Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/QTIpThFiqgghVk5wozq6YRx0AiE.roa
File: QTIpThFiqgghVk5wozq6YRx0AiE.roa (raw, json)
Hash identifier: oAuAGLvrUuK/zlAhsKWbTrEJKHkv279HOpiOOjSDIew=
Subject key identifier: 41:32:29:4E:11:62:AA:08:21:56:4E:70:A3:3A:BA:61:1C:74:02:21
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0185957FD9A35F6E3341B322752B9502F9BD
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/QTIpThFiqgghVk5wozq6YRx0AiE.roa
Signing time: Mon 09 Jan 2023 07:47:41 +0000
ROA not before: Mon 09 Jan 2023 07:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 185.65.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:7f:d9:a3:5f:6e:33:41:b3:22:75:2b:95:02:f9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jan 9 07:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4132294e1162aa0821564e70a33aba611c740221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5b:c8:29:24:ef:0a:86:59:92:85:f3:ce:2b:
a0:19:cf:5c:01:ce:8e:92:06:7f:a9:a4:be:a1:57:
86:9e:86:48:a7:d5:e3:ad:40:c1:09:52:4e:0c:36:
05:ae:49:27:c6:22:18:fa:cd:74:cf:d3:29:b2:5c:
de:3a:d8:be:2f:e0:43:6b:53:46:0d:42:c7:95:7d:
f1:ec:41:e1:5a:3f:92:35:44:a8:3e:10:ab:64:79:
ef:81:6c:c2:73:df:11:b6:c1:84:39:31:39:73:66:
4b:a7:b4:8b:2e:c9:08:a1:6b:69:ce:da:7d:4a:40:
83:6e:2e:d6:00:98:db:2c:fa:84:1b:c6:6e:5f:97:
e6:75:16:20:33:f6:ec:e6:25:8b:38:f6:b8:0e:9f:
ea:66:4b:0c:82:75:69:84:d1:6c:ed:2f:a4:a9:d2:
90:69:7f:47:4c:87:c8:b5:e7:0f:ce:68:5f:b4:2a:
ec:14:40:44:67:f8:d3:95:8f:6b:d1:14:10:54:89:
d7:6f:e5:25:ef:cc:cd:fe:c3:39:ac:0d:9d:e9:39:
6c:ce:ae:19:17:87:f3:fa:b0:8a:35:09:70:39:1b:
a3:cd:88:68:8c:00:16:bc:9c:43:0b:c2:f1:c7:4f:
1f:73:c5:d3:b5:bf:4c:31:a1:69:fc:14:8b:04:5a:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:32:29:4E:11:62:AA:08:21:56:4E:70:A3:3A:BA:61:1C:74:02:21
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/QTIpThFiqgghVk5wozq6YRx0AiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.68.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4b:fc:ac:2b:11:e5:ba:e2:9f:50:4a:fb:90:1d:e3:0d:c6:
30:90:58:a6:40:83:92:1e:d9:14:0c:33:11:b0:a6:bb:10:d5:
58:54:3e:e4:4d:8e:72:e9:f5:d8:f7:a5:03:03:ba:86:62:65:
a2:86:ba:a8:56:81:10:5c:0e:d5:3e:4e:d4:54:3b:47:53:5f:
4e:85:ce:3c:82:a0:08:81:34:2e:0b:a9:11:9d:4e:0e:17:de:
95:36:17:67:8e:35:15:95:fd:81:85:92:a2:96:2a:52:80:03:
25:41:de:5b:fb:4a:ea:01:1c:fc:86:2d:37:32:64:8d:2e:73:
ef:cf:6d:17:1c:46:02:1f:bc:26:40:cb:26:3f:6f:88:ee:1c:
74:c0:dd:78:c3:a3:e4:a1:87:05:1f:a0:97:60:f9:8a:24:cc:
84:08:7b:0d:c6:e4:01:36:fc:1f:e6:1b:16:e9:72:63:25:d8:
30:9d:f8:d0:56:95:ed:de:f2:c4:ce:46:30:f9:c1:f2:9b:45:
5a:6c:cf:1a:a6:d4:7b:de:19:6d:95:9b:4f:dc:99:35:74:18:
08:8a:f6:2f:12:60:d3:53:ab:2f:a4:61:83:81:25:0f:34:fe:
e7:5f:c5:65:a5:ea:1e:85:cf:df:a6:82:92:ff:98:6b:22:cb:
fc:3b:4d:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWVf9mjX24zQbMidSuVAvm9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGVkOTQyZTVjNzQyZTc3YmZiOWJlYjk1NGY4NzI1MzRm
NTI4NDgwHhcNMjMwMTA5MDc0NzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTMyMjk0ZTExNjJhYTA4MjE1NjRlNzBhMzNhYmE2MTFjNzQwMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVvIKSTvCoZZkoXzziugGc9cAc6O
kgZ/qaS+oVeGnoZIp9XjrUDBCVJODDYFrkknxiIY+s10z9MpslzeOti+L+BDa1NG
DULHlX3x7EHhWj+SNUSoPhCrZHnvgWzCc98RtsGEOTE5c2ZLp7SLLskIoWtpztp9
SkCDbi7WAJjbLPqEG8ZuX5fmdRYgM/bs5iWLOPa4Dp/qZksMgnVphNFs7S+kqdKQ
aX9HTIfItecPzmhftCrsFEBEZ/jTlY9r0RQQVInXb+Ul78zN/sM5rA2d6Tlszq4Z
F4fz+rCKNQlwORujzYhojAAWvJxDC8Lxx08fc8XTtb9MMaFp/BSLBFofyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEEyKU4RYqoIIVZOcKM6umEcdAIhMB8GA1UdIwQY
MBaAFDxO2ULlx0Lne/ub65VPhyU09ShIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2Et
NzczNDRiY2M5MTkxLzEvUVRJcFRoRmlxZ2doVms1d296cTZZUngwQWlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2EtNzczNDRiY2M5MTkx
LzEvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUFEMA0G
CSqGSIb3DQEBCwUAA4IBAQAtS/ysKxHluuKfUEr7kB3jDcYwkFimQIOSHtkUDDMR
sKa7ENVYVD7kTY5y6fXY96UDA7qGYmWihrqoVoEQXA7VPk7UVDtHU19Ohc48gqAI
gTQuC6kRnU4OF96VNhdnjjUVlf2BhZKilipSgAMlQd5b+0rqARz8hi03MmSNLnPv
z20XHEYCH7wmQMsmP2+I7hx0wN14w6PkoYcFH6CXYPmKJMyECHsNxuQBNvwf5hsW
6XJjJdgwnfjQVpXt3vLEzkYw+cHym0VabM8aptR73hltlZtP3Jk1dBgIivYvEmDT
U6svpGGDgSUPNP7nX8Vlpeoehc/fpoKS/5hrIsv8O01C
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:12 2023 by rpki-client on console-fra.rpki-client.org