Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/QSF1iZFJHNhCHNYfkt9Z8PsufS4.roa
File: QSF1iZFJHNhCHNYfkt9Z8PsufS4.roa (raw, json)
Hash identifier: 9nGqE6Xj3rbGC1DFURHnkIC+B+Z0bORMEK0fWwCdRCs=
Subject key identifier: 41:21:75:89:91:49:1C:D8:42:1C:D6:1F:92:DF:59:F0:FB:2E:7D:2E
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF8A6CE6826F620BAB747114021C74
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/QSF1iZFJHNhCHNYfkt9Z8PsufS4.roa
Signing time: Tue 02 Jan 2024 06:32:22 +0000
ROA not before: Tue 02 Jan 2024 06:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207279
IP address blocks: 188.132.150.0/24 maxlen: 24
77.92.154.0/24 maxlen: 24
78.135.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 11:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8a:6c:e6:82:6f:62:0b:ab:74:71:14:02:1c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4121758991491cd8421cd61f92df59f0fb2e7d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2c:bc:a6:d0:2f:19:b9:9c:f6:83:91:d7:25:
fe:da:3e:0b:0e:eb:58:e9:0c:ee:69:46:46:7b:dd:
5d:0a:d3:f1:6d:61:fe:e9:ee:bf:7a:1d:fc:e6:7c:
61:4a:67:24:3c:52:a8:58:a2:eb:39:96:76:2d:c3:
ce:ad:2b:d7:f2:c0:64:50:04:8b:54:fd:30:3b:14:
27:85:ed:01:89:93:59:50:62:01:5f:47:3c:a4:c5:
6c:af:a3:45:85:52:98:61:db:9c:d5:57:36:ed:4f:
90:70:4b:90:c2:cd:f5:95:74:55:6c:4a:92:ed:06:
a6:b3:36:c6:67:4b:92:34:e0:e1:c5:7d:10:bd:93:
37:8c:0c:64:cd:5e:c9:41:f6:6d:c6:dd:3b:c0:52:
44:b7:26:a2:99:6e:81:7b:21:cc:e5:67:d1:d2:3f:
43:fd:20:52:b9:b2:a0:91:dc:67:4f:54:e6:41:06:
35:c3:2a:76:30:12:58:c7:ab:38:0c:29:cb:12:4b:
05:8e:1e:1d:96:c2:08:cd:6c:56:05:37:bc:a5:1f:
6f:11:63:9c:d1:9f:fc:cb:fa:1c:38:90:d3:a7:c9:
84:99:27:77:8b:bd:84:82:2a:e0:f2:4a:a9:82:8b:
f7:7d:44:66:ee:98:e8:3c:fe:42:a5:e1:8d:6c:95:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:21:75:89:91:49:1C:D8:42:1C:D6:1F:92:DF:59:F0:FB:2E:7D:2E
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/QSF1iZFJHNhCHNYfkt9Z8PsufS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.154.0/24
78.135.87.0/24
188.132.150.0/24
Signature Algorithm: sha256WithRSAEncryption
34:53:bd:49:21:52:b4:bb:ac:af:89:89:0e:9a:00:56:68:b8:
86:f4:23:49:a9:e1:19:83:f1:e6:b9:18:e9:e2:e6:77:03:32:
38:7c:62:32:1a:86:cb:42:d9:fb:00:3e:b2:1f:f1:24:41:c6:
df:5a:21:82:c3:d5:5c:8e:9b:f6:d9:c5:9e:a1:36:eb:ef:80:
5c:c5:a7:16:d8:2b:96:40:90:97:7c:6a:bf:81:1e:4a:c6:90:
62:cb:25:f4:18:d1:5a:bb:2c:67:85:74:03:0e:ff:8d:3c:76:
bd:9d:67:f2:ef:2a:25:8c:69:2e:c5:ba:16:6f:1b:28:31:d3:
39:ea:ae:3b:b8:76:2a:a0:a1:80:18:a0:31:6f:12:31:d0:c1:
38:a5:87:7d:b7:f1:de:77:8b:46:55:1e:b6:3c:c7:57:26:04:
18:ac:e4:91:b2:a7:0c:2e:b3:05:f6:b3:50:ad:b8:eb:61:69:
b6:13:cd:da:7a:86:30:21:5d:1e:07:0f:fc:2e:f2:88:5b:4c:
7b:c5:f3:94:cd:a4:a9:9b:ba:4f:57:49:06:dc:8b:29:46:f5:
6f:2d:91:03:a7:60:bd:8a:90:8f:59:f6:bd:36:f8:46:c2:59:
ad:21:91:93:4f:b1:51:52:f3:a7:60:67:e8:19:0b:1f:a7:b7:
19:41:2c:eb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzI34ps5oJvYgurdHEUAhx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwMTAyMDYzMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTIxNzU4OTkxNDkxY2Q4NDIxY2Q2MWY5MmRmNTlmMGZiMmU3ZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSy8ptAvGbmc9oOR1yX+2j4LDutY
6QzuaUZGe91dCtPxbWH+6e6/eh385nxhSmckPFKoWKLrOZZ2LcPOrSvX8sBkUASL
VP0wOxQnhe0BiZNZUGIBX0c8pMVsr6NFhVKYYduc1Vc27U+QcEuQws31lXRVbEqS
7QamszbGZ0uSNODhxX0QvZM3jAxkzV7JQfZtxt07wFJEtyaimW6BeyHM5WfR0j9D
/SBSubKgkdxnT1TmQQY1wyp2MBJYx6s4DCnLEksFjh4dlsIIzWxWBTe8pR9vEWOc
0Z/8y/ocOJDTp8mEmSd3i72Egirg8kqpgov3fURm7pjoPP5CpeGNbJWcAQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEEhdYmRSRzYQhzWH5LfWfD7Ln0uMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvUVNGMWlaRkpITmhDSE5ZZmt0OVo4UHN1ZlM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVyaAwQA
TodXAwQAvISWMA0GCSqGSIb3DQEBCwUAA4IBAQA0U71JIVK0u6yviYkOmgBWaLiG
9CNJqeEZg/HmuRjp4uZ3AzI4fGIyGobLQtn7AD6yH/EkQcbfWiGCw9Vcjpv22cWe
oTbr74BcxacW2CuWQJCXfGq/gR5KxpBiyyX0GNFauyxnhXQDDv+NPHa9nWfy7yol
jGkuxboWbxsoMdM56q47uHYqoKGAGKAxbxIx0ME4pYd9t/Hed4tGVR62PMdXJgQY
rOSRsqcMLrMF9rNQrbjrYWm2E83aeoYwIV0eBw/8LvKIW0x7xfOUzaSpm7pPV0kG
3IspRvVvLZEDp2C9ipCPWfa9NvhGwlmtIZGTT7FRUvOnYGfoGQsfp7cZQSzr
-----END CERTIFICATE-----
Generated at Wed May 15 17:07:53 2024 by rpki-client on console-fra.rpki-client.org