Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/qKo-R0CVE-3PyFuaESjSvG0qjA8.roa
File: qKo-R0CVE-3PyFuaESjSvG0qjA8.roa (raw, json)
Hash identifier: JkykuoVVMjjGBC2hInRSr137GNTAVspYfFJDPXQey9o=
Subject key identifier: A8:AA:3E:47:40:95:13:ED:CF:C8:5B:9A:11:28:D2:BC:6D:2A:8C:0F
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 01922F589ADE4B3E888D1E8D254A55C66C57
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/qKo-R0CVE-3PyFuaESjSvG0qjA8.roa
Signing time: Thu 26 Sep 2024 17:19:48 +0000
ROA not before: Thu 26 Sep 2024 17:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41313
IP address blocks: 46.35.160.0/19 maxlen: 24
79.110.120.0/21 maxlen: 24
79.110.124.0/24 maxlen: 24
80.95.16.0/21 maxlen: 24
80.95.22.0/24 maxlen: 24
93.152.235.0/24 maxlen: 24
93.175.244.0/22 maxlen: 24
95.158.128.0/18 maxlen: 24
151.252.192.0/20 maxlen: 24
185.18.228.0/22 maxlen: 24
185.40.164.0/22 maxlen: 24
212.21.128.0/19 maxlen: 24
2a00:e200::/32 maxlen: 48
2a00:e200:107::/48 maxlen: 48
2a0d:3b40::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Sep 2024 09:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2f:58:9a:de:4b:3e:88:8d:1e:8d:25:4a:55:c6:6c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Sep 26 17:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8aa3e47409513edcfc85b9a1128d2bc6d2a8c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:d1:cb:4c:84:a5:02:86:45:f5:c4:ed:e6:
ae:9c:14:c4:f8:0a:42:51:3d:af:8c:cf:1b:49:ea:
99:3f:5a:be:d8:c0:fa:c6:c7:31:c9:c2:04:67:cc:
a1:9b:07:27:99:1d:e0:b4:b8:f3:aa:b4:3c:a8:83:
6f:df:70:b3:bd:11:1c:67:22:ba:ca:45:69:f7:ed:
e8:dc:70:05:54:11:e7:80:f3:e2:20:ba:93:a6:10:
9a:59:9d:f7:73:e0:f8:5b:66:f9:8a:31:f8:29:2e:
e5:24:65:53:fa:f9:fd:73:2f:d6:bf:ec:ac:85:3e:
02:2d:1c:d6:73:41:2f:a9:43:23:a6:3f:d8:78:2d:
40:8f:ac:42:f2:72:a2:bd:5d:b0:2b:89:a8:de:af:
57:cf:e3:2a:6b:9d:8f:6a:aa:b2:de:ae:b9:ae:4b:
2c:c8:a0:c2:ec:72:54:82:97:3d:46:40:69:21:a5:
e2:25:a2:22:73:f1:96:98:77:e4:2e:45:ff:de:4d:
81:fb:0f:5d:93:48:8a:bf:92:a6:56:16:97:05:d7:
77:d5:6f:a5:73:95:05:87:47:ff:db:03:29:c0:cb:
a6:33:cc:5d:15:25:9a:8d:09:a1:81:8f:4d:ee:ad:
1d:83:de:1e:c9:90:a9:0f:44:61:a4:fc:6f:bd:16:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AA:3E:47:40:95:13:ED:CF:C8:5B:9A:11:28:D2:BC:6D:2A:8C:0F
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/qKo-R0CVE-3PyFuaESjSvG0qjA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.160.0/19
79.110.120.0/21
80.95.16.0/21
93.152.235.0/24
93.175.244.0/22
95.158.128.0/18
151.252.192.0/20
185.18.228.0/22
185.40.164.0/22
212.21.128.0/19
IPv6:
2a00:e200::/32
2a0d:3b40::/29
Signature Algorithm: sha256WithRSAEncryption
05:a6:00:bb:ef:f6:71:43:93:5d:8d:80:98:81:a7:3d:1a:30:
e4:c1:0b:8a:b3:a6:56:cc:ac:11:77:a5:33:2b:40:cb:5c:46:
b2:90:36:ad:c0:36:2a:96:f7:88:58:3a:b0:7a:88:de:53:4f:
6b:f6:d7:ad:f5:08:bc:80:0f:06:01:1e:49:25:95:8e:6a:6c:
31:9b:3f:6d:eb:12:71:bb:3c:d2:27:f3:e0:41:f7:d7:a1:15:
d7:29:cb:20:85:01:e4:b2:5b:31:18:46:89:9b:c2:60:79:eb:
5a:35:dd:7c:81:a2:26:4c:f5:2b:63:31:b7:11:42:88:cb:ff:
35:96:64:40:6a:b8:c2:40:8f:34:32:91:71:80:09:8b:b7:4d:
67:f0:16:63:e3:77:6e:71:4f:43:1f:73:a6:3a:c7:4c:e0:ae:
5b:1f:fe:18:6a:dc:49:5b:3c:cb:5d:a7:a9:f6:e2:d1:1f:5d:
27:08:72:9b:ec:10:7d:c4:91:c3:90:5f:0f:a1:7d:95:ca:f6:
7b:db:77:d5:69:24:13:1c:a0:a5:8a:38:ee:9c:c9:e7:b9:55:
21:3b:ce:4c:0e:a5:b1:74:54:75:41:7e:3b:53:f4:e7:36:c6:
76:b3:1d:86:b1:e0:d1:63:69:56:b5:9b:85:8e:b7:5b:2c:ce:
96:51:44:47
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAZIvWJreSz6IjR6NJUpVxmxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0
MzQwYjMwHhcNMjQwOTI2MTcxOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGFhM2U0NzQwOTUxM2VkY2ZjODViOWExMTI4ZDJiYzZkMmE4YzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDHRy0yEpQKGRfXE7eaunBTE+ApC
UT2vjM8bSeqZP1q+2MD6xscxycIEZ8yhmwcnmR3gtLjzqrQ8qINv33CzvREcZyK6
ykVp9+3o3HAFVBHngPPiILqTphCaWZ33c+D4W2b5ijH4KS7lJGVT+vn9cy/Wv+ys
hT4CLRzWc0EvqUMjpj/YeC1Aj6xC8nKivV2wK4mo3q9Xz+Mqa52Paqqy3q65rkss
yKDC7HJUgpc9RkBpIaXiJaIic/GWmHfkLkX/3k2B+w9dk0iKv5KmVhaXBdd31W+l
c5UFh0f/2wMpwMumM8xdFSWajQmhgY9N7q0dg94eyZCpD0RhpPxvvRa76wIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFKiqPkdAlRPtz8hbmhEo0rxtKowPMB8GA1UdIwQY
MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt
NGE2Zjg2ODMyNjVjLzEvcUtvLVIwQ1ZFLTNQeUZ1YUVTalN2RzBxakE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj
LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBCBAIAATA8AwQFLiOgAwQD
T254AwQDUF8QAwQAXZjrAwQCXa/0AwQGX56AAwQEl/zAAwQCuRLkAwQCuSikAwQF
1BWAMBQEAgACMA4DBQAqAOIAAwUDKg07QDANBgkqhkiG9w0BAQsFAAOCAQEABaYA
u+/2cUOTXY2AmIGnPRow5MELirOmVsysEXelMytAy1xGspA2rcA2Kpb3iFg6sHqI
3lNPa/bXrfUIvIAPBgEeSSWVjmpsMZs/besScbs80ifz4EH316EV1ynLIIUB5LJb
MRhGiZvCYHnrWjXdfIGiJkz1K2MxtxFCiMv/NZZkQGq4wkCPNDKRcYAJi7dNZ/AW
Y+N3bnFPQx9zpjrHTOCuWx/+GGrcSVs8y12nqfbi0R9dJwhym+wQfcSRw5BfD6F9
lcr2e9t31WkkExygpYo47pzJ57lVITvOTA6lsXRUdUF+O1P05zbGdrMdhrHg0WNp
VrWbhY63WyzOllFERw==
-----END CERTIFICATE-----
Generated at Mon Sep 30 11:06:50 2024 by rpki-client on console-ams.rpki-client.org