Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/qkx1n3nzqxbhsr_ovSSxPnJBTLs.roa
File: qkx1n3nzqxbhsr_ovSSxPnJBTLs.roa (raw, json)
Hash identifier: f1ZwfcRhIwIW5ymiUaOa7RWrBbfpHpWdVWP+xRk5qWc=
Subject key identifier: AA:4C:75:9F:79:F3:AB:16:E1:B2:BF:E8:BD:24:B1:3E:72:41:4C:BB
Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial: 01856FDDDDD7DEC91821BD3E5B0F0DEB763D
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/qkx1n3nzqxbhsr_ovSSxPnJBTLs.roa
Signing time: Mon 02 Jan 2023 00:24:49 +0000
ROA not before: Mon 02 Jan 2023 00:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41400
IP address blocks: 193.93.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:dd:d7:de:c9:18:21:bd:3e:5b:0f:0d:eb:76:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Validity
Not Before: Jan 2 00:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa4c759f79f3ab16e1b2bfe8bd24b13e72414cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:48:b0:2f:76:de:81:c4:cb:65:2a:91:39:
4d:e6:f8:c9:ad:b2:b8:57:08:09:0f:82:d5:bb:35:
a4:5b:16:1d:71:21:85:19:ca:12:7a:32:5f:3c:08:
b8:d4:c9:03:e9:c5:f1:1a:8b:93:37:b2:63:80:d6:
28:08:db:a1:9e:3b:20:6c:0a:7b:ee:a2:d1:49:93:
09:4a:d3:94:4e:fb:86:89:26:4a:03:27:aa:43:97:
a8:4f:df:4b:b0:57:47:f7:fb:c9:88:92:15:91:ac:
29:61:a0:96:09:7d:7b:d9:e4:1e:3d:69:9d:01:79:
1e:77:b9:c6:5f:1f:5b:5c:8a:a8:02:df:ed:7b:89:
e3:11:a3:d3:ab:6d:f3:69:8a:35:90:cb:86:53:c6:
b2:70:79:07:1e:5b:1f:61:d5:ea:e7:77:7d:ac:f5:
01:d7:c7:04:61:88:16:0a:2f:b7:a1:de:96:3b:2e:
a8:ca:2c:bc:a7:3b:dc:d7:28:cc:8f:82:81:23:7e:
cd:34:3c:3a:bb:dd:49:01:2d:4a:a0:ce:8c:36:17:
50:aa:11:4d:17:fa:67:4d:f6:f1:a1:b4:a5:5b:c6:
af:a3:22:c0:95:a4:d1:87:c2:28:03:d7:c2:cf:8d:
ad:88:28:d8:e3:2e:9d:23:a8:fa:4c:a9:78:23:23:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4C:75:9F:79:F3:AB:16:E1:B2:BF:E8:BD:24:B1:3E:72:41:4C:BB
X509v3 Authority Key Identifier:
keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/qkx1n3nzqxbhsr_ovSSxPnJBTLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.36.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:d2:f0:ce:be:c5:13:bd:22:7b:41:d8:d9:e4:24:e1:4c:55:
ff:eb:b8:24:07:6e:db:16:0b:dd:20:d5:ae:37:7e:ba:77:e8:
76:d7:15:90:5a:16:8b:c2:45:bf:e1:bf:53:c6:a0:9f:1a:4b:
8f:55:66:00:91:80:57:33:82:dc:e4:ad:1d:32:20:79:14:66:
a4:56:a5:d8:d8:15:9d:ba:f7:dc:1c:92:e3:ad:31:76:ca:21:
b0:d1:09:68:17:a8:26:15:6a:1a:35:c5:8c:6c:f1:a7:2d:68:
5c:2d:3b:4a:48:21:32:4e:85:b0:ed:20:8e:6f:de:2d:ee:54:
9f:18:d8:e5:24:0a:da:86:30:50:74:60:c9:70:57:be:88:53:
a9:f1:9b:99:09:e5:63:ef:24:87:c8:a7:f4:2c:d5:22:a8:fb:
ca:c3:32:57:79:d7:cf:74:18:87:4b:c0:dc:36:58:fb:85:b6:
be:30:bd:67:79:a2:b7:da:ad:6c:6b:8a:03:8e:35:84:0b:01:
4f:98:02:56:5e:b1:6b:a3:69:1c:fe:34:c7:7c:d0:e0:9f:17:
76:63:1c:2f:37:44:19:d5:77:43:3f:61:4f:dd:13:5d:43:85:
65:16:7b:66:6b:34:15:ee:9f:53:fc:c8:2e:6b:c9:a7:ea:db:
cd:df:eb:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv3d3X3skYIb0+Ww8N63Y9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYmMyZGE0ZmFjNzdiYmFhZDI5YTU5ODZiNDEwN2Y1MzFl
ZDJlM2UwHhcNMjMwMTAyMDAyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTRjNzU5Zjc5ZjNhYjE2ZTFiMmJmZThiZDI0YjEzZTcyNDE0Y2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIBIsC923oHEy2UqkTlN5vjJrbK4
VwgJD4LVuzWkWxYdcSGFGcoSejJfPAi41MkD6cXxGouTN7JjgNYoCNuhnjsgbAp7
7qLRSZMJStOUTvuGiSZKAyeqQ5eoT99LsFdH9/vJiJIVkawpYaCWCX172eQePWmd
AXked7nGXx9bXIqoAt/te4njEaPTq23zaYo1kMuGU8aycHkHHlsfYdXq53d9rPUB
18cEYYgWCi+3od6WOy6oyiy8pzvc1yjMj4KBI37NNDw6u91JAS1KoM6MNhdQqhFN
F/pnTfbxobSlW8avoyLAlaTRh8IoA9fCz42tiCjY4y6dI6j6TKl4IyNX1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKpMdZ9586sW4bK/6L0ksT5yQUy7MB8GA1UdIwQY
MBaAFKy8LaT6x3u6rSmlmGtBB/Ux7S4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEt
ZTkyMzBlNTg4NjI2LzEvcWt4MW4zbnpxeGJoc3Jfb3ZTU3hQbkpCVExzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEtZTkyMzBlNTg4NjI2
LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwV0kMA0G
CSqGSIb3DQEBCwUAA4IBAQC70vDOvsUTvSJ7QdjZ5CThTFX/67gkB27bFgvdINWu
N366d+h21xWQWhaLwkW/4b9TxqCfGkuPVWYAkYBXM4Lc5K0dMiB5FGakVqXY2BWd
uvfcHJLjrTF2yiGw0QloF6gmFWoaNcWMbPGnLWhcLTtKSCEyToWw7SCOb94t7lSf
GNjlJArahjBQdGDJcFe+iFOp8ZuZCeVj7ySHyKf0LNUiqPvKwzJXedfPdBiHS8Dc
Nlj7hba+ML1neaK32q1sa4oDjjWECwFPmAJWXrFro2kc/jTHfNDgnxd2YxwvN0QZ
1XdDP2FP3RNdQ4VlFntmazQV7p9T/Mgua8mn6tvN3+un
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:06 2024 by rpki-client on console-ams.rpki-client.org