Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qzMjLlmkpn4mw_mfdcCys6HMfkQ.roa
File: qzMjLlmkpn4mw_mfdcCys6HMfkQ.roa (raw, json)
Hash identifier: c1tUnUgdHyvZiCzhWiMu8JeQCQlZK4YPKF9rAGU1Xis=
Subject key identifier: AB:33:23:2E:59:A4:A6:7E:26:C3:F9:9F:75:C0:B2:B3:A1:CC:7E:44
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01872E7061DDD534CEF9D03F0085BE342058
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qzMjLlmkpn4mw_mfdcCys6HMfkQ.roa
Signing time: Wed 29 Mar 2023 17:35:29 +0000
ROA not before: Wed 29 Mar 2023 17:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57197
IP address blocks: 93.170.90.0/23 maxlen: 24
95.47.122.0/23 maxlen: 24
93.170.44.0/22 maxlen: 24
146.120.244.0/24 maxlen: 24
93.171.128.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2e:70:61:dd:d5:34:ce:f9:d0:3f:00:85:be:34:20:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 29 17:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab33232e59a4a67e26c3f99f75c0b2b3a1cc7e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:84:27:26:5a:dd:17:39:8a:ba:f6:de:d1:9d:
98:70:9d:5d:91:4c:a2:6f:13:79:e6:5d:e1:f4:8d:
f1:30:06:e9:91:08:cf:38:db:8c:aa:98:f7:d8:03:
16:04:f7:a6:c2:f6:32:54:8a:f7:ee:22:0d:86:ca:
25:9c:5e:7a:4b:26:fc:8d:81:0e:d2:89:c2:89:92:
bb:dd:c3:11:8e:28:0e:76:d5:e7:bd:0d:7b:6f:99:
88:e9:66:9a:26:4f:48:71:6b:3e:0d:a5:3c:3d:40:
ae:d7:10:94:a1:03:9b:4f:ec:d2:61:09:d1:69:e7:
1b:74:e9:b2:6f:0c:a2:76:04:db:86:5c:7b:3f:42:
81:e8:24:bd:ba:36:6e:c9:aa:c6:5a:6d:fe:da:b1:
1d:d1:de:1a:81:0c:21:f4:43:ec:c5:ae:f3:9d:1d:
5b:5b:a6:86:09:f3:07:fa:a6:33:e9:bc:39:76:14:
d9:1a:0b:48:04:4b:d2:f6:38:92:35:bb:d8:bd:95:
30:59:82:4e:7a:53:5c:01:c2:3a:a7:43:c7:27:ea:
29:59:2d:4e:6a:87:7a:de:4d:a4:b6:57:2c:87:ef:
60:6c:f5:1e:ca:2c:7f:6a:75:02:97:cf:1e:e9:73:
d7:b2:64:e8:29:2e:4c:b1:7a:b8:27:de:c0:06:15:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:33:23:2E:59:A4:A6:7E:26:C3:F9:9F:75:C0:B2:B3:A1:CC:7E:44
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qzMjLlmkpn4mw_mfdcCys6HMfkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.44.0/22
93.170.90.0/23
93.171.128.0/22
95.47.122.0/23
146.120.244.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e2:bd:5e:37:5f:76:2b:a3:77:9a:77:ba:0b:70:3d:e4:0d:
07:e1:5e:43:3d:13:ed:4d:fc:f3:88:35:c2:cc:75:84:90:e1:
2f:59:96:d2:c6:93:5f:e2:de:8f:d3:a9:9d:0b:29:5c:5e:55:
30:a7:cc:24:d9:b1:0f:20:eb:68:1a:c8:8b:3a:4d:00:8b:47:
51:4d:41:b8:bb:14:0a:16:5e:ea:31:92:09:17:71:b8:e4:fd:
95:c2:31:50:91:0a:cd:29:36:d9:64:18:c2:fb:87:8d:81:7a:
cf:00:f2:9a:b2:09:e0:d6:6a:a3:c4:42:cc:f6:e6:0b:cd:c8:
cc:18:c7:a3:90:29:34:d1:7d:8d:d4:6c:33:15:f7:05:e3:7b:
de:f3:20:74:23:c8:91:89:78:9b:e9:63:72:35:6d:53:3d:4d:
02:4c:5c:fb:bf:84:e9:e6:ff:fc:dc:cf:3c:a0:0b:6b:a3:c0:
ec:e6:f8:a7:0b:92:6d:89:c3:b4:db:be:1f:8f:c1:75:81:e5:
aa:9d:aa:98:8b:d1:2a:db:fc:05:ce:f0:f9:16:f3:76:57:9b:
cd:80:76:67:cf:c9:23:ec:f6:9f:ef:db:5c:f1:ab:2d:b4:b9:
a3:51:12:15:cf:ea:c5:9d:63:5a:d5:59:3d:fc:6d:00:e8:30:
5a:7a:d8:ef
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYcucGHd1TTO+dA/AIW+NCBYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMzI5MTczNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjMzMjMyZTU5YTRhNjdlMjZjM2Y5OWY3NWMwYjJiM2ExY2M3ZTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYQnJlrdFzmKuvbe0Z2YcJ1dkUyi
bxN55l3h9I3xMAbpkQjPONuMqpj32AMWBPemwvYyVIr37iINhsolnF56Syb8jYEO
0onCiZK73cMRjigOdtXnvQ17b5mI6WaaJk9IcWs+DaU8PUCu1xCUoQObT+zSYQnR
aecbdOmybwyidgTbhlx7P0KB6CS9ujZuyarGWm3+2rEd0d4agQwh9EPsxa7znR1b
W6aGCfMH+qYz6bw5dhTZGgtIBEvS9jiSNbvYvZUwWYJOelNcAcI6p0PHJ+opWS1O
aod63k2ktlcsh+9gbPUeyix/anUCl88e6XPXsmToKS5MsXq4J97ABhUSCwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKszIy5ZpKZ+JsP5n3XAsrOhzH5EMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvcXpNakxsbWtwbjRtd19tZmRjQ3lzNkhNZmtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCXaosAwQB
XapaAwQCXauAAwQBXy96AwQAknj0MA0GCSqGSIb3DQEBCwUAA4IBAQCZ4r1eN192
K6N3mne6C3A95A0H4V5DPRPtTfzziDXCzHWEkOEvWZbSxpNf4t6P06mdCylcXlUw
p8wk2bEPIOtoGsiLOk0Ai0dRTUG4uxQKFl7qMZIJF3G45P2VwjFQkQrNKTbZZBjC
+4eNgXrPAPKasgng1mqjxELM9uYLzcjMGMejkCk00X2N1GwzFfcF43ve8yB0I8iR
iXib6WNyNW1TPU0CTFz7v4Tp5v/83M88oAtro8Ds5vinC5JticO0274fj8F1geWq
naqYi9Eq2/wFzvD5FvN2V5vNgHZnz8kj7Paf79tc8asttLmjURIVz+rFnWNa1Vk9
/G0A6DBaetjv
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:01 2024 by rpki-client on console-ams.rpki-client.org