Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/_QxmCLaqhuFzVJ3zIoroQPCjxas.roa
File: _QxmCLaqhuFzVJ3zIoroQPCjxas.roa (raw, json)
Hash identifier: a4blMc+aXyKitYu9dIvOPeuIJxmeuMfzbcDUPfGZSmA=
Subject key identifier: FD:0C:66:08:B6:AA:86:E1:73:54:9D:F3:22:8A:E8:40:F0:A3:C5:AB
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018CC7259FB313CB6CA0207C3A2A38B07AE0
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/_QxmCLaqhuFzVJ3zIoroQPCjxas.roa
Signing time: Mon 01 Jan 2024 22:29:40 +0000
ROA not before: Mon 01 Jan 2024 22:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12679
IP address blocks: 94.137.78.0/24 maxlen: 24
94.137.72.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 20:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:9f:b3:13:cb:6c:a0:20:7c:3a:2a:38:b0:7a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 1 22:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd0c6608b6aa86e173549df3228ae840f0a3c5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:65:4c:5e:3a:36:d1:b9:5e:b3:0f:46:7d:72:
76:04:2c:74:8d:1d:56:8c:88:e6:58:56:44:fb:3f:
cf:9f:c3:78:d3:d2:64:f9:ec:ab:d4:63:d4:45:12:
cf:6a:41:12:7f:26:39:66:d2:73:02:a0:91:44:37:
60:68:e8:2b:dc:ff:91:90:c1:55:4d:11:41:fe:cb:
0b:34:4c:9a:35:32:f5:f5:02:5e:42:28:ad:d7:bf:
7d:d4:f9:81:af:fa:16:62:ec:e0:51:9f:68:04:52:
4c:d6:90:30:91:c5:9c:58:df:0d:d4:e0:de:cd:82:
48:75:96:45:3c:a0:b6:89:42:c9:bc:4a:e9:0e:b9:
55:92:65:9f:84:45:ed:c4:b2:00:6b:93:97:6e:61:
48:61:ed:cd:60:6b:8c:d6:b6:14:4d:a2:36:67:13:
ea:2a:b2:37:97:9d:b8:63:bd:6a:9e:58:d1:bb:a9:
3c:77:85:f0:e2:45:e9:d2:be:b7:58:7f:31:d9:5b:
7a:fc:84:fd:00:89:da:6b:89:9e:32:e7:4b:d7:23:
8a:22:f7:4f:64:d3:0e:b5:dc:d1:b6:83:80:5b:15:
91:37:ea:53:23:64:b7:8a:85:24:bf:50:09:ef:c4:
eb:f4:be:5d:d8:98:75:0a:11:7f:cd:70:17:3c:1b:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0C:66:08:B6:AA:86:E1:73:54:9D:F3:22:8A:E8:40:F0:A3:C5:AB
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/_QxmCLaqhuFzVJ3zIoroQPCjxas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.72.0/24
94.137.78.0/24
94.137.89.0-94.137.91.255
Signature Algorithm: sha256WithRSAEncryption
4c:11:e0:6a:e4:25:32:c7:fc:8f:25:a7:03:e6:be:72:e6:b2:
aa:c9:bb:50:c1:36:e6:7b:af:5c:cc:7e:61:ee:ae:59:04:89:
f9:ad:6e:7c:fa:44:87:20:07:9b:35:7f:4b:13:d5:8a:06:53:
87:6d:18:77:2e:c5:40:fa:09:c8:11:18:a1:76:77:d2:06:a8:
31:17:44:fd:bc:ba:ef:3b:fa:1d:32:e1:0d:8e:e9:08:a5:b5:
39:c7:7d:02:78:f9:ab:c3:12:a4:7a:2e:38:52:ba:dc:83:3a:
57:9e:87:ac:c3:6e:db:8f:da:80:42:17:c7:82:d6:f4:1b:42:
f5:60:e1:61:ba:b2:24:08:59:a0:06:ad:93:25:22:1a:30:c2:
76:32:4d:d5:55:7c:f8:28:81:5d:61:d8:15:71:19:53:69:1a:
94:ac:9f:29:e6:5b:43:81:2d:8d:15:87:d5:d7:fb:41:43:73:
84:8b:d9:f2:0b:91:a4:f8:69:f4:d0:27:57:5c:84:91:31:c7:
a9:20:b9:1c:97:04:90:74:c1:1a:c9:0f:9c:91:fd:72:03:52:
7f:b3:fa:28:84:96:a2:3c:8b:60:f2:60:3c:ee:af:41:22:16:
21:98:f1:d5:8b:af:9a:77:0e:8b:e1:e3:65:ee:9e:77:ee:71:
53:cd:06:6a
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzHJZ+zE8tsoCB8Oio4sHrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjQwMTAxMjIyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDBjNjYwOGI2YWE4NmUxNzM1NDlkZjMyMjhhZTg0MGYwYTNjNWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWVMXjo20blesw9GfXJ2BCx0jR1W
jIjmWFZE+z/Pn8N409Jk+eyr1GPURRLPakESfyY5ZtJzAqCRRDdgaOgr3P+RkMFV
TRFB/ssLNEyaNTL19QJeQiit17991PmBr/oWYuzgUZ9oBFJM1pAwkcWcWN8N1ODe
zYJIdZZFPKC2iULJvErpDrlVkmWfhEXtxLIAa5OXbmFIYe3NYGuM1rYUTaI2ZxPq
KrI3l524Y71qnljRu6k8d4Xw4kXp0r63WH8x2Vt6/IT9AInaa4meMudL1yOKIvdP
ZNMOtdzRtoOAWxWRN+pTI2S3ioUkv1AJ78Tr9L5d2Jh1ChF/zXAXPBsRpwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFP0MZgi2qobhc1Sd8yKK6EDwo8WrMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvX1F4bUNMYXFodUZ6Vkozeklvcm9RUENqeGFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAXolIAwQA
XolOMAwDBABeiVkDBAJeiVgwDQYJKoZIhvcNAQELBQADggEBAEwR4GrkJTLH/I8l
pwPmvnLmsqrJu1DBNuZ7r1zMfmHurlkEifmtbnz6RIcgB5s1f0sT1YoGU4dtGHcu
xUD6CcgRGKF2d9IGqDEXRP28uu87+h0y4Q2O6QiltTnHfQJ4+avDEqR6LjhSutyD
Oleeh6zDbtuP2oBCF8eC1vQbQvVg4WG6siQIWaAGrZMlIhowwnYyTdVVfPgogV1h
2BVxGVNpGpSsnynmW0OBLY0Vh9XX+0FDc4SL2fILkaT4afTQJ1dchJExx6kguRyX
BJB0wRrJD5yR/XIDUn+z+iiElqI8i2DyYDzur0EiFiGY8dWLr5p3Dovh42Xunnfu
cVPNBmo=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:13 2025 by rpki-client