Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/qEasBlJ7tOXI_QMl3I8sZJiLcqI.roa
File: qEasBlJ7tOXI_QMl3I8sZJiLcqI.roa (raw, json)
Hash identifier: ntADeDa3Ize9dWkqWsIXR+tQ5McJif0gFYJMvc6Rt7E=
Subject key identifier: A8:46:AC:06:52:7B:B4:E5:C8:FD:03:25:DC:8F:2C:64:98:8B:72:A2
Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Certificate serial: 018A3C0166EAF961B245DAE14C1F38CDC690
Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/qEasBlJ7tOXI_QMl3I8sZJiLcqI.roa
Signing time: Mon 28 Aug 2023 11:57:19 +0000
ROA not before: Mon 28 Aug 2023 11:57:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 194.104.64.0/20 maxlen: 20
194.104.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:01:66:ea:f9:61:b2:45:da:e1:4c:1f:38:cd:c6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Validity
Not Before: Aug 28 11:57:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a846ac06527bb4e5c8fd0325dc8f2c64988b72a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:58:2d:74:d9:f6:4f:5a:42:29:f4:cc:8a:
c2:b7:39:61:2f:93:b5:4a:eb:55:6e:fd:50:38:d0:
2a:2b:e9:02:19:de:ec:7c:31:44:17:99:57:fb:81:
94:4f:af:73:5c:be:f9:57:57:bf:fd:db:44:e2:c8:
29:02:1b:e8:fb:f2:bc:e9:02:85:34:4f:bf:8b:d4:
4c:82:f5:d3:57:b8:f7:32:10:ce:42:70:a9:23:87:
b3:55:3b:6f:a1:a0:9b:8e:c3:75:f0:d5:d9:90:47:
67:6b:77:6b:ca:fa:bf:13:8d:ad:07:21:74:6a:92:
99:3c:9b:3c:00:cf:63:f4:e1:5d:d9:51:24:cb:d6:
c4:15:86:87:1a:c6:c5:4f:96:ab:a6:36:e1:ba:3a:
ce:b2:32:15:79:1b:f5:00:b0:88:b8:fb:75:fa:dd:
b2:23:81:37:74:ae:ba:40:38:ba:bd:6f:1f:59:51:
92:38:43:50:23:ac:76:40:a4:81:ac:88:1f:50:d5:
e9:ff:c7:b2:3b:3a:f9:3e:c9:13:c7:b8:0c:69:ed:
6b:44:ad:c3:17:f6:56:7d:40:17:3f:72:54:05:a5:
51:52:75:c8:b6:75:6a:b0:f3:19:19:f4:94:a2:5a:
14:fe:1b:57:a8:93:b0:8a:f4:e7:89:1a:c0:8a:e2:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:46:AC:06:52:7B:B4:E5:C8:FD:03:25:DC:8F:2C:64:98:8B:72:A2
X509v3 Authority Key Identifier:
keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/qEasBlJ7tOXI_QMl3I8sZJiLcqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.64.0/20
Signature Algorithm: sha256WithRSAEncryption
45:66:13:2e:0e:a1:c3:70:ee:88:03:d0:c7:e3:9c:48:c9:9d:
21:4b:62:78:7c:42:a6:20:9c:ae:67:96:65:f5:33:3b:78:f3:
67:86:e0:66:77:88:3a:d7:18:b0:1d:94:1e:7b:04:70:59:54:
0c:c5:f1:34:5a:35:fd:27:ab:ec:3a:af:c8:32:20:6a:1d:31:
d9:30:ee:26:80:15:f7:93:03:43:14:6d:ac:fe:69:51:03:14:
c4:aa:7f:85:ac:46:15:62:62:1f:b0:0e:27:3f:84:49:d3:e4:
fc:06:fa:ce:67:be:1b:c3:40:3f:d7:4c:fc:4d:59:be:9c:6d:
aa:e5:26:74:c4:a9:3f:51:09:b3:50:cf:d1:21:ad:35:89:fb:
df:7d:26:2d:99:5f:32:9b:31:df:b8:d5:d7:95:f9:ac:9c:6a:
ee:f3:c5:88:05:b6:3f:41:93:99:6b:7c:96:21:3b:62:a6:40:
66:eb:8a:ef:21:d2:21:9a:da:74:37:be:36:05:d4:fb:a9:63:
5b:8d:d5:44:14:a6:68:f2:08:08:d9:7e:fb:19:1b:72:9c:7e:
e6:88:9c:78:cf:6a:9b:b4:d3:34:76:71:f6:d5:e4:6f:b3:aa:
69:71:b4:4a:79:a5:c4:61:e0:4c:4d:44:e3:6e:ef:c8:e6:a3:
00:4e:16:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYo8AWbq+WGyRdrhTB84zcaQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNTBhMGRjYzcxYzQyOTIzZTQwNzAxMWJkMjEyYWZhNWM2
MmU1OWQwHhcNMjMwODI4MTE1NzE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODQ2YWMwNjUyN2JiNGU1YzhmZDAzMjVkYzhmMmM2NDk4OGI3MmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/xYLXTZ9k9aQin0zIrCtzlhL5O1
SutVbv1QONAqK+kCGd7sfDFEF5lX+4GUT69zXL75V1e//dtE4sgpAhvo+/K86QKF
NE+/i9RMgvXTV7j3MhDOQnCpI4ezVTtvoaCbjsN18NXZkEdna3dryvq/E42tByF0
apKZPJs8AM9j9OFd2VEky9bEFYaHGsbFT5arpjbhujrOsjIVeRv1ALCIuPt1+t2y
I4E3dK66QDi6vW8fWVGSOENQI6x2QKSBrIgfUNXp/8eyOzr5PskTx7gMae1rRK3D
F/ZWfUAXP3JUBaVRUnXItnVqsPMZGfSUoloU/htXqJOwivTniRrAiuJWAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKhGrAZSe7TlyP0DJdyPLGSYi3KiMB8GA1UdIwQY
MBaAFE9QoNzHHEKSPkBwEb0hKvpcYuWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zMGEyYmYtYjUxZS00ZDcyLWI0MDkt
Y2E4YjI3NThiZTE1LzEvcUVhc0JsSjd0T1hJX1FNbDNJOHNaSmlMY3FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zMGEyYmYtYjUxZS00ZDcyLWI0MDktY2E4YjI3NThiZTE1
LzEvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwmhAMA0G
CSqGSIb3DQEBCwUAA4IBAQBFZhMuDqHDcO6IA9DH45xIyZ0hS2J4fEKmIJyuZ5Zl
9TM7ePNnhuBmd4g61xiwHZQeewRwWVQMxfE0WjX9J6vsOq/IMiBqHTHZMO4mgBX3
kwNDFG2s/mlRAxTEqn+FrEYVYmIfsA4nP4RJ0+T8BvrOZ74bw0A/10z8TVm+nG2q
5SZ0xKk/UQmzUM/RIa01ifvffSYtmV8ymzHfuNXXlfmsnGru88WIBbY/QZOZa3yW
ITtipkBm64rvIdIhmtp0N742BdT7qWNbjdVEFKZo8ggI2X77GRtynH7miJx4z2qb
tNM0dnH21eRvs6ppcbRKeaXEYeBMTUTjbu/I5qMAThbn
-----END CERTIFICATE-----
Generated at Mon Aug 28 13:16:14 2023 by rpki-client on console-fra.rpki-client.org