Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/qcjtsswQWhrU1k3XmGKrq0B5BXs.roa
File: qcjtsswQWhrU1k3XmGKrq0B5BXs.roa (raw, json)
Hash identifier: cCDjGxYZD+qEdAjPFo5gxE785Ig9g4GGS5BkUpIqYS8=
Subject key identifier: A9:C8:ED:B2:CC:10:5A:1A:D4:D6:4D:D7:98:62:AB:AB:40:79:05:7B
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 018573438AB66A788401F813F75C3B56CE57
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/qcjtsswQWhrU1k3XmGKrq0B5BXs.roa
Signing time: Mon 02 Jan 2023 16:14:44 +0000
ROA not before: Mon 02 Jan 2023 16:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199653
IP address blocks: 94.177.232.0/21 maxlen: 24
94.177.240.0/22 maxlen: 24
89.38.148.0/22 maxlen: 24
89.40.112.0/22 maxlen: 24
89.36.212.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:8a:b6:6a:78:84:01:f8:13:f7:5c:3b:56:ce:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Jan 2 16:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9c8edb2cc105a1ad4d64dd79862abab4079057b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:12:cb:5c:26:28:f7:5d:13:33:3a:54:54:
91:22:f4:8d:4a:9b:a3:2e:63:f4:ac:8f:f2:ef:cb:
c5:55:dd:c8:1c:7f:06:27:7f:93:05:a9:7f:46:5c:
2f:6e:d8:0b:4e:dd:da:11:82:be:0b:97:a3:8d:f4:
e4:aa:07:c6:87:3d:d3:dc:b7:6f:09:d1:10:eb:3c:
9b:85:01:14:8d:c0:38:da:f6:36:59:ff:0c:55:33:
42:1e:99:16:85:e6:6e:8d:67:98:60:05:40:67:59:
03:63:bc:a8:86:25:96:b1:83:4b:19:33:25:a5:f3:
a8:03:27:f9:d3:95:37:f5:47:fc:c8:41:06:0a:b1:
9d:22:22:e3:c2:3e:ab:ca:94:c2:ed:28:40:ad:7a:
81:67:d8:73:bc:d7:64:7f:b6:76:0e:d3:70:50:77:
7a:c3:81:e2:32:6c:d9:89:6a:29:eb:0e:e0:49:57:
67:5c:46:ae:97:9b:2f:2f:7b:14:ba:2f:2a:0b:a4:
fc:fd:3c:d0:a9:db:b8:eb:59:c9:d7:de:b5:3a:2f:
2f:14:91:3f:60:d6:bd:08:a0:3b:bf:66:bc:47:c8:
9a:39:15:00:84:b2:0f:5b:e1:24:26:33:76:73:f3:
e2:29:97:49:bd:eb:5a:e3:79:6a:27:7f:f5:51:b4:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C8:ED:B2:CC:10:5A:1A:D4:D6:4D:D7:98:62:AB:AB:40:79:05:7B
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/qcjtsswQWhrU1k3XmGKrq0B5BXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.212.0/22
89.38.148.0/22
89.40.112.0/22
94.177.232.0-94.177.243.255
Signature Algorithm: sha256WithRSAEncryption
88:2e:99:8c:ea:b3:d9:ce:44:89:31:d4:cd:19:34:84:92:e8:
c1:c4:a6:63:77:1a:1b:77:6c:51:ed:d6:07:33:39:46:03:4d:
4e:d9:af:bc:da:60:52:f8:99:fb:34:80:8d:5f:f9:45:e1:02:
df:bc:84:b2:85:03:bb:f0:96:84:09:2e:97:b6:10:73:cf:df:
19:7f:29:f4:7c:44:d1:65:2e:d5:72:9b:68:d4:c4:28:39:6a:
b2:4f:8d:44:9b:ce:ef:56:2b:68:36:b0:8a:bf:04:24:35:86:
0f:c9:db:46:78:9d:cb:b8:42:a8:23:b0:e0:be:50:d8:87:9b:
51:1b:18:dd:fe:58:37:2f:ba:af:4b:11:e2:70:73:78:07:9f:
9d:15:11:cb:5c:24:ae:bb:a0:4f:e0:92:e1:81:20:e0:88:c6:
74:23:c6:de:c1:d7:b2:f1:06:6a:92:2d:95:56:c0:a5:98:83:
ab:0c:fa:d5:85:a1:16:47:59:e0:dc:9c:e6:b7:90:3e:72:a3:
f7:8d:dd:79:ce:9c:a2:35:a4:bf:58:a7:47:a4:c8:60:bc:91:
cd:f7:30:77:1c:03:cb:6d:ce:69:68:3e:a2:24:a2:0b:4c:d0:
a7:95:f4:67:bf:79:b5:bf:df:16:ab:97:99:bc:38:32:2f:1f:
0c:7a:6d:b8
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYVzQ4q2aniEAfgT91w7Vs5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5
Mzg2MWMwHhcNMjMwMTAyMTYxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWM4ZWRiMmNjMTA1YTFhZDRkNjRkZDc5ODYyYWJhYjQwNzkwNTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZASy1wmKPddEzM6VFSRIvSNSpuj
LmP0rI/y78vFVd3IHH8GJ3+TBal/RlwvbtgLTt3aEYK+C5ejjfTkqgfGhz3T3Ldv
CdEQ6zybhQEUjcA42vY2Wf8MVTNCHpkWheZujWeYYAVAZ1kDY7yohiWWsYNLGTMl
pfOoAyf505U39Uf8yEEGCrGdIiLjwj6rypTC7ShArXqBZ9hzvNdkf7Z2DtNwUHd6
w4HiMmzZiWop6w7gSVdnXEaul5svL3sUui8qC6T8/TzQqdu461nJ1961Oi8vFJE/
YNa9CKA7v2a8R8iaORUAhLIPW+EkJjN2c/PiKZdJveta43lqJ3/1UbRVswIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFKnI7bLMEFoa1NZN15hiq6tAeQV7MB8GA1UdIwQY
MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt
ODQyNjk0MTJkNTYxLzEvcWNqdHNzd1FXaHJVMWszWG1HS3JxMEI1QlhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx
LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCWSTUAwQC
WSaUAwQCWShwMAwDBANesegDBAJesfAwDQYJKoZIhvcNAQELBQADggEBAIgumYzq
s9nORIkx1M0ZNISS6MHEpmN3Ght3bFHt1gczOUYDTU7Zr7zaYFL4mfs0gI1f+UXh
At+8hLKFA7vwloQJLpe2EHPP3xl/KfR8RNFlLtVym2jUxCg5arJPjUSbzu9WK2g2
sIq/BCQ1hg/J20Z4ncu4QqgjsOC+UNiHm1EbGN3+WDcvuq9LEeJwc3gHn50VEctc
JK67oE/gkuGBIOCIxnQjxt7B17LxBmqSLZVWwKWYg6sM+tWFoRZHWeDcnOa3kD5y
o/eN3XnOnKI1pL9Yp0ekyGC8kc33MHccA8ttzmloPqIkogtM0KeV9Ge/ebW/3xar
l5m8ODIvHwx6bbg=
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:15 2024 by rpki-client on console-ams.rpki-client.org