Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/qvvoOaTqzOUmGE46oYrAsWhFZoo.roa
File: qvvoOaTqzOUmGE46oYrAsWhFZoo.roa (raw, json)
Hash identifier: HnJMcEXPE41e2t5ct97SMR9nV/JMsc/M7brk4/LNAHU=
Subject key identifier: AA:FB:E8:39:A4:EA:CC:E5:26:18:4E:3A:A1:8A:C0:B1:68:45:66:8A
Certificate issuer: /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Certificate serial: 01856C6F1DC61D3A540D2D847D9802E55B92
Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/qvvoOaTqzOUmGE46oYrAsWhFZoo.roa
Signing time: Sun 01 Jan 2023 08:24:59 +0000
ROA not before: Sun 01 Jan 2023 08:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15975
IP address blocks: 194.6.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:1d:c6:1d:3a:54:0d:2d:84:7d:98:02:e5:5b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Validity
Not Before: Jan 1 08:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aafbe839a4eacce526184e3aa18ac0b16845668a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a5:e5:90:77:b9:14:0c:a4:a5:90:ae:2f:f8:
c0:92:54:fd:32:20:3d:84:17:9b:37:e2:3d:03:24:
f6:49:b4:5d:a5:97:a8:8d:51:55:f1:a0:1c:dc:31:
9a:7a:e1:5b:0a:82:e6:c3:da:bf:2c:13:68:e8:24:
20:bd:f0:73:a1:6e:78:8f:a7:a9:74:56:50:69:3e:
7a:89:64:5a:ae:a8:88:51:dd:14:c8:9d:1a:b7:09:
19:a6:a3:c9:9f:5a:5b:02:95:2e:1d:25:4e:a6:a4:
11:ed:c2:d0:7f:1f:fe:51:05:ea:14:f2:5f:09:f1:
fd:5e:0b:c6:c1:c0:a4:cb:50:1b:81:7f:58:c2:a8:
42:21:76:2c:f0:15:c1:55:51:a4:02:63:d1:a9:9c:
2b:d0:57:69:16:c4:9f:55:65:d8:01:2e:24:8e:8a:
15:57:8d:8c:54:f1:c7:6e:57:9b:1d:96:6d:8d:f3:
11:0f:cb:c1:40:ce:57:d5:94:90:73:99:ac:60:45:
ba:7f:a0:3e:ed:6d:7b:72:16:67:af:7b:51:20:11:
fd:23:e1:d8:ae:cc:9b:02:95:81:38:36:4a:84:f5:
2e:38:2c:be:1a:22:02:fa:4a:c6:4f:ad:82:7c:4a:
5c:2a:af:7d:de:e7:42:00:32:9d:f7:71:81:88:20:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FB:E8:39:A4:EA:CC:E5:26:18:4E:3A:A1:8A:C0:B1:68:45:66:8A
X509v3 Authority Key Identifier:
keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/qvvoOaTqzOUmGE46oYrAsWhFZoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.225.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c6:f4:46:64:29:34:21:eb:9d:e7:af:92:16:9f:21:de:5d:
1e:6f:fb:27:ee:26:b8:b2:80:82:eb:ec:37:e7:37:fc:25:6b:
43:09:30:79:da:5b:2e:9f:2e:84:a8:0b:2c:76:ab:d5:9a:56:
23:4f:ed:4b:e7:e3:68:58:d9:ce:38:3b:7d:a7:d0:b4:8d:57:
01:30:4f:d7:cf:19:cf:49:4e:c1:a8:aa:a9:53:f6:e6:60:29:
9e:fa:16:4b:1c:e6:bd:94:6d:51:db:7f:39:a6:0f:da:37:23:
46:0c:15:e8:ba:26:d4:28:3f:d6:b7:8e:c6:d1:f9:97:41:6e:
a1:ee:ca:33:4a:9e:c1:b5:a9:54:27:2f:d0:4a:15:52:24:4b:
92:f4:0b:0e:3b:df:e2:16:81:b2:5b:8f:1a:e7:01:66:29:1b:
70:59:cd:19:6f:35:91:26:b0:77:ca:86:19:73:e9:b0:49:fa:
b9:a8:cd:19:a5:52:9a:cd:5a:a4:3c:c4:30:69:b7:a8:f1:47:
a9:b4:14:be:3c:45:b4:c3:99:30:4d:72:d1:22:7f:0b:f4:71:
f1:54:d6:cb:47:46:e7:81:e3:de:f0:f9:57:c0:33:ae:c2:44:
f7:7f:d2:6a:26:2f:fd:bf:15:81:85:0c:b6:86:ce:e4:85:26:
a8:a8:d4:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsbx3GHTpUDS2EfZgC5VuSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTIzOWY5OTEzZGZjN2Q3YWFhYTk1ZmY0YzliNjFiZjQy
YjcyZDYwHhcNMjMwMTAxMDgyNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWZiZTgzOWE0ZWFjY2U1MjYxODRlM2FhMThhYzBiMTY4NDU2NjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaXlkHe5FAykpZCuL/jAklT9MiA9
hBebN+I9AyT2SbRdpZeojVFV8aAc3DGaeuFbCoLmw9q/LBNo6CQgvfBzoW54j6ep
dFZQaT56iWRarqiIUd0UyJ0atwkZpqPJn1pbApUuHSVOpqQR7cLQfx/+UQXqFPJf
CfH9XgvGwcCky1AbgX9YwqhCIXYs8BXBVVGkAmPRqZwr0FdpFsSfVWXYAS4kjooV
V42MVPHHblebHZZtjfMRD8vBQM5X1ZSQc5msYEW6f6A+7W17chZnr3tRIBH9I+HY
rsybApWBODZKhPUuOCy+GiIC+krGT62CfEpcKq993udCADKd93GBiCBQkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKr76Dmk6szlJhhOOqGKwLFoRWaKMB8GA1UdIwQY
MBaAFBeSOfmRPfx9eqqpX/TJthv0K3LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVJNS1aRTlfSDE2cXFsZjlNbTJHX1FyY3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kMzE0OWMtZjRkYy00ODM3LThiODYt
YzYxMjMwNWNmMDg5LzEvcXZ2b09hVHF6T1VtR0U0Nm9ZckFzV2hGWm9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9kMzE0OWMtZjRkYy00ODM3LThiODYtYzYxMjMwNWNmMDg5
LzEvRjVJNS1aRTlfSDE2cXFsZjlNbTJHX1FyY3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgbhMA0G
CSqGSIb3DQEBCwUAA4IBAQCZxvRGZCk0Ieud56+SFp8h3l0eb/sn7ia4soCC6+w3
5zf8JWtDCTB52lsuny6EqAssdqvVmlYjT+1L5+NoWNnOODt9p9C0jVcBME/XzxnP
SU7BqKqpU/bmYCme+hZLHOa9lG1R2385pg/aNyNGDBXouibUKD/Wt47G0fmXQW6h
7sozSp7BtalUJy/QShVSJEuS9AsOO9/iFoGyW48a5wFmKRtwWc0ZbzWRJrB3yoYZ
c+mwSfq5qM0ZpVKazVqkPMQwabeo8UeptBS+PEW0w5kwTXLRIn8L9HHxVNbLR0bn
gePe8PlXwDOuwkT3f9JqJi/9vxWBhQy2hs7khSaoqNRz
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:52 2024 by rpki-client on console-fra.rpki-client.org