Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/QlEiFonTWNbaGsFp1CMJPO5yOvA.roa
File: QlEiFonTWNbaGsFp1CMJPO5yOvA.roa (raw, json)
Hash identifier: hQDWvNb/Qa+7O6traNRHD/AmqTpbTeqS35Cp9YccRdw=
Subject key identifier: 42:51:22:16:89:D3:58:D6:DA:1A:C1:69:D4:23:09:3C:EE:72:3A:F0
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 018CC64B609FCC48699E152034E6A9272D7B
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/QlEiFonTWNbaGsFp1CMJPO5yOvA.roa
Signing time: Mon 01 Jan 2024 18:31:17 +0000
ROA not before: Mon 01 Jan 2024 18:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207114
IP address blocks: 193.22.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:60:9f:cc:48:69:9e:15:20:34:e6:a9:27:2d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4251221689d358d6da1ac169d423093cee723af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e6:68:48:97:12:ef:11:a5:63:06:d1:4f:e7:
e4:ca:25:37:cb:5d:e6:66:6a:8e:30:d3:bc:f1:83:
35:ca:5e:c9:50:04:8c:55:55:2d:92:f2:f3:60:2d:
4e:a8:c3:4a:42:f4:12:5a:cc:e7:73:96:0d:e9:02:
28:54:30:15:af:73:9d:56:c6:f2:0a:c4:84:0c:84:
7a:5f:34:0c:55:02:2a:d7:f8:87:83:80:69:8d:d7:
77:e1:3b:76:0b:bf:78:03:fa:d1:5f:7c:52:c1:06:
5f:61:fb:d0:df:44:0a:99:a5:8b:79:e5:a9:5c:5e:
08:4c:50:38:52:18:35:15:5c:13:fa:09:17:67:65:
3d:87:9e:57:dc:5c:6d:3f:89:90:0d:d3:9e:98:ed:
99:3d:46:dc:f4:45:94:87:d4:0e:47:8a:7f:ff:83:
8e:12:3e:7e:c4:31:85:69:98:cc:d8:72:9b:5b:1c:
9e:74:93:90:9f:3f:4a:65:a4:cc:a2:93:5d:e0:33:
ea:05:a5:4f:5c:64:44:68:a0:96:d4:2e:e8:e1:78:
f0:4c:99:e3:f4:47:93:21:94:ee:65:5c:66:eb:2b:
83:ca:0d:66:cf:f0:79:f9:e0:07:f3:4e:6b:b8:ff:
6b:77:2f:1a:a9:4d:41:c7:87:f2:0a:34:37:d7:76:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:51:22:16:89:D3:58:D6:DA:1A:C1:69:D4:23:09:3C:EE:72:3A:F0
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/QlEiFonTWNbaGsFp1CMJPO5yOvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.84.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:84:00:29:9e:54:0b:4d:bc:67:91:44:04:2d:6e:79:26:0c:
f3:de:a6:98:20:e1:2b:95:ac:ff:17:c8:9d:b0:e4:69:7d:f3:
41:74:7c:e3:af:4b:d6:1a:4a:d1:a7:5e:b4:f0:10:f1:23:98:
4c:d0:f4:be:26:35:83:1c:a6:29:f4:04:58:32:cf:15:94:45:
7b:13:f4:df:cd:00:9d:42:51:d0:9c:93:ed:54:26:cc:01:e2:
be:c1:1d:59:2a:94:92:79:b6:64:27:f7:2b:6d:65:32:30:e2:
aa:4b:ed:34:9e:ec:bd:e0:01:db:c2:9e:2a:7e:f1:f8:57:61:
63:0c:ee:49:30:21:5c:f0:59:85:d6:60:9d:af:02:13:b6:67:
2e:68:76:19:50:e4:0a:d0:94:e4:e3:cb:4d:8f:dc:08:ea:be:
0b:ed:40:50:98:8f:21:d8:00:b8:c0:94:83:ef:ef:fe:85:2a:
81:b6:33:97:b6:78:86:08:6a:62:52:1c:80:1d:f1:94:b6:c8:
bc:7e:6e:01:f2:2f:07:cd:82:fa:32:51:b2:6e:f3:55:5d:d8:
86:c1:e3:8c:8b:c0:1d:cb:30:86:70:a2:d5:d7:46:54:b8:3f:
74:3e:3e:a2:d6:e4:fc:87:75:02:a5:97:cc:19:6d:06:ac:fb:
dd:f0:6b:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS2CfzEhpnhUgNOapJy17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzE4MjQ3YTUzMjY0NzNhYmM5NmY1YTEwNzFkMTU5YzFl
YjdlY2QwHhcNMjQwMTAxMTgzMTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjUxMjIxNjg5ZDM1OGQ2ZGExYWMxNjlkNDIzMDkzY2VlNzIzYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuZoSJcS7xGlYwbRT+fkyiU3y13m
ZmqOMNO88YM1yl7JUASMVVUtkvLzYC1OqMNKQvQSWsznc5YN6QIoVDAVr3OdVsby
CsSEDIR6XzQMVQIq1/iHg4Bpjdd34Tt2C794A/rRX3xSwQZfYfvQ30QKmaWLeeWp
XF4ITFA4Uhg1FVwT+gkXZ2U9h55X3FxtP4mQDdOemO2ZPUbc9EWUh9QOR4p//4OO
Ej5+xDGFaZjM2HKbWxyedJOQnz9KZaTMopNd4DPqBaVPXGREaKCW1C7o4XjwTJnj
9EeTIZTuZVxm6yuDyg1mz/B5+eAH805ruP9rdy8aqU1Bx4fyCjQ313YrbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEJRIhaJ01jW2hrBadQjCTzucjrwMB8GA1UdIwQY
MBaAFAfBgkelMmRzq8lvWhBx0VnB637NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEt
M2E1NzE4YjQxZjdiLzEvUWxFaUZvblRXTmJhR3NGcDFDTUpQTzV5T3ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEtM2E1NzE4YjQxZjdi
LzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRZUMA0G
CSqGSIb3DQEBCwUAA4IBAQAahAApnlQLTbxnkUQELW55Jgzz3qaYIOErlaz/F8id
sORpffNBdHzjr0vWGkrRp1608BDxI5hM0PS+JjWDHKYp9ARYMs8VlEV7E/TfzQCd
QlHQnJPtVCbMAeK+wR1ZKpSSebZkJ/crbWUyMOKqS+00nuy94AHbwp4qfvH4V2Fj
DO5JMCFc8FmF1mCdrwITtmcuaHYZUOQK0JTk48tNj9wI6r4L7UBQmI8h2AC4wJSD
7+/+hSqBtjOXtniGCGpiUhyAHfGUtsi8fm4B8i8HzYL6MlGybvNVXdiGweOMi8Ad
yzCGcKLV10ZUuD90Pj6i1uT8h3UCpZfMGW0GrPvd8Guh
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:42 2025 by rpki-client