Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/qM1mTwqQq_fko9yA1cZNRONuyHw.roa
File: qM1mTwqQq_fko9yA1cZNRONuyHw.roa (raw, json)
Hash identifier: nf8r3MpBPk5IskDIYo1zP4+TPE4lzm16j3m87H4hJ/s=
Subject key identifier: A8:CD:66:4F:0A:90:AB:F7:E4:A3:DC:80:D5:C6:4D:44:E3:6E:C8:7C
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 018CC56EA237C23FAAE1A0D042889B3315AC
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/qM1mTwqQq_fko9yA1cZNRONuyHw.roa
Signing time: Mon 01 Jan 2024 14:30:11 +0000
ROA not before: Mon 01 Jan 2024 14:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213100
IP address blocks: 193.17.35.0/24 maxlen: 24
2a10:cdc0::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:a2:37:c2:3f:aa:e1:a0:d0:42:88:9b:33:15:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Jan 1 14:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8cd664f0a90abf7e4a3dc80d5c64d44e36ec87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:5f:fd:c2:1f:42:02:4c:b1:70:53:ed:a8:
cf:de:f3:e4:35:f0:f5:71:e9:8a:b3:71:7d:f2:17:
d2:6d:1f:76:da:89:b0:6e:c9:f0:80:2b:72:9b:ad:
47:86:c6:47:d9:bb:df:73:e0:9d:e2:e3:98:ad:6d:
fa:e6:57:c6:82:e6:52:bc:09:02:2b:98:ed:b7:a9:
ad:d8:16:f9:7c:ab:04:68:ff:df:0d:a5:57:93:44:
58:8b:13:9a:3e:34:c0:7c:42:21:e3:b9:4c:65:aa:
b2:5b:31:eb:39:d8:07:cd:e6:80:bf:5b:31:fe:44:
d7:34:7c:9b:51:55:2b:1f:1b:7e:cf:d6:1c:99:6d:
14:0d:34:a5:55:ad:61:fb:b6:91:ec:84:2a:66:aa:
8f:4f:69:04:27:3c:f9:52:2c:74:20:b9:b3:88:fa:
eb:f5:b6:28:f7:fd:d8:80:b3:9a:61:5e:5a:83:51:
ea:67:57:84:62:92:c0:84:65:a5:e3:86:cb:c8:10:
b3:2e:3d:69:3c:74:fe:81:19:3d:30:67:58:9c:69:
50:c7:4c:cf:12:81:ad:a8:a0:be:9a:54:aa:3f:84:
42:e2:0a:04:37:45:ee:24:17:bc:ad:1f:c8:7d:87:
a6:c9:13:09:a0:3d:45:f2:39:64:06:d9:85:53:64:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CD:66:4F:0A:90:AB:F7:E4:A3:DC:80:D5:C6:4D:44:E3:6E:C8:7C
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/qM1mTwqQq_fko9yA1cZNRONuyHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.35.0/24
IPv6:
2a10:cdc0::/29
Signature Algorithm: sha256WithRSAEncryption
cd:9e:b3:b6:1b:41:c4:f3:94:f1:e4:41:b8:8b:3a:70:f4:76:
21:54:18:41:ae:2b:c1:56:12:c4:93:b3:4f:5b:db:3d:46:2d:
97:55:af:7d:80:c7:86:e2:cc:d4:d8:17:c7:37:0a:57:2a:fe:
eb:07:3e:20:80:75:39:3e:6e:67:1a:b7:e4:78:49:4f:fb:13:
18:5f:e9:a8:db:38:1f:81:8e:c2:a4:66:e4:d0:a8:71:0a:81:
4e:16:fe:b9:a1:47:89:08:59:b6:6c:52:20:b5:3d:21:4f:7f:
d2:89:41:81:3e:ed:84:e1:1b:a8:5e:e7:02:9d:5d:46:02:67:
09:36:05:6f:a5:bc:90:03:f8:0a:02:31:6d:ea:d7:62:f4:eb:
5b:61:f4:47:be:20:43:1a:8d:7e:37:e4:9a:72:85:e5:c3:c2:
24:dd:3c:03:e6:08:ff:d9:9a:cc:d1:0a:21:3f:14:7c:54:e1:
d4:eb:54:5c:36:3b:78:b8:8d:b4:0a:3f:6e:61:76:bc:38:43:
11:d6:f1:10:7e:94:bc:3a:e8:ec:cb:d4:e0:f4:07:de:8f:98:
dd:ae:aa:16:f9:88:16:47:35:2e:0f:28:64:b8:fd:e2:0a:76:
a4:2d:96:13:6a:e5:29:02:c0:f7:b3:fa:35:d3:15:70:99:0a:
6f:4d:89:50
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzFbqI3wj+q4aDQQoibMxWsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzE3M2EzODBjZGY5M2M3YjI4NjY4ZmFiYWU1NjlhYTZm
N2EzNWEwHhcNMjQwMTAxMTQzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGNkNjY0ZjBhOTBhYmY3ZTRhM2RjODBkNWM2NGQ0NGUzNmVjODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkllf/cIfQgJMsXBT7ajP3vPkNfD1
cemKs3F98hfSbR922omwbsnwgCtym61HhsZH2bvfc+Cd4uOYrW365lfGguZSvAkC
K5jtt6mt2Bb5fKsEaP/fDaVXk0RYixOaPjTAfEIh47lMZaqyWzHrOdgHzeaAv1sx
/kTXNHybUVUrHxt+z9YcmW0UDTSlVa1h+7aR7IQqZqqPT2kEJzz5Uix0ILmziPrr
9bYo9/3YgLOaYV5ag1HqZ1eEYpLAhGWl44bLyBCzLj1pPHT+gRk9MGdYnGlQx0zP
EoGtqKC+mlSqP4RC4goEN0XuJBe8rR/IfYemyRMJoD1F8jlkBtmFU2SIdQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKjNZk8KkKv35KPcgNXGTUTjbsh8MB8GA1UdIwQY
MBaAFIJxc6OAzfk8eyhmj6uuVpqm96NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25Gem80RE4tVHg3S0dhUHE2NVdtcWIzbzFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZWYxMTQtNTg2OC00N2I4LTk3ODgt
N2I2NDA4OWJiMTQxLzEvcU0xbVR3cVFxX2Zrbzl5QTFjWk5ST051eUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jZWYxMTQtNTg2OC00N2I4LTk3ODgtN2I2NDA4OWJiMTQx
LzEvZ25Gem80RE4tVHg3S0dhUHE2NVdtcWIzbzFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwREjMA0E
AgACMAcDBQMqEM3AMA0GCSqGSIb3DQEBCwUAA4IBAQDNnrO2G0HE85Tx5EG4izpw
9HYhVBhBrivBVhLEk7NPW9s9Ri2XVa99gMeG4szU2BfHNwpXKv7rBz4ggHU5Pm5n
GrfkeElP+xMYX+mo2zgfgY7CpGbk0KhxCoFOFv65oUeJCFm2bFIgtT0hT3/SiUGB
Pu2E4RuoXucCnV1GAmcJNgVvpbyQA/gKAjFt6tdi9OtbYfRHviBDGo1+N+SacoXl
w8Ik3TwD5gj/2ZrM0QohPxR8VOHU61RcNjt4uI20Cj9uYXa8OEMR1vEQfpS8Oujs
y9Tg9Afej5jdrqoW+YgWRzUuDyhkuP3iCnakLZYTauUpAsD3s/o10xVwmQpvTYlQ
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:38 2025 by rpki-client