Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/qbFVIBguR2b1ZzjZkfi825ZM-lw.roa
File: qbFVIBguR2b1ZzjZkfi825ZM-lw.roa (raw, json)
Hash identifier: gHUpG10TEBy5Ejas487QxKQmBOON++5W+HWRROIwzF0=
Subject key identifier: A9:B1:55:20:18:2E:47:66:F5:67:38:D9:91:F8:BC:DB:96:4C:FA:5C
Certificate issuer: /CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c
Certificate serial: 0185727114EE04DBE042E369B4D47EA7710F
Authority key identifier: 10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/qbFVIBguR2b1ZzjZkfi825ZM-lw.roa
Signing time: Mon 02 Jan 2023 12:24:51 +0000
ROA not before: Mon 02 Jan 2023 12:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48408
IP address blocks: 91.209.133.0/24 maxlen: 24
185.142.224.0/22 maxlen: 24
2a07:3140::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 23 Dec 2023 07:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:14:ee:04:db:e0:42:e3:69:b4:d4:7e:a7:71:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c
Validity
Not Before: Jan 2 12:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9b15520182e4766f56738d991f8bcdb964cfa5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:51:ee:ac:a3:2f:dc:7e:5c:c1:eb:cd:13:a2:
0c:32:d7:97:3d:3e:0a:59:a5:b5:c0:c8:46:e3:c2:
b5:2b:22:94:11:41:57:3b:6e:2c:69:6a:01:4f:1a:
bc:66:b2:28:09:66:74:d5:ed:60:60:76:6f:fc:5c:
78:06:3a:e8:3e:1b:ce:6c:35:75:e3:84:7a:88:b9:
ff:4f:a2:e7:9e:1c:4e:a4:c6:f8:7b:7f:83:15:52:
4c:64:ec:eb:25:45:34:f5:57:21:1b:be:15:fc:bc:
c7:c9:8d:c6:16:01:ba:f9:bc:5e:73:01:26:8f:49:
ab:aa:7c:c8:5f:3f:2e:0e:cc:d0:65:f3:0f:17:6e:
2e:43:61:ce:62:fd:79:e1:ec:e6:b5:12:ae:89:24:
59:b8:2c:5a:c8:ff:dd:f3:3d:17:e2:4c:18:d3:77:
88:11:5b:26:88:da:e9:35:5d:d1:64:e0:2b:2e:d0:
b4:0d:a3:de:a8:e3:75:2c:e6:5d:f3:a5:8c:00:d1:
a8:f4:1b:e6:fb:2f:85:c4:bb:70:83:fa:1f:43:00:
b4:61:5e:c5:a0:c8:90:f5:dc:dc:20:38:b3:65:f9:
e8:bd:d9:8b:5a:79:ae:5b:5e:d7:1d:5b:6a:e9:e2:
8a:68:18:30:5f:3a:b0:99:cb:cf:69:e1:ec:bc:ef:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B1:55:20:18:2E:47:66:F5:67:38:D9:91:F8:BC:DB:96:4C:FA:5C
X509v3 Authority Key Identifier:
keyid:10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/qbFVIBguR2b1ZzjZkfi825ZM-lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.133.0/24
185.142.224.0/22
IPv6:
2a07:3140::/29
Signature Algorithm: sha256WithRSAEncryption
b9:97:d4:fe:e8:a6:60:05:58:d8:ad:51:fe:a6:c7:72:24:d6:
d4:73:14:b5:b4:b7:89:cc:d8:e9:3a:58:95:81:7c:36:cf:f3:
02:dc:a2:7f:6b:37:60:8c:54:1b:d5:36:c5:92:f9:41:27:92:
e8:3a:d1:56:6a:53:e9:e9:b1:0d:4e:27:2a:43:e6:ea:1d:05:
e4:79:e5:cf:8d:d0:fc:b7:c3:02:af:5b:cd:80:c7:4f:21:2e:
d1:bd:8a:4c:73:6f:29:bd:7f:98:17:24:01:06:6b:8b:5b:d8:
1c:2d:6e:04:4d:89:fc:9c:e1:8b:fb:82:42:cb:74:ab:f8:57:
b0:51:87:9a:2e:90:c2:26:8b:7f:34:5e:85:30:84:2a:19:36:
1d:dd:34:62:ad:0e:47:4c:68:f7:ae:cc:11:21:91:84:ab:27:
22:b4:53:d2:58:8e:f9:d3:9f:dd:e8:be:a5:14:4a:8a:dc:81:
1b:bd:08:f1:20:68:c1:47:0b:f4:c5:53:0d:d0:24:ef:04:c5:
cf:80:c2:fe:42:1c:12:fd:0e:63:31:36:95:a6:95:6f:2d:76:
df:14:f9:22:dd:60:28:35:e9:13:62:c1:89:ec:1f:c5:7b:54:
56:68:15:af:4a:de:a7:02:cc:4d:80:12:1c:63:53:4d:39:31:
7a:98:7b:2d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVycRTuBNvgQuNptNR+p3EPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMDhiYTU0MjlhNzA5YmM1OGVjZGJhZTNmMTdlMWJjOWQz
YTRkNWMwHhcNMjMwMTAyMTIyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWIxNTUyMDE4MmU0NzY2ZjU2NzM4ZDk5MWY4YmNkYjk2NGNmYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVHurKMv3H5cwevNE6IMMteXPT4K
WaW1wMhG48K1KyKUEUFXO24saWoBTxq8ZrIoCWZ01e1gYHZv/Fx4BjroPhvObDV1
44R6iLn/T6LnnhxOpMb4e3+DFVJMZOzrJUU09VchG74V/LzHyY3GFgG6+bxecwEm
j0mrqnzIXz8uDszQZfMPF24uQ2HOYv154ezmtRKuiSRZuCxayP/d8z0X4kwY03eI
EVsmiNrpNV3RZOArLtC0DaPeqON1LOZd86WMANGo9Bvm+y+FxLtwg/ofQwC0YV7F
oMiQ9dzcIDizZfnovdmLWnmuW17XHVtq6eKKaBgwXzqwmcvPaeHsvO/24wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFKmxVSAYLkdm9Wc42ZH4vNuWTPpcMB8GA1UdIwQY
MBaAFBAIulQppwm8WOzbrj8X4bydOk1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUFpNlZDbW5DYnhZN051dVB4Zmh2SjA2VFZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82MTIzYzQtMmJjNS00ZGY5LWFkMTMt
ZTFkOTliODcwNmU0LzEvcWJGVklCZ3VSMmIxWnpqWmtmaTgyNVpNLWx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82MTIzYzQtMmJjNS00ZGY5LWFkMTMtZTFkOTliODcwNmU0
LzEvRUFpNlZDbW5DYnhZN051dVB4Zmh2SjA2VFZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9GFAwQC
uY7gMA0EAgACMAcDBQMqBzFAMA0GCSqGSIb3DQEBCwUAA4IBAQC5l9T+6KZgBVjY
rVH+psdyJNbUcxS1tLeJzNjpOliVgXw2z/MC3KJ/azdgjFQb1TbFkvlBJ5LoOtFW
alPp6bENTicqQ+bqHQXkeeXPjdD8t8MCr1vNgMdPIS7RvYpMc28pvX+YFyQBBmuL
W9gcLW4ETYn8nOGL+4JCy3Sr+FewUYeaLpDCJot/NF6FMIQqGTYd3TRirQ5HTGj3
rswRIZGEqycitFPSWI7505/d6L6lFEqK3IEbvQjxIGjBRwv0xVMN0CTvBMXPgML+
QhwS/Q5jMTaVppVvLXbfFPki3WAoNekTYsGJ7B/Fe1RWaBWvSt6nAsxNgBIcY1NN
OTF6mHst
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:45 2024 by rpki-client on console-ams.rpki-client.org