Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/qqvVcLb5AIyL9wXSfpkVuI80ZOc.roa
File: qqvVcLb5AIyL9wXSfpkVuI80ZOc.roa (raw, json)
Hash identifier: n0R1PUzVRGb2yH3kMwl5qCZ5kwIgy7O3LX3WccDBoKI=
Subject key identifier: AA:AB:D5:70:B6:F9:00:8C:8B:F7:05:D2:7E:99:15:B8:8F:34:64:E7
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 018CC4246F8A7FAC0266678B1B17C86E2EDA
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/qqvVcLb5AIyL9wXSfpkVuI80ZOc.roa
Signing time: Mon 01 Jan 2024 08:29:31 +0000
ROA not before: Mon 01 Jan 2024 08:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57888
IP address blocks: 94.250.116.0/22 maxlen: 22
94.250.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 07:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6f:8a:7f:ac:02:66:67:8b:1b:17:c8:6e:2e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jan 1 08:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aaabd570b6f9008c8bf705d27e9915b88f3464e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:da:84:f3:7e:89:e8:3a:a0:a0:07:db:b9:
88:6e:18:c4:cc:4e:de:cf:e0:89:cd:b0:71:4e:29:
ba:ad:83:34:e7:33:56:66:c5:1c:de:f5:54:f6:ff:
49:fb:af:88:66:fc:1b:af:5a:1f:6b:a0:48:10:81:
2c:3a:c3:58:02:0c:3f:03:53:ae:26:33:e3:67:d4:
19:89:6f:47:8e:46:ec:2b:30:c9:c8:a0:08:72:22:
41:77:b6:ab:e8:bb:6d:9b:53:e5:54:d5:94:51:95:
49:d4:91:4a:85:01:f3:fa:ed:cf:46:27:fc:b6:66:
e6:ae:c9:57:10:ec:92:0e:b8:d8:69:6c:34:cb:22:
28:69:25:e5:f1:2f:42:b7:ad:66:c0:a7:5e:fe:cf:
82:91:a0:f0:96:d3:62:fd:10:6e:ac:cf:b8:5d:b3:
89:87:68:c1:37:cc:8b:b6:41:09:dd:38:44:ad:b8:
c3:a4:5a:0e:a8:c1:2b:2f:17:5c:41:10:fd:77:5a:
31:96:ec:a7:df:e1:60:2d:db:d0:f5:b7:f7:d2:d4:
b5:ae:fb:ce:fa:e4:b0:94:76:32:12:6f:30:c4:eb:
1d:b8:fb:23:23:48:c6:93:d0:42:32:f5:f6:e8:df:
dc:e2:4d:41:d8:77:fb:15:9e:dc:8a:c7:77:9c:5a:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AB:D5:70:B6:F9:00:8C:8B:F7:05:D2:7E:99:15:B8:8F:34:64:E7
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/qqvVcLb5AIyL9wXSfpkVuI80ZOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.116.0-94.250.120.255
Signature Algorithm: sha256WithRSAEncryption
9c:a3:86:27:c4:0c:86:1b:d3:2a:26:5b:ab:21:2c:14:da:02:
73:10:5d:1b:d4:d4:7c:3b:68:09:2c:af:dd:c5:bf:59:ee:7c:
94:91:09:55:c8:9d:ce:f0:9e:3d:62:e2:fa:33:61:6a:e8:1f:
78:c1:87:bb:31:f2:2c:c1:98:be:b9:e4:aa:e2:e7:3b:27:08:
fc:bf:ae:cf:ac:3a:a6:85:95:63:cc:5a:70:fc:c2:28:ff:c5:
ad:f8:15:44:d5:76:cd:7b:38:92:2b:4b:28:25:f9:3a:4d:ba:
29:86:e1:76:3d:f1:10:45:40:1e:da:a2:5b:68:fd:66:31:b2:
7c:0a:93:b4:86:6d:14:3c:4f:91:2d:57:f5:10:ff:23:c0:0d:
cf:0a:26:1a:da:c7:5d:42:f2:a3:ac:73:34:7c:1d:8d:94:72:
a8:a2:43:ab:0b:0c:94:32:17:2c:46:e1:af:1d:07:75:20:79:
26:d3:06:5c:4d:d1:c3:2b:bf:02:a5:39:0d:1c:ff:82:cc:01:
dd:7a:a9:7d:db:65:e4:30:ab:cb:39:cc:cf:99:0b:86:ea:c9:
74:8b:2c:34:e6:eb:5d:87:81:d4:27:77:ce:b8:5a:71:0e:0d:
f5:41:4c:2d:48:aa:54:d7:da:11:f3:aa:21:ab:97:e1:0b:c8:
ef:b5:a6:d4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzEJG+Kf6wCZmeLGxfIbi7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YTk5NjRlMGNkMzVmYjM2NzU3ZTU2NTNmZmE3NjI2YWM1
ZGVlZTgwHhcNMjQwMTAxMDgyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWFiZDU3MGI2ZjkwMDhjOGJmNzA1ZDI3ZTk5MTViODhmMzQ2NGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUvahPN+ieg6oKAH27mIbhjEzE7e
z+CJzbBxTim6rYM05zNWZsUc3vVU9v9J+6+IZvwbr1ofa6BIEIEsOsNYAgw/A1Ou
JjPjZ9QZiW9HjkbsKzDJyKAIciJBd7ar6Lttm1PlVNWUUZVJ1JFKhQHz+u3PRif8
tmbmrslXEOySDrjYaWw0yyIoaSXl8S9Ct61mwKde/s+CkaDwltNi/RBurM+4XbOJ
h2jBN8yLtkEJ3ThErbjDpFoOqMErLxdcQRD9d1oxluyn3+FgLdvQ9bf30tS1rvvO
+uSwlHYyEm8wxOsduPsjI0jGk9BCMvX26N/c4k1B2Hf7FZ7cisd3nFpefQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKqr1XC2+QCMi/cF0n6ZFbiPNGTnMB8GA1UdIwQY
MBaAFCmplk4M01+zZ1flZT/6diasXe7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTIt
ZDliNTMzZjdmYmMzLzEvcXF2VmNMYjVBSXlMOXdYU2Zwa1Z1STgwWk9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTItZDliNTMzZjdmYmMz
LzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJe+nQD
BABe+ngwDQYJKoZIhvcNAQELBQADggEBAJyjhifEDIYb0yomW6shLBTaAnMQXRvU
1Hw7aAksr93Fv1nufJSRCVXInc7wnj1i4vozYWroH3jBh7sx8izBmL655Kri5zsn
CPy/rs+sOqaFlWPMWnD8wij/xa34FUTVds17OJIrSygl+TpNuimG4XY98RBFQB7a
olto/WYxsnwKk7SGbRQ8T5EtV/UQ/yPADc8KJhrax11C8qOsczR8HY2UcqiiQ6sL
DJQyFyxG4a8dB3UgeSbTBlxN0cMrvwKlOQ0c/4LMAd16qX3bZeQwq8s5zM+ZC4bq
yXSLLDTm612HgdQnd864WnEODfVBTC1IqlTX2hHzqiGrl+ELyO+1ptQ=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:06 2025 by rpki-client