Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/QpW8Bk5bmT-NCktcfkd_Cz6xybw.roa
File: QpW8Bk5bmT-NCktcfkd_Cz6xybw.roa (raw, json)
Hash identifier: Ry5MeJ6eeXtdUIg15O2aoAP0fR3CiJ5d01/CUjVGnQM=
Subject key identifier: 42:95:BC:06:4E:5B:99:3F:8D:0A:4B:5C:7E:47:7F:0B:3E:B1:C9:BC
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 018AF03CE7C7EBED0CB8EA75479AC2A3D32C
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/QpW8Bk5bmT-NCktcfkd_Cz6xybw.roa
Signing time: Mon 02 Oct 2023 11:53:57 +0000
ROA not before: Mon 02 Oct 2023 11:53:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 89.149.24.0/24 maxlen: 24
89.149.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:3c:e7:c7:eb:ed:0c:b8:ea:75:47:9a:c2:a3:d3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Oct 2 11:53:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4295bc064e5b993f8d0a4b5c7e477f0b3eb1c9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2c:2d:c4:1f:09:95:31:8c:f0:f2:99:9b:83:
79:0d:fb:95:02:82:2b:04:07:14:7a:e3:1a:4e:06:
f8:cd:49:61:ef:70:c9:5e:d0:ca:41:14:ed:6d:0a:
7e:95:3a:41:09:02:16:e4:56:23:72:1d:ce:cb:95:
67:a4:30:41:ad:00:7b:8f:1a:53:75:e9:94:eb:6f:
e5:fb:c3:2a:4f:79:e6:10:3d:fe:10:e6:6c:18:db:
63:58:09:39:ef:61:79:7e:cf:c0:eb:2f:33:d4:e6:
d4:ba:f5:1a:69:e4:8c:0b:e6:b4:6c:92:80:ca:86:
f5:df:e3:75:bd:86:92:59:c1:aa:a4:d8:ef:c0:60:
ed:e9:48:f4:71:49:73:e4:e3:9c:cc:b3:7f:ea:2a:
e7:2d:80:34:28:6d:f8:aa:1e:7b:59:63:a6:f9:1e:
58:6f:f2:c7:ac:b1:79:c0:4d:1d:18:87:e0:c6:3d:
1f:08:54:af:59:6e:f4:ec:55:df:6b:c2:a9:13:52:
af:53:00:97:d1:5d:73:0d:8a:ce:c3:11:fb:32:ca:
52:a1:be:16:76:c1:22:2e:75:68:c4:04:88:3c:c8:
56:14:71:35:56:54:5e:e7:53:65:6c:f0:40:80:b8:
f9:8a:32:5b:55:92:d3:10:9d:7a:a3:da:b0:30:44:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:95:BC:06:4E:5B:99:3F:8D:0A:4B:5C:7E:47:7F:0B:3E:B1:C9:BC
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/QpW8Bk5bmT-NCktcfkd_Cz6xybw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.149.23.0-89.149.24.255
Signature Algorithm: sha256WithRSAEncryption
ab:b8:4e:ea:88:13:d7:fe:34:b5:8e:6e:bb:3f:d7:88:01:74:
6a:7b:63:d4:b3:4e:12:1d:44:bb:74:d0:e9:f1:f0:7b:b6:10:
48:53:e1:5d:71:28:51:63:fd:c8:31:2a:98:05:7e:61:11:f5:
dd:c4:b1:39:d6:a9:7d:70:74:18:60:78:c6:6e:e8:72:87:79:
64:74:7b:05:64:8e:0a:28:a0:c4:43:4a:d8:17:55:0d:78:01:
d5:cc:ae:57:79:ce:b5:4d:cd:b4:c0:40:2c:3a:23:7d:09:2e:
cd:07:0d:06:92:d9:d9:a7:5f:b3:55:74:bb:fa:6c:23:0b:2b:
e4:8c:fb:f2:fc:c3:7f:78:e6:a2:ea:03:c0:4a:8f:39:26:62:
a2:3f:b7:6a:de:fb:a9:65:31:c5:6f:9d:cb:0a:ce:1b:c7:a0:
36:00:ea:78:10:ad:f9:65:6e:6a:fe:00:4b:d0:f0:45:8f:34:
12:af:5f:22:d8:81:ca:c1:76:17:d3:70:18:06:00:6d:99:ed:
e5:22:4a:3e:df:a9:b7:e5:7e:03:25:78:32:a5:18:2d:0b:be:
3f:3e:9a:de:4c:c1:7e:99:04:ff:54:dd:89:3c:2c:cd:c8:c0:
a5:b9:84:46:3c:2c:0b:1d:9a:eb:c4:20:d8:a4:ff:79:6a:fa:
84:bf:66:eb
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYrwPOfH6+0MuOp1R5rCo9MsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm
YzQ1ODIwHhcNMjMxMDAyMTE1MzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mjk1YmMwNjRlNWI5OTNmOGQwYTRiNWM3ZTQ3N2YwYjNlYjFjOWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCwtxB8JlTGM8PKZm4N5DfuVAoIr
BAcUeuMaTgb4zUlh73DJXtDKQRTtbQp+lTpBCQIW5FYjch3Oy5VnpDBBrQB7jxpT
demU62/l+8MqT3nmED3+EOZsGNtjWAk572F5fs/A6y8z1ObUuvUaaeSMC+a0bJKA
yob13+N1vYaSWcGqpNjvwGDt6Uj0cUlz5OOczLN/6irnLYA0KG34qh57WWOm+R5Y
b/LHrLF5wE0dGIfgxj0fCFSvWW707FXfa8KpE1KvUwCX0V1zDYrOwxH7MspSob4W
dsEiLnVoxASIPMhWFHE1VlRe51NlbPBAgLj5ijJbVZLTEJ16o9qwMESDGQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEKVvAZOW5k/jQpLXH5Hfws+scm8MB8GA1UdIwQY
MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt
MjhhODQxZGEwYmZkLzEvUXBXOEJrNWJtVC1OQ2t0Y2ZrZF9DejZ4eWJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk
LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABZlRcD
BABZlRgwDQYJKoZIhvcNAQELBQADggEBAKu4TuqIE9f+NLWObrs/14gBdGp7Y9Sz
ThIdRLt00Onx8Hu2EEhT4V1xKFFj/cgxKpgFfmER9d3EsTnWqX1wdBhgeMZu6HKH
eWR0ewVkjgoooMRDStgXVQ14AdXMrld5zrVNzbTAQCw6I30JLs0HDQaS2dmnX7NV
dLv6bCMLK+SM+/L8w3945qLqA8BKjzkmYqI/t2re+6llMcVvncsKzhvHoDYA6ngQ
rfllbmr+AEvQ8EWPNBKvXyLYgcrBdhfTcBgGAG2Z7eUiSj7fqbflfgMleDKlGC0L
vj8+mt5MwX6ZBP9U3Yk8LM3IwKW5hEY8LAsdmuvEINik/3lq+oS/Zus=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:29 2024 by rpki-client on console-fra.rpki-client.org