Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/Q5eFZb_pwNfi9XDuaQZxtCMWKQI.roa
File: Q5eFZb_pwNfi9XDuaQZxtCMWKQI.roa (raw, json)
Hash identifier: jEm9Gc/5vUP3/3lafxd2HLmVZDYZ8x82J+fm2ghDm8k=
Subject key identifier: 43:97:85:65:BF:E9:C0:D7:E2:F5:70:EE:69:06:71:B4:23:16:29:02
Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial: 018CC424A3E737032EFB30A8F43F9B9159CC
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/Q5eFZb_pwNfi9XDuaQZxtCMWKQI.roa
Signing time: Mon 01 Jan 2024 08:29:44 +0000
ROA not before: Mon 01 Jan 2024 08:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209620
IP address blocks: 193.58.88.0/22 maxlen: 24
193.58.91.0/24 maxlen: 24
194.55.240.0/22 maxlen: 24
2a0c:94c0::/29 maxlen: 48
2a0c:cbc0::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:a3:e7:37:03:2e:fb:30:a8:f4:3f:9b:91:59:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Validity
Not Before: Jan 1 08:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43978565bfe9c0d7e2f570ee690671b423162902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:b8:de:cf:82:1e:51:83:5b:79:4a:29:02:
9c:5a:62:8a:a9:95:e7:fb:e7:50:2c:e2:cc:ba:96:
5a:c1:21:ff:93:e8:67:07:5e:28:cd:2b:49:4b:6b:
40:f5:a0:84:15:91:67:88:49:5f:5a:d9:9a:51:a5:
28:5d:c1:a7:48:44:ce:b0:a7:08:fe:d8:ef:ce:09:
14:a3:b5:97:ee:c9:23:37:84:07:d5:66:08:d3:9e:
f5:07:3b:75:fa:bb:82:34:5a:ca:41:24:0a:68:a4:
eb:d1:8b:69:bd:b6:32:36:de:da:f6:72:86:97:7a:
87:a1:a2:6d:d0:e4:44:2f:a5:d5:c0:6d:db:9b:49:
2b:1a:be:54:9e:6d:f2:6c:2d:1e:09:7b:1a:c0:f6:
52:c2:cc:ba:5d:f6:15:ca:48:97:b6:9c:bf:55:8c:
8c:02:76:68:e3:52:7b:eb:7c:ad:28:ec:cb:16:08:
c2:8f:ec:32:f3:7d:93:75:fc:c4:2b:b9:d6:24:dc:
7a:f4:7a:84:43:92:50:6e:1f:ef:b3:bf:05:24:7c:
e4:78:e8:60:16:76:88:1b:25:a1:e5:ff:43:86:76:
a9:1d:a5:e2:50:48:fd:9b:1a:64:85:d1:fd:cf:f4:
23:1a:04:69:23:38:1e:86:f3:4e:71:ca:fa:fd:89:
03:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:97:85:65:BF:E9:C0:D7:E2:F5:70:EE:69:06:71:B4:23:16:29:02
X509v3 Authority Key Identifier:
keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/Q5eFZb_pwNfi9XDuaQZxtCMWKQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.88.0/22
194.55.240.0/22
IPv6:
2a0c:94c0::/29
2a0c:cbc0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:bf:11:ca:36:aa:5a:d3:c2:15:c6:45:da:0c:9c:9b:21:3a:
67:ad:70:42:dc:e2:0b:ab:26:79:ed:6d:ef:07:06:3a:af:58:
21:d3:66:ba:f8:dc:c6:b4:5c:80:31:86:d1:a4:89:7c:8f:d9:
17:8f:39:54:59:f0:76:0b:0a:9a:57:f3:f9:b5:f4:9a:d4:92:
52:dc:22:93:53:cb:a6:58:fa:77:4a:00:53:0c:c1:8c:37:98:
30:58:8d:49:b8:0b:78:04:00:40:36:6d:b8:c7:ee:28:3c:30:
56:e5:d4:8b:5b:e7:63:89:4d:f1:93:b6:24:1d:bf:3c:18:76:
b7:50:83:93:b6:66:21:32:b1:d2:d4:f6:17:84:52:93:9f:2c:
df:07:62:65:62:8b:c3:e8:42:30:df:b2:ff:22:3d:0a:c5:2a:
26:a5:fd:2d:72:3f:ac:25:7e:b3:95:4a:cb:29:08:b8:7a:aa:
e3:78:2a:d9:8b:78:21:9a:71:55:04:38:42:0f:4a:11:52:9b:
a8:f7:e4:f8:3f:bf:a9:6e:7f:3a:c1:21:04:6e:d4:3c:bb:d4:
ee:51:d3:ed:68:fa:74:c7:a9:f5:cc:fb:c1:f0:da:e9:82:a8:
08:be:f4:ce:69:5f:af:ce:34:14:e9:f5:74:bf:28:b7:73:cc:
56:5f:9b:f4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYzEJKPnNwMu+zCo9D+bkVnMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MjNmZTZkYWQ4YWQ0ZmRhZWU2ZGQ2OTgzYzFlNTVjZGU4
NDgyYTIwHhcNMjQwMTAxMDgyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mzk3ODU2NWJmZTljMGQ3ZTJmNTcwZWU2OTA2NzFiNDIzMTYyOTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnq43s+CHlGDW3lKKQKcWmKKqZXn
++dQLOLMupZawSH/k+hnB14ozStJS2tA9aCEFZFniElfWtmaUaUoXcGnSETOsKcI
/tjvzgkUo7WX7skjN4QH1WYI0571Bzt1+ruCNFrKQSQKaKTr0YtpvbYyNt7a9nKG
l3qHoaJt0OREL6XVwG3bm0krGr5Unm3ybC0eCXsawPZSwsy6XfYVykiXtpy/VYyM
AnZo41J763ytKOzLFgjCj+wy832TdfzEK7nWJNx69HqEQ5JQbh/vs78FJHzkeOhg
FnaIGyWh5f9DhnapHaXiUEj9mxpkhdH9z/QjGgRpIzgehvNOccr6/YkDDQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEOXhWW/6cDX4vVw7mkGcbQjFikCMB8GA1UdIwQY
MBaAFKgj/m2titT9rubdaYPB5VzehIKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wMzg1NjAtMjZkNi00NTVkLWE4ZjQt
OWJmZGYyMjUxMjY3LzEvUTVlRlpiX3B3TmZpOVhEdWFRWnh0Q01XS1FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wMzg1NjAtMjZkNi00NTVkLWE4ZjQtOWJmZGYyMjUxMjY3
LzEvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCwTpYAwQC
wjfwMBQEAgACMA4DBQMqDJTAAwUDKgzLwDANBgkqhkiG9w0BAQsFAAOCAQEAK78R
yjaqWtPCFcZF2gycmyE6Z61wQtziC6smee1t7wcGOq9YIdNmuvjcxrRcgDGG0aSJ
fI/ZF485VFnwdgsKmlfz+bX0mtSSUtwik1PLplj6d0oAUwzBjDeYMFiNSbgLeAQA
QDZtuMfuKDwwVuXUi1vnY4lN8ZO2JB2/PBh2t1CDk7ZmITKx0tT2F4RSk58s3wdi
ZWKLw+hCMN+y/yI9CsUqJqX9LXI/rCV+s5VKyykIuHqq43gq2Yt4IZpxVQQ4Qg9K
EVKbqPfk+D+/qW5/OsEhBG7UPLvU7lHT7Wj6dMep9cz7wfDa6YKoCL70zmlfr840
FOn1dL8ot3PMVl+b9A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:59 2025 by rpki-client