Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/qpHwv3zMYKW2deUP4gF-ixWUx7w.roa
File: qpHwv3zMYKW2deUP4gF-ixWUx7w.roa (raw, json)
Hash identifier: 9NEkWq2ZR3TlzJwye3Y++M1U+CCQpcicrrWOFlEFjxs=
Subject key identifier: AA:91:F0:BF:7C:CC:60:A5:B6:75:E5:0F:E2:01:7E:8B:15:94:C7:BC
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 018634ECA025D70E45711C0981B05F8146DC
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/qpHwv3zMYKW2deUP4gF-ixWUx7w.roa
Signing time: Thu 09 Feb 2023 06:46:08 +0000
ROA not before: Thu 09 Feb 2023 06:46:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202391
IP address blocks: 31.25.92.0/22 maxlen: 22
31.25.95.0/24 maxlen: 24
185.49.104.0/22 maxlen: 24
185.118.12.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:34:ec:a0:25:d7:0e:45:71:1c:09:81:b0:5f:81:46:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Feb 9 06:46:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa91f0bf7ccc60a5b675e50fe2017e8b1594c7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:76:c2:da:5a:b0:84:ff:0e:e4:f9:c7:db:
50:4a:ee:23:24:e0:fe:82:14:75:63:04:98:95:d5:
ea:52:1e:90:7a:eb:f4:d9:4c:14:24:af:6f:61:28:
87:87:92:6a:5e:de:fd:f1:04:23:cd:90:eb:50:89:
c0:71:e6:f4:a2:a4:2c:f4:f6:6a:91:89:a6:7a:17:
cd:7b:93:93:8d:c0:eb:ec:45:c3:a3:e3:2b:93:39:
32:0b:8f:f3:11:60:e4:fe:d7:ca:6c:6a:5b:ea:f1:
35:f5:e6:92:c6:0a:da:3e:1a:12:b7:01:09:45:bb:
ff:80:e4:19:a3:df:75:48:43:61:40:6e:83:3b:1e:
fd:1c:0c:9a:fa:22:d3:be:b0:2b:f4:79:14:6a:4f:
b0:75:4e:e0:b2:a8:06:c5:d6:6d:85:02:47:ab:85:
a5:be:cf:f4:73:fe:46:43:ee:81:32:4f:a9:86:e8:
c2:94:39:b2:fb:ca:8b:e6:7d:ca:39:bb:bb:e5:9a:
b0:8d:ad:f6:a4:78:c4:d0:6c:b0:19:9b:fd:93:fc:
ff:6c:9b:d2:f3:4c:7a:24:96:21:92:e1:97:5a:cd:
10:c7:ec:60:97:24:17:04:fe:48:70:fb:30:54:fd:
c8:b4:e0:67:6b:ba:b3:86:d1:ad:df:f1:99:6e:d6:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:91:F0:BF:7C:CC:60:A5:B6:75:E5:0F:E2:01:7E:8B:15:94:C7:BC
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/qpHwv3zMYKW2deUP4gF-ixWUx7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.92.0/22
185.49.104.0/22
185.118.12.0/22
Signature Algorithm: sha256WithRSAEncryption
32:24:34:3c:4e:31:fe:cf:d8:4b:24:fa:79:77:97:ef:a5:16:
69:6f:3e:f7:f7:6d:2f:af:ac:51:ed:09:23:17:70:10:ff:15:
d6:ec:98:c8:4f:7d:99:cc:cc:a5:98:22:16:68:8e:18:bf:13:
70:46:3a:29:21:f7:b4:08:8d:fb:ce:b8:a8:a2:9b:aa:f1:c4:
a9:02:65:15:c0:08:1f:9b:37:1d:2d:1b:b5:6a:e6:2b:e4:bb:
1b:7b:63:a6:40:f8:ae:df:1f:44:55:5c:9a:f4:15:c0:40:0d:
4d:44:39:78:ca:03:20:be:d0:63:b9:c9:d8:bf:6c:47:35:6e:
b3:3a:89:93:c0:d9:cb:a5:a4:0f:79:ed:ce:7a:c7:98:92:68:
62:c4:02:cd:75:0a:60:c2:1b:7c:09:02:1a:75:91:99:a9:41:
0a:0e:39:98:10:4b:47:d3:1d:61:f7:86:42:06:5e:af:87:5f:
42:c7:00:dc:62:0c:0e:d2:77:6e:9f:35:f3:ae:ec:de:17:1a:
56:28:5d:07:16:71:c7:49:d5:42:a0:db:0b:88:64:83:5b:b0:
31:be:6f:5b:e4:d8:66:55:4d:43:ea:eb:21:79:93:bf:3e:49:
3f:06:b8:d8:aa:fc:36:92:c6:fd:a4:6b:55:b7:c7:89:7d:8e:
92:e3:b3:ed
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYY07KAl1w5FcRwJgbBfgUbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw
MTljMjQwHhcNMjMwMjA5MDY0NjA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTkxZjBiZjdjY2M2MGE1YjY3NWU1MGZlMjAxN2U4YjE1OTRjN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFd2wtpasIT/DuT5x9tQSu4jJOD+
ghR1YwSYldXqUh6Qeuv02UwUJK9vYSiHh5JqXt798QQjzZDrUInAceb0oqQs9PZq
kYmmehfNe5OTjcDr7EXDo+MrkzkyC4/zEWDk/tfKbGpb6vE19eaSxgraPhoStwEJ
Rbv/gOQZo991SENhQG6DOx79HAya+iLTvrAr9HkUak+wdU7gsqgGxdZthQJHq4Wl
vs/0c/5GQ+6BMk+phujClDmy+8qL5n3KObu75Zqwja32pHjE0GywGZv9k/z/bJvS
80x6JJYhkuGXWs0Qx+xglyQXBP5IcPswVP3ItOBna7qzhtGt3/GZbtZD8QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKqR8L98zGCltnXlD+IBfosVlMe8MB8GA1UdIwQY
MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1
LWQyMTA3MWVmNzM1Yi8xL3FwSHd2M3pNWUtXMmRlVVA0Z0YtaXhXVXg3dy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1LWQyMTA3MWVmNzM1
Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAIfGVwD
BAK5MWgDBAK5dgwwDQYJKoZIhvcNAQELBQADggEBADIkNDxOMf7P2Esk+nl3l++l
FmlvPvf3bS+vrFHtCSMXcBD/FdbsmMhPfZnMzKWYIhZojhi/E3BGOikh97QIjfvO
uKiim6rxxKkCZRXACB+bNx0tG7Vq5ivkuxt7Y6ZA+K7fH0RVXJr0FcBADU1EOXjK
AyC+0GO5ydi/bEc1brM6iZPA2culpA957c56x5iSaGLEAs11CmDCG3wJAhp1kZmp
QQoOOZgQS0fTHWH3hkIGXq+HX0LHANxiDA7Sd26fNfOu7N4XGlYoXQcWccdJ1UKg
2wuIZINbsDG+b1vk2GZVTUPq6yF5k78+ST8GuNiq/DaSxv2ka1W3x4l9jpLjs+0=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:31 2023 by rpki-client on console-fra.rpki-client.org