Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/QXlo5S_zSZSzqNytyTGgpSipRo0.roa
File: QXlo5S_zSZSzqNytyTGgpSipRo0.roa (raw, json)
Hash identifier: 0pLDRfYFpw97/BwG0AqL0it7cNYQ5zv5dRghDd8nPe8=
Subject key identifier: 41:79:68:E5:2F:F3:49:94:B3:A8:DC:AD:C9:31:A0:A5:28:A9:46:8D
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 01874C88EF35E08004E3CF25DD9B214DF31E
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/QXlo5S_zSZSzqNytyTGgpSipRo0.roa
Signing time: Tue 04 Apr 2023 13:50:55 +0000
ROA not before: Tue 04 Apr 2023 13:50:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140902
IP address blocks: 45.84.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 23:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:88:ef:35:e0:80:04:e3:cf:25:dd:9b:21:4d:f3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Apr 4 13:50:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=417968e52ff34994b3a8dcadc931a0a528a9468d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:a7:2d:9c:41:e9:7a:3b:c3:ff:0f:e0:b2:
d7:0f:d7:71:ef:6a:ea:b5:a9:b9:f5:4f:53:2b:c2:
b4:b9:01:69:23:2c:eb:1b:e8:20:09:25:b5:e4:4f:
d5:ff:dc:75:fa:a5:87:f6:ec:e0:36:e5:86:e0:af:
b7:2b:f5:0c:85:12:b8:17:fa:d8:41:6d:98:13:a0:
a4:ce:bd:a4:0b:59:94:b3:ff:0e:23:53:4f:4c:d1:
8a:fd:df:38:b9:fd:89:63:be:98:09:43:eb:65:bf:
67:2d:af:43:18:d2:9b:59:18:db:48:fa:2f:f1:78:
83:71:77:25:e7:e9:f8:8d:2b:3c:cd:c4:db:a5:c6:
be:4d:75:39:9f:e8:61:93:22:5c:e1:71:78:d2:1d:
51:87:fd:f1:ed:37:08:3b:56:29:c5:34:8e:db:27:
92:5b:76:ae:4c:af:40:19:a8:16:b3:7e:6d:94:eb:
42:a8:5f:35:a3:dc:e8:2e:07:56:b9:f0:96:55:06:
67:72:07:20:8f:2f:dc:3a:a4:8b:97:bb:92:b5:bb:
8a:9b:06:00:98:93:62:20:3e:1e:98:d3:6f:b8:62:
3e:0e:c3:7e:eb:a2:4e:58:60:ec:ca:1a:e7:c1:da:
54:c8:2c:90:c2:c4:bf:a2:4a:90:02:19:2a:93:41:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:79:68:E5:2F:F3:49:94:B3:A8:DC:AD:C9:31:A0:A5:28:A9:46:8D
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/QXlo5S_zSZSzqNytyTGgpSipRo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.101.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ec:45:21:d2:16:b1:08:42:44:c7:5d:6b:80:8c:d6:87:06:
a5:e2:f8:d1:18:b2:cf:b7:a0:ff:3c:1b:64:66:c8:54:0a:5e:
66:6a:e1:ec:bc:fb:30:63:96:75:cb:24:31:a9:5e:8a:a3:a5:
2f:bf:da:20:66:ab:8f:53:42:78:7b:d0:aa:d9:c3:df:67:d6:
43:4a:32:08:43:ed:09:63:04:b5:df:5f:b5:23:64:8e:df:77:
22:04:5f:e4:18:af:e0:ea:25:08:b9:0d:b7:8f:ff:50:bd:c7:
26:61:2a:68:35:bf:0e:2e:78:18:52:c7:f7:02:e4:4c:f1:a1:
5a:7b:a8:79:48:1f:c2:f0:86:39:a2:ea:3e:40:a0:7c:a2:4d:
a0:62:6a:83:e5:8d:47:5a:fc:75:36:f3:37:ac:b4:65:6a:fb:
6a:38:68:cb:2f:8a:62:fb:d4:80:e3:6f:f4:fa:a7:07:77:1f:
b9:b3:9e:1f:dc:de:5f:2b:e3:13:41:a8:0b:a4:89:71:d5:ca:
44:58:4f:5e:e8:42:9e:46:8f:98:bc:84:a6:30:c2:e7:7d:26:
2a:8a:77:3d:55:19:79:e6:6d:40:71:8c:66:21:5f:3b:d1:c7:
5d:6d:66:f2:87:8c:71:7c:9a:58:3e:6d:04:8e:af:04:0f:3d:
01:37:f6:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdMiO814IAE488l3ZshTfMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDg0OTU2NzM2NTQ5ZWFiM2IwNmUyM2FhYjg5Y2E1OTkz
YTgwNzYwHhcNMjMwNDA0MTM1MDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTc5NjhlNTJmZjM0OTk0YjNhOGRjYWRjOTMxYTBhNTI4YTk0NjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtunLZxB6Xo7w/8P4LLXD9dx72rq
tam59U9TK8K0uQFpIyzrG+ggCSW15E/V/9x1+qWH9uzgNuWG4K+3K/UMhRK4F/rY
QW2YE6Ckzr2kC1mUs/8OI1NPTNGK/d84uf2JY76YCUPrZb9nLa9DGNKbWRjbSPov
8XiDcXcl5+n4jSs8zcTbpca+TXU5n+hhkyJc4XF40h1Rh/3x7TcIO1YpxTSO2yeS
W3auTK9AGagWs35tlOtCqF81o9zoLgdWufCWVQZncgcgjy/cOqSLl7uStbuKmwYA
mJNiID4emNNvuGI+DsN+66JOWGDsyhrnwdpUyCyQwsS/okqQAhkqk0HlKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEF5aOUv80mUs6jcrckxoKUoqUaNMB8GA1UdIwQY
MBaAFCdISVZzZUnqs7BuI6q4nKWZOoB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3Mjgt
YWQxNjNhYjM1NGM4LzEvUVhsbzVTX3pTWlN6cU55dHlUR2dwU2lwUm8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3MjgtYWQxNjNhYjM1NGM4
LzEvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVRlMA0G
CSqGSIb3DQEBCwUAA4IBAQCo7EUh0haxCEJEx11rgIzWhwal4vjRGLLPt6D/PBtk
ZshUCl5mauHsvPswY5Z1yyQxqV6Ko6Uvv9ogZquPU0J4e9Cq2cPfZ9ZDSjIIQ+0J
YwS131+1I2SO33ciBF/kGK/g6iUIuQ23j/9QvccmYSpoNb8OLngYUsf3AuRM8aFa
e6h5SB/C8IY5ouo+QKB8ok2gYmqD5Y1HWvx1NvM3rLRlavtqOGjLL4pi+9SA42/0
+qcHdx+5s54f3N5fK+MTQagLpIlx1cpEWE9e6EKeRo+YvISmMMLnfSYqinc9VRl5
5m1AcYxmIV870cddbWbyh4xxfJpYPm0Ejq8EDz0BN/b2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:19 2024 by rpki-client on console-fra.rpki-client.org