Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/QZGdnKVHtH2JXwfaZ0ESvs3Ivx8.roa
File: QZGdnKVHtH2JXwfaZ0ESvs3Ivx8.roa (raw, json)
Hash identifier: zXcK/jinZ80TvAkjT+ITBGjOW78iVlv7mPyBETjD68M=
Subject key identifier: 41:91:9D:9C:A5:47:B4:7D:89:5F:07:DA:67:41:12:BE:CD:C8:BF:1F
Certificate issuer: /CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Certificate serial: 018DF01A8DC95D928577FB52F83E065A3BF4
Authority key identifier: 2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/QZGdnKVHtH2JXwfaZ0ESvs3Ivx8.roa
Signing time: Wed 28 Feb 2024 14:24:48 +0000
ROA not before: Wed 28 Feb 2024 14:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211393
IP address blocks: 45.9.23.0/24 maxlen: 24
193.36.4.0/22 maxlen: 22
2a0b:6dc0::/29 maxlen: 29
2a0b:6dc0::/46 maxlen: 46
2a0b:6dc0:6::/48 maxlen: 48
2a0b:6dc0:123::/48 maxlen: 48
2a0b:6dc1:1::/48 maxlen: 48
2a0b:6dc1:2::/48 maxlen: 48
2a0b:6dc2::/45 maxlen: 45
2a0b:6dc3::/48 maxlen: 48
2a0b:6dc3:a::/47 maxlen: 47
2a0b:6dc3:c::/48 maxlen: 48
2a0b:6dc7::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 06 Mar 2024 08:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:1a:8d:c9:5d:92:85:77:fb:52:f8:3e:06:5a:3b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Validity
Not Before: Feb 28 14:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41919d9ca547b47d895f07da674112becdc8bf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:40:8f:55:89:81:b7:d1:21:9e:01:fd:26:1a:
bc:9a:b9:1d:0a:0d:49:e1:fa:0f:20:ea:4d:3b:6a:
c9:e5:31:9c:91:f9:2f:2b:91:9c:e1:ac:15:31:e2:
d4:3b:1d:02:c2:e0:6c:2c:3f:8e:ce:e9:05:c9:cb:
85:ff:b7:d6:9b:36:7f:9e:fd:de:ba:bc:96:c1:a3:
07:d9:ea:cf:38:55:64:33:4a:58:ef:c0:14:51:36:
48:2e:4d:49:af:9d:1d:15:42:9e:77:68:10:59:10:
dc:d6:c6:9d:76:4b:fd:05:e5:3d:a4:17:71:2c:cd:
9d:6f:cb:d3:b9:3f:1d:49:14:74:13:56:be:23:38:
07:5b:e6:87:60:5e:17:f2:be:14:be:ab:60:14:10:
0b:25:0b:b2:ee:94:8a:4f:57:32:a2:45:f3:5c:fa:
05:cc:4c:f4:73:3c:85:d8:13:8b:f7:04:2f:c2:0e:
ca:0c:66:a1:b5:72:67:d3:26:97:cf:9e:ad:38:16:
ea:d0:05:3d:20:14:9c:08:a5:8d:25:b6:e7:fb:25:
f4:33:66:64:31:d6:bc:17:02:d5:78:76:b0:eb:e1:
81:ac:eb:38:24:a2:48:67:30:00:39:3e:f5:f4:c0:
2b:a6:c2:a1:c6:01:45:ad:a3:07:2c:dd:fe:0a:b0:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:91:9D:9C:A5:47:B4:7D:89:5F:07:DA:67:41:12:BE:CD:C8:BF:1F
X509v3 Authority Key Identifier:
keyid:2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/QZGdnKVHtH2JXwfaZ0ESvs3Ivx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.23.0/24
193.36.4.0/22
IPv6:
2a0b:6dc0::/29
Signature Algorithm: sha256WithRSAEncryption
50:16:c8:9e:92:77:2a:bb:51:4d:f2:88:79:92:44:6b:67:9c:
e2:4a:bc:42:45:83:ac:7c:a1:23:2c:9c:da:be:6c:ab:7d:ab:
59:e3:34:70:ed:bb:45:73:d7:d9:14:19:81:26:6a:0f:c5:26:
97:19:ef:c7:52:a6:fb:7e:7a:ba:18:89:a7:35:93:21:b1:af:
82:bd:9b:3e:e5:c8:a3:9d:83:ab:51:42:23:70:8e:65:6a:e9:
03:bd:14:34:ea:20:62:f4:32:1e:cf:62:fa:c6:c9:08:cd:28:
eb:48:98:97:92:32:25:ce:03:a6:a1:be:37:f5:ee:f4:33:88:
2b:4d:0b:78:76:4b:e7:70:9c:34:c3:11:25:f2:7c:83:b7:f1:
e5:43:d0:50:75:1c:e5:98:d8:7f:26:15:e7:38:8b:21:51:c9:
87:94:0f:8c:7b:d2:55:b5:25:97:96:e8:4f:c7:aa:0e:3d:39:
7b:37:ce:95:fb:18:09:51:72:39:0a:c4:1c:bc:9c:ea:8c:4d:
5c:96:03:4c:1e:56:7d:17:3b:7d:d9:39:4f:96:c6:49:db:2f:
ce:ea:e2:e5:3f:ef:8d:2b:29:a4:f1:2c:78:92:a0:09:95:17:
6f:d9:b3:1b:d9:61:1d:c3:fa:c8:8d:8f:28:00:ae:f3:c1:f4:
44:a1:67:d0
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAY3wGo3JXZKFd/tS+D4GWjv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYzI5MWI4ZGI2Y2ZkZGY2ZGQyYTFkNTViMjI2ZDQ5NDky
YTI3MDUwHhcNMjQwMjI4MTQyNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTkxOWQ5Y2E1NDdiNDdkODk1ZjA3ZGE2NzQxMTJiZWNkYzhiZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgECPVYmBt9EhngH9Jhq8mrkdCg1J
4foPIOpNO2rJ5TGckfkvK5Gc4awVMeLUOx0CwuBsLD+OzukFycuF/7fWmzZ/nv3e
uryWwaMH2erPOFVkM0pY78AUUTZILk1Jr50dFUKed2gQWRDc1saddkv9BeU9pBdx
LM2db8vTuT8dSRR0E1a+IzgHW+aHYF4X8r4UvqtgFBALJQuy7pSKT1cyokXzXPoF
zEz0czyF2BOL9wQvwg7KDGahtXJn0yaXz56tOBbq0AU9IBScCKWNJbbn+yX0M2Zk
Mda8FwLVeHaw6+GBrOs4JKJIZzAAOT719MArpsKhxgFFraMHLN3+CrDUUQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFEGRnZylR7R9iV8H2mdBEr7NyL8fMB8GA1UdIwQY
MBaAFC3CkbjbbP3fbdKh1VsibUlJKicFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGNLUnVOdHNfZDl0MHFIVld5SnRTVWtxSndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MWE4NDMtNzUyNC00NTViLWJlMjIt
MmIxNzBlOTVjMmI3LzEvUVpHZG5LVkh0SDJKWHdmYVowRVN2czNJdng4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80MWE4NDMtNzUyNC00NTViLWJlMjItMmIxNzBlOTVjMmI3
LzEvTGNLUnVOdHNfZDl0MHFIVld5SnRTVWtxSndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALQkXAwQC
wSQEMA0EAgACMAcDBQMqC23AMA0GCSqGSIb3DQEBCwUAA4IBAQBQFsiekncqu1FN
8oh5kkRrZ5ziSrxCRYOsfKEjLJzavmyrfatZ4zRw7btFc9fZFBmBJmoPxSaXGe/H
Uqb7fnq6GImnNZMhsa+CvZs+5cijnYOrUUIjcI5laukDvRQ06iBi9DIez2L6xskI
zSjrSJiXkjIlzgOmob439e70M4grTQt4dkvncJw0wxEl8nyDt/HlQ9BQdRzlmNh/
JhXnOIshUcmHlA+Me9JVtSWXluhPx6oOPTl7N86V+xgJUXI5CsQcvJzqjE1clgNM
HlZ9Fzt92TlPlsZJ2y/O6uLlP++NKymk8Sx4kqAJlRdv2bMb2WEdw/rIjY8oAK7z
wfREoWfQ
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:05 2025 by rpki-client