Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/QeT9UE_jeyLqDVcbPtqOebtMFok.roa
File: QeT9UE_jeyLqDVcbPtqOebtMFok.roa (raw, json)
Hash identifier: 4YxfUTHrNk2yNmF+GgRCj0hCMT+Le/BqXjtVIAB4SFo=
Subject key identifier: 41:E4:FD:50:4F:E3:7B:22:EA:0D:57:1B:3E:DA:8E:79:BB:4C:16:89
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0187DC4CA3F7E0AC8798835A3E0ED148D707
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/QeT9UE_jeyLqDVcbPtqOebtMFok.roa
Signing time: Tue 02 May 2023 11:50:22 +0000
ROA not before: Tue 02 May 2023 11:50:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 93.89.215.0/24 maxlen: 24
93.89.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 13:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:4c:a3:f7:e0:ac:87:98:83:5a:3e:0e:d1:48:d7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: May 2 11:50:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41e4fd504fe37b22ea0d571b3eda8e79bb4c1689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:c5:47:0c:3b:6a:da:57:94:d0:c7:3e:73:
62:34:39:c1:1a:55:32:fa:92:ce:4b:e8:13:a9:50:
bb:c0:58:ce:12:be:c7:19:76:0a:c3:c7:4f:68:42:
f6:29:80:da:f0:1c:94:5d:fa:fa:36:c3:a3:3d:3e:
ba:f2:e5:08:ff:e8:0a:65:38:3c:80:71:7c:44:c4:
0b:0d:fb:48:05:99:a0:fc:99:9b:f7:0a:6f:99:12:
74:4d:5b:82:68:8d:2f:5e:32:a5:44:7b:68:57:e6:
0f:15:ec:0c:12:f2:ef:8a:13:29:19:12:d1:71:ae:
21:bb:81:9c:bf:40:d0:55:45:8c:e0:c0:a1:b9:9e:
36:28:f3:8e:66:82:9e:9e:e3:6d:83:d2:4b:34:73:
30:9d:a9:99:fa:26:57:1a:de:8c:e1:06:3f:2f:bc:
7b:44:e1:f7:a3:30:9a:05:30:73:1a:c5:e6:9e:8a:
73:8b:b2:bd:b7:36:3c:48:f0:38:d7:20:b4:fb:0e:
a5:9a:0c:11:35:29:b4:c2:2d:75:bb:f1:9a:59:bf:
54:6f:99:86:dd:ec:22:a0:23:98:a1:92:77:10:32:
9c:ff:8a:0e:6e:35:42:8e:59:ec:10:ef:df:ed:bc:
7d:76:46:be:8c:87:11:38:58:61:4d:e0:42:91:1c:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E4:FD:50:4F:E3:7B:22:EA:0D:57:1B:3E:DA:8E:79:BB:4C:16:89
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/QeT9UE_jeyLqDVcbPtqOebtMFok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.215.0-93.89.216.255
Signature Algorithm: sha256WithRSAEncryption
68:e1:0c:ee:f7:ad:22:92:0f:b9:e4:be:fc:b0:3a:41:d5:bf:
50:a8:52:d1:23:91:72:15:9b:6f:4b:1c:a5:6f:d5:1a:60:b6:
e4:37:fb:17:c7:cc:d8:07:94:36:23:0f:cc:ad:6c:1c:45:c3:
e2:3e:2b:99:a2:3d:c5:a2:03:5b:00:d7:d7:29:82:26:3c:f0:
9d:fb:a4:32:98:b0:11:3d:28:63:fa:2a:7d:23:94:36:f7:2a:
ca:e6:6e:7a:20:10:d6:1e:5e:4f:d7:60:c0:8f:16:a4:09:82:
11:05:b4:bc:2c:a1:56:8e:46:52:1e:3d:7d:07:7d:7e:2a:5b:
c6:fd:0b:57:4d:a7:82:20:10:a0:05:33:5b:51:e0:ba:36:85:
83:77:31:c3:c7:cd:ee:e8:56:66:72:11:4a:28:f2:ed:53:e8:
a9:a6:31:07:95:f8:3e:57:b6:82:91:8e:86:33:97:77:d4:bc:
ad:72:fe:54:ee:89:bc:e5:37:e1:a8:30:7f:71:ca:18:f3:0d:
16:d4:54:a3:e6:a1:99:a0:d6:83:0d:a1:f3:f2:41:cf:25:6b:
14:48:86:44:23:7f:22:0b:3d:12:95:14:40:58:6e:1b:23:bc:
84:17:09:f7:93:4c:6c:3f:36:4e:f0:23:a8:54:84:e8:4b:10:
0f:0e:05:bd
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYfcTKP34KyHmINaPg7RSNcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjMwNTAyMTE1MDIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWU0ZmQ1MDRmZTM3YjIyZWEwZDU3MWIzZWRhOGU3OWJiNGMxNjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9LFRww7atpXlNDHPnNiNDnBGlUy
+pLOS+gTqVC7wFjOEr7HGXYKw8dPaEL2KYDa8ByUXfr6NsOjPT668uUI/+gKZTg8
gHF8RMQLDftIBZmg/Jmb9wpvmRJ0TVuCaI0vXjKlRHtoV+YPFewMEvLvihMpGRLR
ca4hu4Gcv0DQVUWM4MChuZ42KPOOZoKenuNtg9JLNHMwnamZ+iZXGt6M4QY/L7x7
ROH3ozCaBTBzGsXmnopzi7K9tzY8SPA41yC0+w6lmgwRNSm0wi11u/GaWb9Ub5mG
3ewioCOYoZJ3EDKc/4oObjVCjlnsEO/f7bx9dka+jIcROFhhTeBCkRznPwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEHk/VBP43si6g1XGz7ajnm7TBaJMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvUWVUOVVFX2pleUxxRFZjYlB0cU9lYnRNRm9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABdWdcD
BABdWdgwDQYJKoZIhvcNAQELBQADggEBAGjhDO73rSKSD7nkvvywOkHVv1CoUtEj
kXIVm29LHKVv1RpgtuQ3+xfHzNgHlDYjD8ytbBxFw+I+K5miPcWiA1sA19cpgiY8
8J37pDKYsBE9KGP6Kn0jlDb3KsrmbnogENYeXk/XYMCPFqQJghEFtLwsoVaORlIe
PX0HfX4qW8b9C1dNp4IgEKAFM1tR4Lo2hYN3McPHze7oVmZyEUoo8u1T6KmmMQeV
+D5XtoKRjoYzl3fUvK1y/lTuibzlN+GoMH9xyhjzDRbUVKPmoZmg1oMNofPyQc8l
axRIhkQjfyILPRKVFEBYbhsjvIQXCfeTTGw/Nk7wI6hUhOhLEA8OBb0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org