Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/q4agA98y5sTLXhdzCuNt58aW8Kk.roa
File: q4agA98y5sTLXhdzCuNt58aW8Kk.roa (raw, json)
Hash identifier: 1LVOl+seD9xHUl9SnfJzBQSx0D5U2o54FewpaqKkMO4=
Subject key identifier: AB:86:A0:03:DF:32:E6:C4:CB:5E:17:73:0A:E3:6D:E7:C6:96:F0:A9
Certificate issuer: /CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Certificate serial: 018930F59D5812064462F499EDFAB655A3DF
Authority key identifier: F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/q4agA98y5sTLXhdzCuNt58aW8Kk.roa
Signing time: Fri 07 Jul 2023 15:25:50 +0000
ROA not before: Fri 07 Jul 2023 15:25:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48919
IP address blocks: 95.215.92.0/22 maxlen: 22
31.128.160.0/20 maxlen: 20
2001:67c:19ac::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:f5:9d:58:12:06:44:62:f4:99:ed:fa:b6:55:a3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Validity
Not Before: Jul 7 15:25:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab86a003df32e6c4cb5e17730ae36de7c696f0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:e7:86:81:ce:a2:fd:2e:7a:c1:0e:bd:d2:
5f:29:af:7f:81:c0:5b:70:a5:5d:b9:83:12:d4:5f:
ff:82:e2:15:01:5d:b2:47:58:a5:70:be:41:3c:57:
6a:24:6a:8a:85:99:a7:41:4a:67:2b:4e:c8:63:43:
8f:2f:33:8c:8d:7b:f8:ae:43:e0:d4:ee:fa:5d:00:
cd:34:b3:20:a6:1d:a3:d0:0d:f4:d6:43:88:58:f7:
5c:49:6a:1d:da:c7:13:1e:44:1d:50:e9:f3:6d:51:
16:d1:e5:80:e5:4e:0a:ef:65:ba:5a:24:e7:84:60:
94:b1:ec:e1:09:25:72:9f:0c:99:56:1f:91:7b:94:
9b:b1:46:2d:19:e3:7c:7b:a7:33:36:60:9b:87:d8:
88:77:66:fd:8b:03:e3:f4:fb:58:bc:e7:d9:c4:7a:
8c:b7:13:cb:67:ed:62:ee:5a:ea:bd:18:e1:81:36:
7b:43:7e:c8:d9:6d:45:1d:33:30:8e:02:ab:0c:f8:
26:ef:37:92:b0:dd:42:b4:35:34:f1:cc:e4:6d:fc:
90:cd:cd:c7:62:7d:e9:17:2e:10:de:0b:7f:f7:e6:
06:5b:00:7a:2d:6b:f1:55:d4:49:9c:d3:50:89:b4:
5b:92:78:e1:b6:03:49:20:8c:a6:c9:88:52:e0:bc:
be:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:86:A0:03:DF:32:E6:C4:CB:5E:17:73:0A:E3:6D:E7:C6:96:F0:A9
X509v3 Authority Key Identifier:
keyid:F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/q4agA98y5sTLXhdzCuNt58aW8Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.160.0/20
95.215.92.0/22
IPv6:
2001:67c:19ac::/48
Signature Algorithm: sha256WithRSAEncryption
53:1e:70:d8:4b:ab:e2:e6:30:3c:0d:0c:4b:06:e3:30:62:4c:
23:cb:c5:5d:96:25:e2:72:46:97:25:90:de:42:c9:04:03:55:
26:5b:44:4e:a3:de:fc:9c:04:83:4a:bc:54:60:8f:13:7e:77:
56:1b:a8:c1:30:1a:40:79:85:b8:9d:9d:8e:f6:a6:cf:d9:5a:
b4:c1:48:28:29:56:14:91:14:a9:5d:aa:27:75:3d:2d:06:1a:
a3:5b:49:35:d7:31:86:50:bb:6d:e6:37:f4:36:95:e9:5b:eb:
0f:e5:f8:ed:ac:e8:c9:7f:08:af:cf:ba:63:7e:66:f5:a7:40:
4b:95:2b:da:b6:18:78:e0:72:2a:2c:ba:bc:bd:8b:0d:77:20:
ca:6a:3d:15:f8:2b:c3:6b:dd:ec:bd:fb:02:9b:b8:45:9a:a8:
9d:ae:12:cf:29:6a:d5:9d:21:7a:6a:b0:9f:bb:88:69:8b:8a:
7e:53:b1:ee:f4:12:3e:91:ad:5b:11:58:14:47:0a:0a:2d:00:
79:04:3d:70:a3:0d:fe:93:a1:95:22:e3:c1:7c:71:3b:18:23:
82:c8:c0:a9:60:3f:98:53:cc:1a:18:94:75:32:65:82:fd:0b:
f3:f9:85:29:5a:21:9f:49:e0:a6:10:24:30:fe:3e:ad:b5:02:
e8:e3:01:61
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYkw9Z1YEgZEYvSZ7fq2VaPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZjE4YzAyNDA1NzQyYzI1Mzc3ZDY5NmNkMmE2OWRjYzk3
NGJmZjgwHhcNMjMwNzA3MTUyNTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjg2YTAwM2RmMzJlNmM0Y2I1ZTE3NzMwYWUzNmRlN2M2OTZmMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCjnhoHOov0uesEOvdJfKa9/gcBb
cKVduYMS1F//guIVAV2yR1ilcL5BPFdqJGqKhZmnQUpnK07IY0OPLzOMjXv4rkPg
1O76XQDNNLMgph2j0A301kOIWPdcSWod2scTHkQdUOnzbVEW0eWA5U4K72W6WiTn
hGCUsezhCSVynwyZVh+Re5SbsUYtGeN8e6czNmCbh9iId2b9iwPj9PtYvOfZxHqM
txPLZ+1i7lrqvRjhgTZ7Q37I2W1FHTMwjgKrDPgm7zeSsN1CtDU08czkbfyQzc3H
Yn3pFy4Q3gt/9+YGWwB6LWvxVdRJnNNQibRbknjhtgNJIIymyYhS4Ly+MwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFKuGoAPfMubEy14XcwrjbefGlvCpMB8GA1UdIwQY
MBaAFPbxjAJAV0LCU3fWls0qadzJdL/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXZHTUFrQlhRc0pUZDlhV3pTcHAzTWwwdl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kZjA1ZTEtNjg2Mi00ZWQ0LTg3NmQt
MTUwYjVkYjRmNTZiLzEvcTRhZ0E5OHk1c1RMWGhkekN1TnQ1OGFXOEtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9kZjA1ZTEtNjg2Mi00ZWQ0LTg3NmQtMTUwYjVkYjRmNTZi
LzEvOXZHTUFrQlhRc0pUZDlhV3pTcHAzTWwwdl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQEH4CgAwQC
X9dcMA8EAgACMAkDBwAgAQZ8GawwDQYJKoZIhvcNAQELBQADggEBAFMecNhLq+Lm
MDwNDEsG4zBiTCPLxV2WJeJyRpclkN5CyQQDVSZbRE6j3vycBINKvFRgjxN+d1Yb
qMEwGkB5hbidnY72ps/ZWrTBSCgpVhSRFKldqid1PS0GGqNbSTXXMYZQu23mN/Q2
lelb6w/l+O2s6Ml/CK/PumN+ZvWnQEuVK9q2GHjgciosury9iw13IMpqPRX4K8Nr
3ey9+wKbuEWaqJ2uEs8patWdIXpqsJ+7iGmLin5Tse70Ej6RrVsRWBRHCgotAHkE
PXCjDf6ToZUi48F8cTsYI4LIwKlgP5hTzBoYlHUyZYL9C/P5hSlaIZ9J4KYQJDD+
Pq21AujjAWE=
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:44 2024 by rpki-client on console-fra.rpki-client.org