Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ql_AHpBaxg7082b_xQ394Ar3s5o.roa
File: ql_AHpBaxg7082b_xQ394Ar3s5o.roa (raw, json)
Hash identifier: xnfzrCtUiJjuXm9mb79Op+PUx6W9ZBc1F0yQ+1Kx+PY=
Subject key identifier: AA:5F:C0:1E:90:5A:C6:0E:F4:F3:66:FF:C5:0D:FD:E0:0A:F7:B3:9A
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CB0D24637E2DF6B46ED2E46982FC729AD
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ql_AHpBaxg7082b_xQ394Ar3s5o.roa
Signing time: Thu 28 Dec 2023 14:26:59 +0000
ROA not before: Thu 28 Dec 2023 14:26:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48113
IP address blocks: 87.110.240.0/21 maxlen: 24
195.13.219.0/24 maxlen: 24
87.110.228.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:d2:46:37:e2:df:6b:46:ed:2e:46:98:2f:c7:29:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Dec 28 14:26:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa5fc01e905ac60ef4f366ffc50dfde00af7b39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:3e:98:71:4f:c0:dc:7f:ab:8e:f2:9d:ca:
3c:a5:53:a7:f7:67:8e:7e:fe:8d:5e:c3:b9:0f:f5:
99:7b:74:39:05:07:41:6b:2d:07:1e:0e:9d:0f:ca:
c8:79:10:12:ed:b4:f9:39:70:67:f7:6f:d1:07:47:
c7:65:48:50:20:51:34:d3:8a:6d:49:ab:7d:c9:5a:
91:b9:8b:72:76:2f:0d:05:e8:1f:c5:fc:bf:3c:ae:
81:25:21:fc:ae:77:eb:d6:28:c7:a3:33:a5:f5:11:
86:95:06:0b:2e:98:25:93:b4:54:48:bb:bb:e2:77:
db:a3:79:fe:64:b8:3f:03:e4:b9:d4:08:58:56:16:
e7:40:f6:1f:1f:05:70:4d:76:50:7e:d8:21:c6:6a:
c1:df:43:68:33:94:87:7d:a8:cf:c2:a7:62:87:f3:
eb:6b:e3:dd:d1:5b:db:94:80:11:8c:d0:5b:a5:e7:
a2:54:a2:47:03:76:a9:cf:a4:5c:be:11:26:0b:04:
e4:ea:0b:a3:57:3a:4f:b9:53:30:fb:2e:9e:5f:de:
a7:8d:15:26:c3:5c:31:7b:44:b1:09:84:f8:27:65:
63:46:d6:59:96:7d:40:7f:95:53:50:e9:e5:b2:77:
72:27:d8:c8:e2:53:d0:b8:d3:80:95:50:81:b6:2d:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5F:C0:1E:90:5A:C6:0E:F4:F3:66:FF:C5:0D:FD:E0:0A:F7:B3:9A
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ql_AHpBaxg7082b_xQ394Ar3s5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.110.228.0/22
87.110.240.0/21
195.13.219.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:89:42:52:17:be:b0:da:65:c0:c8:02:1a:4d:9d:c7:c4:ea:
56:bd:e9:f0:d5:8a:d7:a6:57:b6:c4:9f:0c:f4:15:4f:37:78:
7f:77:53:a1:4d:a6:53:c8:25:75:f4:29:c5:3c:7f:a4:fa:30:
47:29:04:25:5a:a5:a1:55:e9:42:be:75:dd:94:eb:86:df:ae:
6a:e8:37:10:a2:20:11:ed:3f:c6:ee:b1:bf:8b:82:98:7f:59:
b7:ea:ec:39:1b:be:03:fe:59:ac:26:80:06:63:b2:3d:8d:6c:
52:c0:44:be:08:50:b3:95:d4:16:53:ee:50:3e:8c:f6:ad:69:
47:8d:cf:c0:e7:16:c0:b5:f5:ca:7d:a0:f0:ba:2b:6d:67:39:
36:01:7b:c3:8d:0b:d8:44:11:81:d4:fe:00:de:dc:0c:6b:06:
e7:9d:ee:0a:ca:13:b0:80:19:42:a8:7e:42:12:e4:20:c6:25:
a6:1d:86:c2:13:e6:8c:18:d3:90:3d:65:f0:0f:04:dd:c6:c8:
0e:3e:01:a6:e6:c8:bd:7b:43:b4:ca:52:fe:b8:bd:fe:22:a2:
40:d5:7d:ac:e7:04:66:7a:1e:db:89:19:54:a5:21:6f:ca:b7:
18:f4:7e:ea:8a:28:43:ab:18:c8:74:08:f3:67:7c:57:48:a4:
87:62:68:73
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYyw0kY34t9rRu0uRpgvxymtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjMxMjI4MTQyNjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTVmYzAxZTkwNWFjNjBlZjRmMzY2ZmZjNTBkZmRlMDBhZjdiMzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaM+mHFPwNx/q47ynco8pVOn92eO
fv6NXsO5D/WZe3Q5BQdBay0HHg6dD8rIeRAS7bT5OXBn92/RB0fHZUhQIFE004pt
Sat9yVqRuYtydi8NBegfxfy/PK6BJSH8rnfr1ijHozOl9RGGlQYLLpglk7RUSLu7
4nfbo3n+ZLg/A+S51AhYVhbnQPYfHwVwTXZQftghxmrB30NoM5SHfajPwqdih/Pr
a+Pd0VvblIARjNBbpeeiVKJHA3apz6RcvhEmCwTk6gujVzpPuVMw+y6eX96njRUm
w1wxe0SxCYT4J2VjRtZZln1Af5VTUOnlsndyJ9jI4lPQuNOAlVCBti0SHQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKpfwB6QWsYO9PNm/8UN/eAK97OaMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvcWxfQUhwQmF4ZzcwODJiX3hRMzk0QXIzczVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCV27kAwQD
V27wAwQAww3bMA0GCSqGSIb3DQEBCwUAA4IBAQA8iUJSF76w2mXAyAIaTZ3HxOpW
venw1YrXple2xJ8M9BVPN3h/d1OhTaZTyCV19CnFPH+k+jBHKQQlWqWhVelCvnXd
lOuG365q6DcQoiAR7T/G7rG/i4KYf1m36uw5G74D/lmsJoAGY7I9jWxSwES+CFCz
ldQWU+5QPoz2rWlHjc/A5xbAtfXKfaDwuittZzk2AXvDjQvYRBGB1P4A3twMawbn
ne4KyhOwgBlCqH5CEuQgxiWmHYbCE+aMGNOQPWXwDwTdxsgOPgGm5si9e0O0ylL+
uL3+IqJA1X2s5wRmeh7biRlUpSFvyrcY9H7qiihDqxjIdAjzZ3xXSKSHYmhz
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:24 2024 by rpki-client on console-fra.rpki-client.org