Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/QYb6TbsQDU8mqVBII8uod-aHwSw.roa
File: QYb6TbsQDU8mqVBII8uod-aHwSw.roa (raw, json)
Hash identifier: bxoNRYhhjoI3C9givxivUc65140JLMXCGfBpAElOUkI=
Subject key identifier: 41:86:FA:4D:BB:10:0D:4F:26:A9:50:48:23:CB:A8:77:E6:87:C1:2C
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018570305B8F1516B9030B1013AFD6318B10
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/QYb6TbsQDU8mqVBII8uod-aHwSw.roa
Signing time: Mon 02 Jan 2023 01:54:55 +0000
ROA not before: Mon 02 Jan 2023 01:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15545
IP address blocks: 195.228.135.0/24 maxlen: 24
80.249.160.0/22 maxlen: 22
80.249.165.0/24 maxlen: 24
46.107.224.0/24 maxlen: 24
188.36.230.0/23 maxlen: 23
195.228.245.0/24 maxlen: 24
80.249.174.0/23 maxlen: 23
80.249.174.0/24 maxlen: 24
84.2.37.0/24 maxlen: 24
84.2.32.0/23 maxlen: 23
84.2.34.0/23 maxlen: 23
84.2.36.0/23 maxlen: 23
84.2.39.0/24 maxlen: 24
84.2.38.0/23 maxlen: 23
84.2.42.0/23 maxlen: 23
194.38.104.0/22 maxlen: 22
84.2.46.0/23 maxlen: 23
31.46.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:5b:8f:15:16:b9:03:0b:10:13:af:d6:31:8b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4186fa4dbb100d4f26a9504823cba877e687c12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:f1:80:93:9a:66:21:8c:77:f1:d4:5a:11:
84:0d:ac:fd:34:73:22:20:6f:1a:3f:d7:d3:0b:88:
e6:bf:ac:19:36:85:af:0e:d8:0c:c9:2e:6e:d0:76:
16:a9:d8:47:f0:f3:6c:e7:00:89:77:7a:d3:b5:35:
36:15:b2:30:df:b0:48:2a:c0:80:b5:9f:bb:2e:94:
3a:1d:0c:bb:8c:83:09:28:03:dd:49:48:d8:ce:83:
c0:6c:89:f9:0a:e7:c0:dd:c1:55:c1:34:57:78:34:
72:47:61:5c:85:f2:c0:71:1f:da:78:65:5e:ec:b6:
cd:ee:c9:cf:10:25:4e:18:69:42:82:63:78:55:f4:
57:7a:00:9b:de:be:0a:39:45:ab:50:a4:ec:2c:58:
f7:7f:69:6e:d7:68:4e:77:2d:a9:82:dd:29:75:fc:
66:63:b4:73:85:f8:59:bc:eb:7d:ac:aa:5b:ef:1b:
e6:49:b0:51:7c:c9:d8:56:d8:b3:f3:69:62:fe:98:
6a:b0:a5:26:dd:ca:1c:27:78:86:26:10:6b:df:12:
e6:5f:cd:b2:09:7c:1e:fb:bf:35:c5:0d:04:86:54:
1c:72:b7:2c:6c:19:7d:6c:75:9c:eb:08:1c:37:ea:
0a:4a:8f:72:38:42:f3:16:f2:1f:8f:6f:e1:d4:65:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:86:FA:4D:BB:10:0D:4F:26:A9:50:48:23:CB:A8:77:E6:87:C1:2C
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/QYb6TbsQDU8mqVBII8uod-aHwSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.46.22.0/24
46.107.224.0/24
80.249.160.0/22
80.249.165.0/24
80.249.174.0/23
84.2.32.0/21
84.2.42.0/23
84.2.46.0/23
188.36.230.0/23
194.38.104.0/22
195.228.135.0/24
195.228.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:85:09:aa:11:13:c1:d0:77:e9:22:66:36:a3:55:bc:83:c0:
87:ce:be:10:79:a6:b1:2b:9a:5d:07:66:48:f9:64:fd:f1:5b:
55:60:62:f5:9e:9e:7e:d9:85:6e:17:c1:44:5e:94:be:49:7f:
84:1a:33:a6:df:93:aa:79:ef:3e:f5:c0:22:ea:5d:cc:47:93:
e2:79:3b:dd:41:e4:d4:b8:e1:03:49:c1:61:bf:fc:10:c2:15:
c1:76:5e:ee:04:c4:89:67:e3:0c:0e:63:8f:c9:88:2d:55:e6:
7b:eb:17:3e:d2:2e:5e:9f:1c:3e:cf:dc:7d:a2:ed:d9:39:94:
02:a5:dd:e2:bc:d4:99:cb:63:82:78:60:01:10:af:50:7b:bd:
01:1e:b6:b4:d0:3c:94:af:1a:1a:73:a6:6a:63:a9:a9:40:ba:
1d:70:3b:fb:36:fa:9c:49:a1:56:65:e2:f8:59:5a:58:25:b3:
57:c2:89:ab:47:4c:d1:00:13:82:d3:f4:ee:5e:a2:aa:da:f4:
25:b4:1d:e7:fe:24:2a:1d:35:12:48:d1:37:6c:35:2b:18:61:
ef:42:42:6b:85:c6:91:79:bd:85:0a:44:34:9e:cd:20:b1:ee:
05:83:bb:4b:d7:66:2d:58:f8:0d:0d:9b:a9:18:bc:26:91:2f:
87:ad:01:d0
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAYVwMFuPFRa5AwsQE6/WMYsQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjMwMTAyMDE1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTg2ZmE0ZGJiMTAwZDRmMjZhOTUwNDgyM2NiYTg3N2U2ODdjMTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl7xgJOaZiGMd/HUWhGEDaz9NHMi
IG8aP9fTC4jmv6wZNoWvDtgMyS5u0HYWqdhH8PNs5wCJd3rTtTU2FbIw37BIKsCA
tZ+7LpQ6HQy7jIMJKAPdSUjYzoPAbIn5CufA3cFVwTRXeDRyR2FchfLAcR/aeGVe
7LbN7snPECVOGGlCgmN4VfRXegCb3r4KOUWrUKTsLFj3f2lu12hOdy2pgt0pdfxm
Y7RzhfhZvOt9rKpb7xvmSbBRfMnYVtiz82li/phqsKUm3cocJ3iGJhBr3xLmX82y
CXwe+781xQ0EhlQccrcsbBl9bHWc6wgcN+oKSo9yOELzFvIfj2/h1GVQbwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFEGG+k27EA1PJqlQSCPLqHfmh8EsMB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEvUVliNlRic1FEVThtcVZCSUk4dW9kLWFId1N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy
LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAHy4WAwQA
LmvgAwQCUPmgAwQAUPmlAwQBUPmuAwQDVAIgAwQBVAIqAwQBVAIuAwQBvCTmAwQC
wiZoAwQAw+SHAwQAw+T1MA0GCSqGSIb3DQEBCwUAA4IBAQBqhQmqERPB0HfpImY2
o1W8g8CHzr4QeaaxK5pdB2ZI+WT98VtVYGL1np5+2YVuF8FEXpS+SX+EGjOm35Oq
ee8+9cAi6l3MR5PieTvdQeTUuOEDScFhv/wQwhXBdl7uBMSJZ+MMDmOPyYgtVeZ7
6xc+0i5enxw+z9x9ou3ZOZQCpd3ivNSZy2OCeGABEK9Qe70BHra00DyUrxoac6Zq
Y6mpQLodcDv7NvqcSaFWZeL4WVpYJbNXwomrR0zRABOC0/TuXqKq2vQltB3n/iQq
HTUSSNE3bDUrGGHvQkJrhcaReb2FCkQ0ns0gse4Fg7tL12YtWPgNDZupGLwmkS+H
rQHQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:47 2024 by rpki-client on console-fra.rpki-client.org