Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/qxdWYtBaSUNjPUUpab6FIvsfIiU.roa
File: qxdWYtBaSUNjPUUpab6FIvsfIiU.roa (raw, json)
Hash identifier: JnVBXmr34s2BMgXQysSRSrdtSLNsJis5v5pjasrNkhc=
Subject key identifier: AB:17:56:62:D0:5A:49:43:63:3D:45:29:69:BE:85:22:FB:1F:22:25
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01888B4BFA56A0A60EFB6702424E63A41C6D
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/qxdWYtBaSUNjPUUpab6FIvsfIiU.roa
Signing time: Mon 05 Jun 2023 11:23:12 +0000
ROA not before: Mon 05 Jun 2023 11:23:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206783
IP address blocks: 217.113.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:4b:fa:56:a0:a6:0e:fb:67:02:42:4e:63:a4:1c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jun 5 11:23:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab175662d05a4943633d452969be8522fb1f2225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:bf:89:5c:2e:69:7f:04:98:a8:69:78:16:
04:f0:c8:45:43:7d:07:9e:ab:38:dd:30:88:ae:c9:
19:3b:55:25:d0:e7:c1:85:9b:ee:5d:69:39:d2:6c:
de:71:ae:e7:3e:13:a5:3c:16:bd:c7:36:76:52:93:
c6:c6:8a:9d:a4:d5:80:13:67:e8:d0:20:53:0b:1d:
22:e3:4d:f3:f3:52:7b:f0:b3:d1:32:ab:09:ae:21:
da:0a:39:79:e9:0f:f9:05:51:fc:a0:f0:c1:fb:ef:
e5:41:45:db:f2:3a:16:a8:40:ba:ca:ec:92:e6:22:
b2:4b:c5:52:ff:75:27:b3:62:72:84:c3:6e:05:72:
98:e6:60:fc:68:77:5e:4f:ad:8c:ba:fd:2e:d9:70:
e7:fb:9a:70:71:38:32:d3:4f:e6:34:b1:95:4a:17:
b9:9f:2c:ae:8d:56:aa:20:5c:50:08:ef:df:77:95:
64:d8:dd:c7:99:73:8a:71:ee:21:5a:45:47:24:e3:
91:62:dd:fd:c2:cc:27:ee:a7:ce:b5:0e:c8:6e:62:
0f:9c:d8:ae:cc:20:0b:83:a7:2d:1a:6e:d0:e7:de:
59:94:bb:24:42:30:e9:6a:42:46:36:aa:ee:ff:ff:
3c:63:8d:14:df:0d:f5:5c:15:4e:d3:71:9a:81:78:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:17:56:62:D0:5A:49:43:63:3D:45:29:69:BE:85:22:FB:1F:22:25
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/qxdWYtBaSUNjPUUpab6FIvsfIiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.30.0/24
Signature Algorithm: sha256WithRSAEncryption
55:2e:4d:3c:c3:36:9c:ed:0f:98:14:7e:a4:fb:db:43:3f:ce:
0d:19:35:42:fc:e6:a2:ab:63:d6:6a:f0:76:67:cb:34:b3:11:
c9:94:de:0b:95:5c:a8:6a:df:4f:29:22:16:bc:4d:1f:c5:76:
c5:a5:3b:be:2a:d3:75:f0:dd:3a:89:0d:ae:fb:aa:17:dd:7e:
06:d3:68:e0:d0:42:3d:9a:ac:39:d4:48:86:13:89:35:84:98:
e2:1a:ec:7e:37:5a:b6:cd:d4:14:88:87:cc:92:c4:e0:fa:c8:
a4:6b:a9:11:80:19:98:21:1c:7e:db:6d:aa:59:83:bb:85:73:
50:e9:f0:30:b0:6f:2b:a8:dd:be:4c:b8:c3:c3:e3:b7:f8:4e:
c7:16:e2:ea:09:c3:a6:ed:6e:85:6c:ec:fa:ea:6b:27:4d:1a:
e7:1a:a6:f2:ff:d6:55:91:3b:48:69:8d:65:eb:37:9c:db:6e:
aa:0d:09:23:0c:1a:72:da:cc:ff:0f:2a:64:6c:8b:98:66:50:
22:23:83:2d:c7:67:d6:03:8f:d0:5d:b0:0f:f5:1e:9d:4a:6a:
b0:9c:8c:89:c3:b3:88:5e:d2:45:28:8d:7e:38:93:4b:91:5e:
e2:32:4e:63:1d:8e:40:f0:f0:28:b3:92:b9:a5:66:3a:8f:5a:
a5:d3:f7:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiLS/pWoKYO+2cCQk5jpBxtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjMwNjA1MTEyMzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjE3NTY2MmQwNWE0OTQzNjMzZDQ1Mjk2OWJlODUyMmZiMWYyMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeO/iVwuaX8EmKhpeBYE8MhFQ30H
nqs43TCIrskZO1Ul0OfBhZvuXWk50mzeca7nPhOlPBa9xzZ2UpPGxoqdpNWAE2fo
0CBTCx0i403z81J78LPRMqsJriHaCjl56Q/5BVH8oPDB++/lQUXb8joWqEC6yuyS
5iKyS8VS/3Uns2JyhMNuBXKY5mD8aHdeT62Muv0u2XDn+5pwcTgy00/mNLGVShe5
nyyujVaqIFxQCO/fd5Vk2N3HmXOKce4hWkVHJOORYt39wswn7qfOtQ7IbmIPnNiu
zCALg6ctGm7Q595ZlLskQjDpakJGNqru//88Y40U3w31XBVO03GagXi/3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKsXVmLQWklDYz1FKWm+hSL7HyIlMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvcXhkV1l0QmFTVU5qUFVVcGFiNkZJdnNmSWlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XEeMA0G
CSqGSIb3DQEBCwUAA4IBAQBVLk08wzac7Q+YFH6k+9tDP84NGTVC/Oaiq2PWavB2
Z8s0sxHJlN4LlVyoat9PKSIWvE0fxXbFpTu+KtN18N06iQ2u+6oX3X4G02jg0EI9
mqw51EiGE4k1hJjiGux+N1q2zdQUiIfMksTg+sika6kRgBmYIRx+222qWYO7hXNQ
6fAwsG8rqN2+TLjDw+O3+E7HFuLqCcOm7W6FbOz66msnTRrnGqby/9ZVkTtIaY1l
6zec226qDQkjDBpy2sz/DypkbIuYZlAiI4Mtx2fWA4/QXbAP9R6dSmqwnIyJw7OI
XtJFKI1+OJNLkV7iMk5jHY5A8PAos5K5pWY6j1ql0/cm
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:49 2024 by rpki-client on console-fra.rpki-client.org