Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/q0U1aCtFsbfHAxlARTDQC0ikuZ8.roa
File: q0U1aCtFsbfHAxlARTDQC0ikuZ8.roa (raw, json)
Hash identifier: PvA3axz2PxBEmpEXt/Ka3W5n0yJLaCU1UR8A53mV3p8=
Subject key identifier: AB:45:35:68:2B:45:B1:B7:C7:03:19:40:45:30:D0:0B:48:A4:B9:9F
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 018C3A97C88D6E8A62EBDEDEE914D8588F77
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/q0U1aCtFsbfHAxlARTDQC0ikuZ8.roa
Signing time: Tue 05 Dec 2023 15:27:54 +0000
ROA not before: Tue 05 Dec 2023 15:27:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48847
IP address blocks: 193.84.118.0/24 maxlen: 24
193.84.115.0/26 maxlen: 26
193.84.114.0/23 maxlen: 23
193.84.114.224/27 maxlen: 27
193.84.114.0/24 maxlen: 24
193.84.118.0/26 maxlen: 26
193.84.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:97:c8:8d:6e:8a:62:eb:de:de:e9:14:d8:58:8f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Dec 5 15:27:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab4535682b45b1b7c70319404530d00b48a4b99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:57:66:cb:73:43:f0:fe:95:61:76:0f:be:
fd:02:ff:b4:d4:b1:ae:ff:7d:05:63:be:65:a7:76:
67:a1:38:e1:fd:59:09:38:13:79:68:6c:c3:f2:63:
41:5a:91:c6:66:f0:ff:71:a9:0d:9c:95:45:af:24:
9f:73:72:9b:84:04:d0:db:18:a6:1c:6f:75:48:4f:
09:a0:91:55:c1:43:b8:39:fd:24:6c:f5:96:7f:a8:
97:02:16:11:a6:6c:e1:ad:ff:29:df:4e:41:0c:a6:
4e:8c:df:eb:42:d6:86:12:fd:af:c0:aa:5b:60:54:
1b:4b:87:c4:2a:bc:68:c4:33:9d:a7:22:28:1b:38:
de:26:42:13:d1:55:78:06:40:be:39:4e:63:cc:df:
09:9a:c5:86:4a:6c:1a:0d:10:8f:ce:b2:00:a6:a4:
3c:00:d5:89:7d:dd:52:7c:20:73:29:c6:e5:b4:26:
c8:e5:c1:25:72:05:84:89:f4:3e:4b:10:69:2c:2b:
d1:03:7c:1e:16:65:ec:44:bd:ad:74:c0:ad:0d:51:
23:b2:fc:c7:d5:6b:0a:fe:63:bd:33:80:44:10:a6:
90:4d:6f:2d:3f:15:c5:8f:02:ac:c4:80:77:db:08:
b3:4b:af:db:58:79:7c:32:9c:77:79:11:b1:54:3e:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:45:35:68:2B:45:B1:B7:C7:03:19:40:45:30:D0:0B:48:A4:B9:9F
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/q0U1aCtFsbfHAxlARTDQC0ikuZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.114.0/23
193.84.118.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e7:2e:37:59:4e:90:d6:ac:5b:6f:dc:80:ac:ae:7e:72:a8:
a0:1d:fb:df:19:3a:2c:ef:6f:cf:4d:d9:c6:8b:2c:c0:ae:7d:
51:05:f2:26:0e:26:45:74:34:d4:90:61:ea:e8:d5:99:2d:b9:
d1:79:1e:26:4e:9c:2b:9b:f3:22:60:ef:d4:8f:1d:45:d4:39:
29:cc:63:ea:5c:5e:e6:31:43:b3:b6:b8:b7:29:16:f1:2d:3a:
47:e5:cb:a8:94:3e:06:50:9b:4d:69:46:58:80:a2:03:9c:cd:
11:af:0b:e1:7c:be:2a:73:67:93:9f:20:d3:5a:67:54:7a:5f:
1f:58:d8:28:3d:6d:ca:3f:ad:7c:ae:55:33:9b:d8:19:14:e3:
48:70:99:8b:3e:64:bf:bf:0c:af:e4:7e:73:b8:f5:96:08:3e:
86:26:6c:97:d0:76:86:cf:53:a5:f9:51:1e:7a:01:5e:30:20:
5d:f0:3f:25:3a:5f:70:e1:62:0c:6e:27:44:61:16:71:93:3d:
8a:92:80:05:97:61:4d:fc:0d:a9:d5:40:af:5c:2c:21:bd:d0:
dc:e3:c3:c5:5a:56:a1:72:48:a9:c9:45:0c:d3:96:31:72:f2:
d4:43:ff:1d:d9:5a:6f:ad:6a:29:51:ca:98:3c:5a:18:ab:52:
7c:0c:74:ba
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYw6l8iNbopi697e6RTYWI93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGQ4NmFmYjU5ZjFkOWRkMTZjMTEyNTAwOWI5OTgzODJl
MzZlZDMwHhcNMjMxMjA1MTUyNzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjQ1MzU2ODJiNDViMWI3YzcwMzE5NDA0NTMwZDAwYjQ4YTRiOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbxXZstzQ/D+lWF2D779Av+01LGu
/30FY75lp3ZnoTjh/VkJOBN5aGzD8mNBWpHGZvD/cakNnJVFrySfc3KbhATQ2xim
HG91SE8JoJFVwUO4Of0kbPWWf6iXAhYRpmzhrf8p305BDKZOjN/rQtaGEv2vwKpb
YFQbS4fEKrxoxDOdpyIoGzjeJkIT0VV4BkC+OU5jzN8JmsWGSmwaDRCPzrIApqQ8
ANWJfd1SfCBzKcbltCbI5cElcgWEifQ+SxBpLCvRA3weFmXsRL2tdMCtDVEjsvzH
1WsK/mO9M4BEEKaQTW8tPxXFjwKsxIB32wizS6/bWHl8Mpx3eRGxVD6P1wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKtFNWgrRbG3xwMZQEUw0AtIpLmfMB8GA1UdIwQY
MBaAFJxNhq+1nx2d0WwRJQCbmYOC427TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgt
ZjRmMDU2MWI3YTU3LzEvcTBVMWFDdEZzYmZIQXhsQVJURFFDMGlrdVo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgtZjRmMDU2MWI3YTU3
LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwVRyAwQA
wVR2MA0GCSqGSIb3DQEBCwUAA4IBAQBs5y43WU6Q1qxbb9yArK5+cqigHfvfGTos
72/PTdnGiyzArn1RBfImDiZFdDTUkGHq6NWZLbnReR4mTpwrm/MiYO/Ujx1F1Dkp
zGPqXF7mMUOztri3KRbxLTpH5cuolD4GUJtNaUZYgKIDnM0RrwvhfL4qc2eTnyDT
WmdUel8fWNgoPW3KP618rlUzm9gZFONIcJmLPmS/vwyv5H5zuPWWCD6GJmyX0HaG
z1Ol+VEeegFeMCBd8D8lOl9w4WIMbidEYRZxkz2KkoAFl2FN/A2p1UCvXCwhvdDc
48PFWlahckipyUUM05YxcvLUQ/8d2VpvrWopUcqYPFoYq1J8DHS6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:03 2024 by rpki-client on console-ams.rpki-client.org