Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/QSHBXBEtdHh_hZzNZohVQHo1f78.roa
File: QSHBXBEtdHh_hZzNZohVQHo1f78.roa (raw, json)
Hash identifier: zAl4aJOO/KrMqhwFtMKVajtrYqpr63N/kX1gWpzstSA=
Subject key identifier: 41:21:C1:5C:11:2D:74:78:7F:85:9C:CD:66:88:55:40:7A:35:7F:BF
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 01912EA53569304FCFB5610FF091E750EF9C
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/QSHBXBEtdHh_hZzNZohVQHo1f78.roa
Signing time: Wed 07 Aug 2024 21:01:04 +0000
ROA not before: Wed 07 Aug 2024 21:01:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214411
IP address blocks: 193.178.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 04:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2e:a5:35:69:30:4f:cf:b5:61:0f:f0:91:e7:50:ef:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Aug 7 21:01:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4121c15c112d74787f859ccd668855407a357fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:14:2e:f0:62:b8:cf:a7:7b:3e:03:01:48:
72:b9:90:95:b6:8d:9d:7a:58:3b:58:cb:9a:b8:7b:
3c:8e:4d:26:fe:d7:83:42:4b:22:89:90:5a:9e:3c:
d8:ac:af:61:c6:d8:95:0e:8d:3b:45:b8:16:60:ef:
cc:7f:fc:10:3e:e1:9b:29:bc:20:3c:56:80:03:b2:
92:80:5f:e1:4d:86:4f:d3:5e:79:a9:93:1e:de:ff:
ee:d6:14:28:dd:96:8d:cc:fd:bf:c3:d2:ac:05:18:
48:20:53:fa:f3:8d:1e:2e:f9:85:b0:bf:2e:c5:21:
09:01:b8:ce:80:a2:46:1a:02:56:8f:25:db:62:51:
63:cd:34:72:2a:23:57:90:be:8a:ea:96:5d:03:7a:
89:03:d1:1a:00:8c:70:79:29:b0:bf:80:09:db:89:
44:a3:17:a3:43:7b:a6:2a:32:7c:67:47:59:93:f4:
a8:6c:4c:f6:5c:78:90:e6:66:f1:cb:0b:9d:65:77:
1b:90:82:c0:89:75:61:93:6d:7b:a9:27:c8:0f:c7:
45:fd:38:25:9d:67:b0:32:12:61:25:a2:50:05:c3:
87:d5:6c:75:01:0f:97:12:7d:f8:b0:7a:8d:c3:47:
03:f4:b7:76:be:38:f7:c0:8e:16:f6:1e:8d:dd:54:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:21:C1:5C:11:2D:74:78:7F:85:9C:CD:66:88:55:40:7A:35:7F:BF
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/QSHBXBEtdHh_hZzNZohVQHo1f78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.226.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:60:5c:55:c7:64:2b:49:92:00:cd:c1:c6:e6:69:a4:d6:ab:
31:3c:8d:7f:80:a1:ad:2f:fe:a6:30:05:2d:1f:11:e2:03:de:
d7:d0:fe:a8:ae:e2:cf:db:61:db:a2:97:1e:4e:b1:83:fb:f4:
8c:e1:23:e4:9a:2d:c7:37:0f:ba:d5:c5:ba:0c:ab:15:30:d3:
f2:43:d4:b9:6b:99:51:8b:14:cc:86:ac:e3:00:c3:9a:c4:50:
ca:26:85:f7:4d:e4:82:fc:a4:81:ee:d9:fd:1a:ce:ea:01:4b:
1a:8a:63:a2:64:37:93:7a:c0:6d:18:62:75:4d:f5:0b:18:c5:
2d:30:06:12:85:6f:df:66:d4:ef:7a:6c:b6:3b:2c:91:0b:ae:
a4:18:72:90:c1:12:80:2b:2f:0e:bd:7e:d0:72:4f:21:9d:b9:
a3:6d:6a:58:36:46:18:33:42:7f:d1:d7:c1:a0:1c:df:81:67:
c5:07:63:c9:61:0e:89:a3:4c:08:f9:74:5c:db:5b:af:4d:78:
1d:48:07:7c:14:f6:c7:19:43:50:f7:fb:18:3d:bb:c1:ab:d4:
1b:9f:0d:b0:91:a9:9d:d7:b4:95:4d:56:d0:f2:07:3f:cb:2b:
ca:ae:2c:00:62:19:89:bf:c8:91:e5:86:60:f7:5c:1a:ac:b6:
77:5e:55:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEupTVpME/PtWEP8JHnUO+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzQ4N2RhNjVlODVlODdiZGFjNGY1ZjY3NThkYzZjMjBl
Zjk3NjMwHhcNMjQwODA3MjEwMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTIxYzE1YzExMmQ3NDc4N2Y4NTljY2Q2Njg4NTU0MDdhMzU3ZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiUULvBiuM+nez4DAUhyuZCVto2d
elg7WMuauHs8jk0m/teDQksiiZBanjzYrK9hxtiVDo07RbgWYO/Mf/wQPuGbKbwg
PFaAA7KSgF/hTYZP0155qZMe3v/u1hQo3ZaNzP2/w9KsBRhIIFP6840eLvmFsL8u
xSEJAbjOgKJGGgJWjyXbYlFjzTRyKiNXkL6K6pZdA3qJA9EaAIxweSmwv4AJ24lE
oxejQ3umKjJ8Z0dZk/SobEz2XHiQ5mbxywudZXcbkILAiXVhk217qSfID8dF/Tgl
nWewMhJhJaJQBcOH1Wx1AQ+XEn34sHqNw0cD9Ld2vjj3wI4W9h6N3VRLowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEEhwVwRLXR4f4WczWaIVUB6NX+/MB8GA1UdIwQY
MBaAFC40h9pl6F6HvaxPX2dY3Gwg75djMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAt
ZDBhZWNkNWQ3MDQyLzEvUVNIQlhCRXRkSGhfaFp6TlpvaFZRSG8xZjc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAtZDBhZWNkNWQ3MDQy
LzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbLiMA0G
CSqGSIb3DQEBCwUAA4IBAQCxYFxVx2QrSZIAzcHG5mmk1qsxPI1/gKGtL/6mMAUt
HxHiA97X0P6oruLP22HbopceTrGD+/SM4SPkmi3HNw+61cW6DKsVMNPyQ9S5a5lR
ixTMhqzjAMOaxFDKJoX3TeSC/KSB7tn9Gs7qAUsaimOiZDeTesBtGGJ1TfULGMUt
MAYShW/fZtTvemy2OyyRC66kGHKQwRKAKy8OvX7Qck8hnbmjbWpYNkYYM0J/0dfB
oBzfgWfFB2PJYQ6Jo0wI+XRc21uvTXgdSAd8FPbHGUNQ9/sYPbvBq9Qbnw2wkamd
17SVTVbQ8gc/yyvKriwAYhmJv8iR5YZg91warLZ3XlXd
-----END CERTIFICATE-----
Generated at Mon Sep 9 06:31:21 2024 by rpki-client on console-ams.rpki-client.org