Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/qSlura_mWvmTgGlXaPizwAjll5k.roa
File: qSlura_mWvmTgGlXaPizwAjll5k.roa (raw, json)
Hash identifier: A722CWBcaD0jYRFq5ohqUexhP2Sa7lXFrLYPoFH7+Sg=
Subject key identifier: A9:29:6E:AD:AF:E6:5A:F9:93:80:69:57:68:F8:B3:C0:08:E5:97:99
Certificate issuer: /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial: 018B2F8A9EDB972E6F0955AE856F2F8E344B
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/qSlura_mWvmTgGlXaPizwAjll5k.roa
Signing time: Sat 14 Oct 2023 18:54:55 +0000
ROA not before: Sat 14 Oct 2023 18:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39020
IP address blocks: 93.93.70.0/24 maxlen: 24
93.93.68.0/24 maxlen: 24
93.93.69.0/24 maxlen: 24
93.93.66.0/24 maxlen: 24
93.93.67.0/24 maxlen: 24
93.93.65.0/24 maxlen: 24
93.93.71.0/24 maxlen: 24
93.113.162.0/24 maxlen: 24
93.113.163.0/24 maxlen: 24
93.113.160.0/24 maxlen: 24
93.113.161.0/24 maxlen: 24
93.93.64.0/24 maxlen: 24
5.145.174.0/24 maxlen: 24
5.145.175.0/24 maxlen: 24
5.145.173.0/24 maxlen: 24
217.61.131.0/24 maxlen: 24
217.61.129.0/24 maxlen: 24
217.61.130.0/24 maxlen: 24
217.61.128.0/24 maxlen: 24
217.61.139.0/24 maxlen: 24
217.61.137.0/24 maxlen: 24
217.61.138.0/24 maxlen: 24
217.61.136.0/24 maxlen: 24
217.61.134.0/24 maxlen: 24
217.61.135.0/24 maxlen: 24
217.61.133.0/24 maxlen: 24
217.61.140.0/24 maxlen: 24
217.61.143.0/24 maxlen: 24
217.61.141.0/24 maxlen: 24
217.61.142.0/24 maxlen: 24
195.78.231.0/24 maxlen: 24
195.78.229.0/24 maxlen: 24
195.78.230.0/24 maxlen: 24
195.78.228.0/24 maxlen: 24
185.50.198.0/24 maxlen: 24
185.50.199.0/24 maxlen: 24
185.50.196.0/24 maxlen: 24
185.50.196.0/22 maxlen: 22
185.50.197.0/24 maxlen: 24
77.81.119.0/24 maxlen: 24
5.145.172.0/24 maxlen: 24
5.145.170.0/24 maxlen: 24
5.145.171.0/24 maxlen: 24
5.145.169.0/24 maxlen: 24
5.145.168.0/24 maxlen: 24
91.192.110.0/24 maxlen: 24
91.192.111.0/24 maxlen: 24
91.192.108.0/24 maxlen: 24
91.192.109.0/24 maxlen: 24
77.81.112.0/24 maxlen: 24
77.81.118.0/24 maxlen: 24
77.81.117.0/24 maxlen: 24
77.81.115.0/24 maxlen: 24
77.81.116.0/24 maxlen: 24
77.81.113.0/24 maxlen: 24
77.81.114.0/24 maxlen: 24
2a00:1d70:1ac1::/48 maxlen: 48
2a00:1d70::/33 maxlen: 33
2a00:1d70:8000::/33 maxlen: 33
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2f:8a:9e:db:97:2e:6f:09:55:ae:85:6f:2f:8e:34:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
Validity
Not Before: Oct 14 18:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9296eadafe65af99380695768f8b3c008e59799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a9:48:69:e3:26:8e:6d:ad:df:45:12:b1:51:
f4:de:af:c9:3c:e1:6b:3e:a3:59:bf:dd:42:ff:8f:
73:e1:b6:b9:de:d2:a7:1f:a8:d8:56:ba:d2:4e:4c:
b7:f8:70:e7:31:06:97:7b:6e:ef:a3:ea:64:88:52:
0a:c6:3c:43:19:d0:f6:df:47:83:f3:d3:1e:21:04:
0e:0a:aa:9a:64:dd:f6:ab:53:25:11:13:f2:e5:5f:
28:3f:38:c4:0c:b4:c2:29:85:6b:72:07:d0:ee:c2:
e2:c6:7d:6d:1a:46:39:d6:b7:50:1a:c2:ea:4a:6c:
6e:d8:93:cc:15:c6:4f:ed:a8:eb:c6:b7:3e:6f:b3:
10:71:c3:86:c2:3f:c6:a2:f7:d5:0c:f0:be:3a:32:
4d:93:49:e2:61:ec:90:52:54:0a:70:47:33:80:14:
37:d0:c3:fa:90:66:3d:72:55:53:b4:c7:2a:04:f9:
04:87:07:7f:32:d5:2d:d3:bf:0b:2a:e1:33:f7:96:
7d:cf:d9:b6:22:5b:cc:8d:85:38:da:e8:d3:f1:94:
cb:5a:04:6f:29:de:a1:69:33:4f:e4:01:98:44:b7:
db:68:22:08:e3:a1:2b:63:0b:7d:e7:67:3b:11:b6:
09:6f:f3:37:23:68:45:5d:45:e6:b1:ce:5f:19:b7:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:29:6E:AD:AF:E6:5A:F9:93:80:69:57:68:F8:B3:C0:08:E5:97:99
X509v3 Authority Key Identifier:
keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/qSlura_mWvmTgGlXaPizwAjll5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.168.0/21
77.81.112.0/21
91.192.108.0/22
93.93.64.0/21
93.113.160.0/22
185.50.196.0/22
195.78.228.0/22
217.61.128.0/22
217.61.133.0-217.61.143.255
IPv6:
2a00:1d70::/32
Signature Algorithm: sha256WithRSAEncryption
71:3d:62:be:79:99:0e:a0:32:c3:e7:19:e0:0e:0f:69:cf:94:
cc:3b:d6:cb:90:ad:b0:0e:b1:c7:dc:91:96:ab:a2:ac:a6:50:
eb:fa:82:75:a2:45:e0:50:0b:7c:d1:3c:1d:cb:1b:47:db:fd:
90:df:b8:05:74:05:f8:93:a4:bf:12:30:8a:73:10:ac:4e:5c:
b1:98:15:5c:72:e9:79:bd:b0:b2:b3:e0:dc:80:59:a8:e9:52:
9e:3f:8f:5a:2a:76:e9:a7:89:28:7a:0c:b9:14:d0:a2:77:84:
e7:92:aa:5e:21:b0:e1:56:ab:7d:34:ef:5e:e3:97:54:02:24:
ec:9f:f8:09:30:c7:e2:81:cf:70:e4:05:cb:d1:9a:24:72:3c:
05:1f:d1:54:84:46:d0:8a:46:e7:f3:d4:27:62:66:f3:76:92:
9b:74:50:49:88:c6:50:e8:69:b3:cc:94:69:a2:52:8d:06:c1:
22:8c:3b:70:5f:2d:27:fe:2c:09:d4:b4:9c:3d:9b:41:16:86:
69:b8:02:b5:3a:f6:bf:8d:aa:39:c7:9a:98:09:ec:78:db:25:
4a:f0:af:05:66:a4:9a:7f:c8:68:7e:31:65:9f:3e:6b:b1:55:
e3:f1:d3:a0:80:ea:bd:40:88:6d:b7:e7:30:16:8e:d5:8d:8e:
f6:29:69:bb
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAYsvip7bly5vCVWuhW8vjjRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OGZhNDIwMTM0NGQ0MTA3Zjc5MmVlZTI1NjZjNjJkNjU3
MTRlMmQwHhcNMjMxMDE0MTg1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTI5NmVhZGFmZTY1YWY5OTM4MDY5NTc2OGY4YjNjMDA4ZTU5Nzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhalIaeMmjm2t30USsVH03q/JPOFr
PqNZv91C/49z4ba53tKnH6jYVrrSTky3+HDnMQaXe27vo+pkiFIKxjxDGdD230eD
89MeIQQOCqqaZN32q1MlERPy5V8oPzjEDLTCKYVrcgfQ7sLixn1tGkY51rdQGsLq
Smxu2JPMFcZP7ajrxrc+b7MQccOGwj/GovfVDPC+OjJNk0niYeyQUlQKcEczgBQ3
0MP6kGY9clVTtMcqBPkEhwd/MtUt078LKuEz95Z9z9m2IlvMjYU42ujT8ZTLWgRv
Kd6haTNP5AGYRLfbaCII46ErYwt952c7EbYJb/M3I2hFXUXmsc5fGbfj4QIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFKkpbq2v5lr5k4BpV2j4s8AI5ZeZMB8GA1UdIwQY
MBaAFFmPpCATRNQQf3ku7iVmxi1lcU4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2It
NjY0YjhmMDNkMTgwLzEvcVNsdXJhX21Xdm1UZ0dsWGFQaXp3QWpsbDVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2ItNjY0YjhmMDNkMTgw
LzEvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBEBAIAATA+AwQDBZGoAwQD
TVFwAwQCW8BsAwQDXV1AAwQCXXGgAwQCuTLEAwQCw07kAwQC2T2AMAwDBADZPYUD
BATZPYAwDQQCAAIwBwMFACoAHXAwDQYJKoZIhvcNAQELBQADggEBAHE9Yr55mQ6g
MsPnGeAOD2nPlMw71suQrbAOscfckZaroqymUOv6gnWiReBQC3zRPB3LG0fb/ZDf
uAV0BfiTpL8SMIpzEKxOXLGYFVxy6Xm9sLKz4NyAWajpUp4/j1oqdumniSh6DLkU
0KJ3hOeSql4hsOFWq300717jl1QCJOyf+Akwx+KBz3DkBcvRmiRyPAUf0VSERtCK
Rufz1CdiZvN2kpt0UEmIxlDoabPMlGmiUo0GwSKMO3BfLSf+LAnUtJw9m0EWhmm4
ArU69r+NqjnHmpgJ7HjbJUrwrwVmpJp/yGh+MWWfPmuxVePx06CA6r1AiG235zAW
jtWNjvYpabs=
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:58 2024 by rpki-client on console-ams.rpki-client.org