Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qrw44LHEKR4CFK-MZMkLUCsP0pc.roa
File: qrw44LHEKR4CFK-MZMkLUCsP0pc.roa (raw, json)
Hash identifier: BHkteBUA7RtSoMaT1PgSk1BFI7D7O81KsTElu+Gkg2s=
Subject key identifier: AA:BC:38:E0:B1:C4:29:1E:02:14:AF:8C:64:C9:0B:50:2B:0F:D2:97
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186AD98883F4D532F2E25D6D328025BEB02
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qrw44LHEKR4CFK-MZMkLUCsP0pc.roa
Signing time: Sat 04 Mar 2023 17:08:20 +0000
ROA not before: Sat 04 Mar 2023 17:08:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.115.147.0/24 maxlen: 24
45.130.201.0/24 maxlen: 24
77.75.61.0/24 maxlen: 24
185.244.138.0/24 maxlen: 24
45.159.155.0/24 maxlen: 24
223.27.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ad:98:88:3f:4d:53:2f:2e:25:d6:d3:28:02:5b:eb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 4 17:08:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aabc38e0b1c4291e0214af8c64c90b502b0fd297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:38:07:ca:ac:c1:6c:3b:bc:30:a1:6e:72:2e:
e4:4e:bb:82:c9:85:05:e7:b2:22:c7:90:00:53:40:
66:54:91:9d:5a:14:55:fc:07:4c:45:7c:11:99:93:
bf:71:f8:1e:44:7b:7d:59:db:b4:3a:30:46:d3:5a:
9a:90:38:19:00:d4:eb:7f:b4:ba:66:13:f6:e2:5b:
2a:47:88:99:4c:10:94:bb:51:33:1a:79:cc:eb:02:
ac:9a:ea:dd:38:68:f1:c2:4f:e5:c4:16:dd:64:65:
12:ab:6e:f9:d8:f1:5c:54:3b:5b:6d:bf:89:35:2d:
b6:73:5b:0f:c1:81:f8:84:7c:79:b8:03:de:25:c6:
53:27:3e:e6:f8:e6:ac:d0:b1:71:c8:29:d2:01:fd:
84:16:a6:50:96:80:55:70:38:ab:69:80:ed:29:4e:
1a:1d:cb:67:06:87:c1:71:97:1a:26:ea:0e:1c:46:
3d:30:a8:34:69:30:17:d1:42:a6:d4:51:5e:15:3d:
55:e4:3e:27:5d:7b:ee:82:66:88:3a:fa:ac:d4:98:
f3:61:a2:86:f1:85:e2:95:d5:f4:0e:70:2b:a3:81:
62:d3:7e:d3:93:31:0c:1d:84:25:97:86:57:ea:e3:
35:31:35:44:a1:2a:1f:8a:79:e9:84:b1:41:ef:78:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BC:38:E0:B1:C4:29:1E:02:14:AF:8C:64:C9:0B:50:2B:0F:D2:97
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qrw44LHEKR4CFK-MZMkLUCsP0pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.201.0/24
45.159.155.0/24
77.75.61.0/24
185.115.147.0/24
185.244.138.0/24
223.27.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:b6:7b:4d:3d:fc:04:29:5c:d3:73:73:e4:63:08:3c:a5:89:
33:69:db:80:5f:2a:6e:51:20:eb:38:2f:35:77:4b:a4:4a:22:
45:c9:09:46:c0:32:8e:94:6c:85:7c:9d:c0:6d:59:66:5c:1a:
c3:42:b2:cf:04:ed:be:b4:38:41:6d:68:3a:f0:8e:d5:6c:21:
ca:88:43:76:cd:e4:6b:b7:1a:49:75:9d:4d:2e:98:a2:db:a0:
4d:42:46:46:b3:bc:eb:14:cf:3e:46:9e:51:03:94:aa:17:35:
fd:e3:1b:e7:f4:1f:0e:39:1a:8e:ca:5b:3f:06:32:ec:bc:15:
dd:40:70:21:33:9e:04:e4:a9:f1:df:ec:e5:a4:a4:a9:48:0e:
bd:a3:12:30:a1:c8:b7:57:ee:9c:9e:75:03:47:76:23:93:ee:
5c:c2:7e:68:70:2c:36:42:d0:96:02:0a:c4:3c:87:09:35:b5:
b5:e0:33:9d:c3:ab:06:36:6c:bf:85:11:2c:17:99:2b:66:b2:
4c:9c:b3:46:e9:ec:2f:74:ba:74:2b:3e:ef:3d:07:78:15:5a:
bf:f4:7e:05:fe:3e:e8:56:3f:47:28:ad:b3:6a:0d:75:51:35:
7e:c5:31:0c:9e:12:3a:3b:9c:b8:8f:b7:32:f2:8e:9c:a5:20:
0d:c2:2c:46
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYatmIg/TVMvLiXW0ygCW+sCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMzA0MTcwODIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWJjMzhlMGIxYzQyOTFlMDIxNGFmOGM2NGM5MGI1MDJiMGZkMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjgHyqzBbDu8MKFuci7kTruCyYUF
57Iix5AAU0BmVJGdWhRV/AdMRXwRmZO/cfgeRHt9Wdu0OjBG01qakDgZANTrf7S6
ZhP24lsqR4iZTBCUu1EzGnnM6wKsmurdOGjxwk/lxBbdZGUSq2752PFcVDtbbb+J
NS22c1sPwYH4hHx5uAPeJcZTJz7m+Oas0LFxyCnSAf2EFqZQloBVcDiraYDtKU4a
HctnBofBcZcaJuoOHEY9MKg0aTAX0UKm1FFeFT1V5D4nXXvugmaIOvqs1JjzYaKG
8YXildX0DnAro4Fi037TkzEMHYQll4ZX6uM1MTVEoSofinnphLFB73g18wIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFKq8OOCxxCkeAhSvjGTJC1ArD9KXMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvcXJ3NDRMSEVLUjRDRkstTVpNa0xVQ3NQMHBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALYLJAwQA
LZ+bAwQATUs9AwQAuXOTAwQAufSKAwQA3xtwMA0GCSqGSIb3DQEBCwUAA4IBAQBe
tntNPfwEKVzTc3PkYwg8pYkzaduAXypuUSDrOC81d0ukSiJFyQlGwDKOlGyFfJ3A
bVlmXBrDQrLPBO2+tDhBbWg68I7VbCHKiEN2zeRrtxpJdZ1NLpii26BNQkZGs7zr
FM8+Rp5RA5SqFzX94xvn9B8OORqOyls/BjLsvBXdQHAhM54E5Knx3+zlpKSpSA69
oxIwoci3V+6cnnUDR3Yjk+5cwn5ocCw2QtCWAgrEPIcJNbW14DOdw6sGNmy/hREs
F5krZrJMnLNG6ewvdLp0Kz7vPQd4FVq/9H4F/j7oVj9HKK2zag11UTV+xTEMnhI6
O5y4j7cy8o6cpSANwixG
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org