Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QYAwt4fCSKorUpL2cZF5zlZ8EzA.roa
File: QYAwt4fCSKorUpL2cZF5zlZ8EzA.roa (raw, json)
Hash identifier: AeYtVOEpK03WEqa91vCOLgq8qyMv0ZVAlkDOhudLa04=
Subject key identifier: 41:80:30:B7:87:C2:48:AA:2B:52:92:F6:71:91:79:CE:56:7C:13:30
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019344D108B157B71E474CF5D5102B7EE862
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QYAwt4fCSKorUpL2cZF5zlZ8EzA.roa
Signing time: Tue 19 Nov 2024 14:26:10 +0000
ROA not before: Tue 19 Nov 2024 14:26:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4648
IP address blocks: 89.35.159.0/24 maxlen: 24
89.44.207.0/24 maxlen: 24
103.212.80.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:d1:08:b1:57:b7:1e:47:4c:f5:d5:10:2b:7e:e8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 19 14:26:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=418030b787c248aa2b5292f6719179ce567c1330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:02:04:26:c9:d7:48:7e:f0:ed:28:1b:05:
d2:3e:36:46:4c:23:6c:c8:e6:df:25:2f:bc:73:58:
88:ba:98:52:90:82:e5:42:33:d7:43:cc:39:8b:e4:
b3:5b:8e:7c:36:63:40:98:d1:38:bb:fa:3f:1e:94:
c9:ad:c5:7b:bd:64:d8:2d:72:06:b1:c5:3d:4e:69:
79:ae:2e:ce:3c:fd:33:e5:e6:66:bf:a3:cf:73:e2:
9a:dd:74:f2:99:cc:c9:8e:0a:e2:d5:0c:3b:32:38:
57:dc:55:7e:7e:c4:80:26:ce:4a:e4:d3:67:73:5c:
8f:f9:c2:a1:1d:7a:4b:a3:2e:eb:9e:d7:f7:21:d8:
d1:16:d8:b8:31:84:74:db:e3:35:15:bd:f3:86:5e:
78:85:5f:8c:ed:e7:91:48:53:ff:01:0a:ef:dc:ab:
e4:29:6f:15:29:72:f3:84:20:32:18:2a:97:ee:69:
79:85:39:4a:0b:f9:9b:09:fd:1d:68:66:b1:c9:02:
b8:a0:e8:8e:92:e3:e7:8a:e4:fb:ab:1b:c1:c1:4b:
cf:14:13:18:52:a5:5e:d5:e2:ce:68:c9:95:76:c0:
98:04:62:3c:33:cc:c0:96:45:31:6c:12:0e:65:ac:
56:e9:60:a5:87:29:6b:11:c5:46:1d:a4:5f:31:d9:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:80:30:B7:87:C2:48:AA:2B:52:92:F6:71:91:79:CE:56:7C:13:30
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QYAwt4fCSKorUpL2cZF5zlZ8EzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.159.0/24
89.44.207.0/24
103.212.80.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:76:93:42:89:e5:23:46:b9:8c:c9:26:95:48:58:05:d6:fd:
fc:86:67:7c:a9:9e:08:1f:c7:7d:48:b5:e7:8d:b2:5c:6f:e9:
3c:42:2b:a9:a7:1c:78:6d:9d:2e:58:1b:cf:6c:4c:f0:93:45:
53:a8:dc:19:e0:74:35:d4:fd:57:2b:77:23:38:9b:4d:63:c8:
4c:da:22:7e:fc:ae:51:50:8d:19:e8:c2:f6:f5:e4:bd:0e:59:
70:e2:73:1d:12:6f:1d:22:71:14:70:e2:4d:f4:3b:48:60:e9:
14:a5:03:8f:b2:71:ff:ee:b2:f7:46:67:9a:cf:8b:71:d6:b0:
cb:52:e9:93:09:cc:5d:36:2b:86:f8:46:c2:d8:39:96:6f:4c:
99:94:3d:07:93:be:cf:be:2b:b0:02:5e:a3:ef:27:38:5d:f6:
44:1b:c8:a2:0c:05:26:b4:5e:3d:a9:a8:dd:72:ad:c5:8b:09:
8c:75:23:a9:67:9e:70:44:6e:d2:25:2e:76:b8:8d:96:b8:df:
7c:41:ec:56:3c:7c:39:6b:63:91:b8:22:33:3d:50:c4:cf:de:
87:ad:cb:a9:59:b9:02:a5:2e:35:6b:ae:11:9d:5e:44:ec:f6:
e6:f0:aa:82:e4:eb:5c:b7:87:31:42:14:1e:3e:e0:86:ac:75:
97:2e:d0:87
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZNE0QixV7ceR0z11RArfuhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQxMTE5MTQyNjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTgwMzBiNzg3YzI0OGFhMmI1MjkyZjY3MTkxNzljZTU2N2MxMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGMCBCbJ10h+8O0oGwXSPjZGTCNs
yObfJS+8c1iIuphSkILlQjPXQ8w5i+SzW458NmNAmNE4u/o/HpTJrcV7vWTYLXIG
scU9Tml5ri7OPP0z5eZmv6PPc+Ka3XTymczJjgri1Qw7MjhX3FV+fsSAJs5K5NNn
c1yP+cKhHXpLoy7rntf3IdjRFti4MYR02+M1Fb3zhl54hV+M7eeRSFP/AQrv3Kvk
KW8VKXLzhCAyGCqX7ml5hTlKC/mbCf0daGaxyQK4oOiOkuPniuT7qxvBwUvPFBMY
UqVe1eLOaMmVdsCYBGI8M8zAlkUxbBIOZaxW6WClhylrEcVGHaRfMdn8UwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEGAMLeHwkiqK1KS9nGRec5WfBMwMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvUVlBd3Q0ZkNTS29yVXBMMmNaRjV6bFo4RXpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSOfAwQA
WSzPAwQBZ9RQMA0GCSqGSIb3DQEBCwUAA4IBAQCMdpNCieUjRrmMySaVSFgF1v38
hmd8qZ4IH8d9SLXnjbJcb+k8Qiuppxx4bZ0uWBvPbEzwk0VTqNwZ4HQ11P1XK3cj
OJtNY8hM2iJ+/K5RUI0Z6ML29eS9Dllw4nMdEm8dInEUcOJN9DtIYOkUpQOPsnH/
7rL3Rmeaz4tx1rDLUumTCcxdNiuG+EbC2DmWb0yZlD0Hk77PviuwAl6j7yc4XfZE
G8iiDAUmtF49qajdcq3FiwmMdSOpZ55wRG7SJS52uI2WuN98QexWPHw5a2ORuCIz
PVDEz96HrcupWbkCpS41a64RnV5E7Pbm8KqC5Otct4cxQhQePuCGrHWXLtCH
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:40 2025 by rpki-client