:5D
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018DD1C1641DF96C8D28A6C15325FF2971D5
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/qlbhH137VSOX2QqksaCFs34KbF0.roa
Signing time: Thu 22 Feb 2024 16:58:48 +0000
ROA not before: Thu 22 Feb 2024 16:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 37.77.151.0/24 maxlen: 24
45.90.12.0/22 maxlen: 24
45.90.116.0/22 maxlen: 24
62.3.53.0/24 maxlen: 24
77.87.126.0/24 maxlen: 24
89.248.65.0/24 maxlen: 24
94.154.115.0/24 maxlen: 24
109.205.63.0/24 maxlen: 24
146.19.119.0/24 maxlen: 24
146.19.231.0/24 maxlen: 24
178.212.79.0/24 maxlen: 24
185.138.165.0/24 maxlen: 24
185.149.150.0/24 maxlen: 24
193.221.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Feb 2024 07:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:c1:64:1d:f9:6c:8d:28:a6:c1:53:25:ff:29:71:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Feb 22 16:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa56e11f5dfb552397d90aa4b1a085b37e0a6c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:b5:ac:83:3c:82:e1:e4:eb:14:82:7b:0c:
e1:ec:fa:83:bc:3c:c0:bc:60:83:79:de:e3:99:71:
6d:27:2e:d5:e0:98:4d:7b:ec:3a:c2:66:ef:0a:b6:
00:10:5a:55:1c:45:b5:5c:ba:f1:39:ae:55:9f:e6:
1a:2d:c2:9e:17:e5:74:ee:c0:77:c6:2c:b4:26:0d:
5c:1f:51:6d:02:b1:6b:aa:9f:0f:90:7d:ec:57:2d:
b3:90:88:9e:e5:8e:a1:a8:81:a3:36:b8:aa:36:43:
8d:34:93:95:40:7e:4f:ce:f6:41:e9:76:2c:6e:44:
72:ea:80:00:2c:04:d0:d9:a6:73:c4:f5:c8:e9:df:
78:2d:f7:48:46:45:12:d8:23:2c:6d:14:9c:c6:3d:
f9:37:d7:22:3f:ee:63:65:be:2f:b0:25:89:ec:f8:
08:b6:ed:d7:80:66:77:44:15:08:21:de:3d:d4:aa:
1c:fb:40:ad:90:e5:74:17:49:50:d8:11:0e:4c:02:
65:32:36:53:80:62:d5:69:81:e9:b4:a2:70:e1:08:
e6:45:70:e3:38:a1:b2:de:0a:47:7c:36:f1:9c:5b:
51:87:a1:37:ad:3b:09:33:f9:c0:26:2e:de:57:58:
49:52:31:f1:06:f0:71:44:a3:43:d3:4e:80:6e:fd:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:E1:1F:5D:FB:55:23:97:D9:0A:A4:B1:A0:85:B3:7E:0A:6C:5D
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/qlbhH137VSOX2QqksaCFs34KbF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.151.0/24
45.90.12.0/22
45.90.116.0/22
62.3.53.0/24
77.87.126.0/24
89.248.65.0/24
94.154.115.0/24
109.205.63.0/24
146.19.119.0/24
146.19.231.0/24
178.212.79.0/24
185.138.165.0/24
185.149.150.0/24
193.221.208.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:98:50:8f:17:50:e5:87:e1:a1:e9:08:ff:70:64:6a:9b:e4:
85:38:00:49:ea:6a:78:3b:35:f7:42:57:98:ec:de:e0:0a:bb:
25:76:1d:bf:75:d5:97:cb:d4:1f:69:24:86:f7:a6:ee:02:f8:
64:d2:da:6f:38:bb:9b:4a:99:16:32:15:c9:86:b8:2a:d4:22:
4d:01:cd:fb:b2:54:cb:84:fa:22:20:38:66:18:af:24:45:b3:
5b:5b:8b:26:71:c7:1c:a4:15:a5:0e:2d:1b:ba:05:0d:1e:8b:
2a:f9:18:14:36:76:27:1a:f9:48:54:0a:d2:81:c0:f4:60:ba:
ba:71:c2:58:0f:b7:d4:40:7c:94:7d:ba:de:50:ed:fb:f7:38:
b4:00:0c:ed:a7:4d:b7:93:48:bd:72:e1:eb:14:91:fe:16:5e:
4b:ea:fa:2a:d2:3b:e1:75:0f:4c:33:4d:62:21:92:8c:7c:df:
8d:31:2c:8f:01:a4:35:7f:1e:2d:35:e1:de:a7:56:9a:d2:f4:
33:e6:17:15:e8:94:95:9e:a1:67:b0:b3:8f:b5:7f:65:5b:db:
ad:4c:c5:67:6e:09:c9:15:50:9d:3d:14:72:5b:15:d6:2c:cb:
55:06:76:35:ec:17:31:7a:6e:a4:d3:37:7e:6c:f1:a9:07:30:
d0:39:25:79
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAY3RwWQd+WyNKKbBUyX/KXHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjQwMjIyMTY1ODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTU2ZTExZjVkZmI1NTIzOTdkOTBhYTRiMWEwODViMzdlMGE2YzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdW1rIM8guHk6xSCewzh7PqDvDzA
vGCDed7jmXFtJy7V4JhNe+w6wmbvCrYAEFpVHEW1XLrxOa5Vn+YaLcKeF+V07sB3
xiy0Jg1cH1FtArFrqp8PkH3sVy2zkIie5Y6hqIGjNriqNkONNJOVQH5PzvZB6XYs
bkRy6oAALATQ2aZzxPXI6d94LfdIRkUS2CMsbRScxj35N9ciP+5jZb4vsCWJ7PgI
tu3XgGZ3RBUIId491Koc+0CtkOV0F0lQ2BEOTAJlMjZTgGLVaYHptKJw4QjmRXDj
OKGy3gpHfDbxnFtRh6E3rTsJM/nAJi7eV1hJUjHxBvBxRKND006Abv12OQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFKpW4R9d+1Ujl9kKpLGghbN+CmxdMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvcWxiaEgxMzdWU09YMlFxa3NhQ0ZzMzRLYkYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAJU2XAwQC
LVoMAwQCLVp0AwQAPgM1AwQATVd+AwQAWfhBAwQAXppzAwQAbc0/AwQAkhN3AwQA
khPnAwQAstRPAwQAuYqlAwQAuZWWAwQAwd3QMA0GCSqGSIb3DQEBCwUAA4IBAQAs
mFCPF1Dlh+Gh6Qj/cGRqm+SFOABJ6mp4OzX3QleY7N7gCrsldh2/ddWXy9QfaSSG
96buAvhk0tpvOLubSpkWMhXJhrgq1CJNAc37slTLhPoiIDhmGK8kRbNbW4smcccc
pBWlDi0bugUNHosq+RgUNnYnGvlIVArSgcD0YLq6ccJYD7fUQHyUfbreUO379zi0
AAztp023k0i9cuHrFJH+Fl5L6voq0jvhdQ9MM01iIZKMfN+NMSyPAaQ1fx4tNeHe
p1aa0vQz5hcV6JSVnqFnsLOPtX9lW9utTMVnbgnJFVCdPRRyWxXWLMtVBnY17Bcx
em6k0zd+bPGpBzDQOSV5
-----END CERTIFICATE-----
Generated at Sun Feb 25 08:35:04 2024 by rpki-client on console-ams.rpki-client.org