Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/QzM_LP_aI-CT-QUwzvCZm0mmtrI.roa
File: QzM_LP_aI-CT-QUwzvCZm0mmtrI.roa (raw, json)
Hash identifier: wb3sSgrdz0w09DYh1y8+ikEhY+s2bPDfFm3Y/xzBOV0=
Subject key identifier: 43:33:3F:2C:FF:DA:23:E0:93:F9:05:30:CE:F0:99:9B:49:A6:B6:B2
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01856ED4D33DC8706086DAD0CAC7CBDCDDCC
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/QzM_LP_aI-CT-QUwzvCZm0mmtrI.roa
Signing time: Sun 01 Jan 2023 19:35:19 +0000
ROA not before: Sun 01 Jan 2023 19:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 46.175.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d3:3d:c8:70:60:86:da:d0:ca:c7:cb:dc:dd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jan 1 19:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43333f2cffda23e093f90530cef0999b49a6b6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:08:ef:5d:ee:e9:a2:97:5d:84:32:6a:b0:
b4:ee:a0:76:6a:f2:f6:1e:d3:66:f2:e6:14:4e:83:
a3:d1:1a:23:4a:b0:b2:50:9e:24:c4:c9:fa:e4:c9:
0e:6f:58:05:e2:be:57:7c:bc:64:43:9b:32:21:58:
b7:a9:83:c0:72:d8:0a:2b:4a:63:aa:0d:b3:45:46:
fb:f8:c8:58:4e:69:f8:41:82:98:ab:1b:a0:57:1b:
e5:93:59:6c:27:f7:99:7a:b2:61:aa:90:a2:02:ba:
ac:b2:9e:44:02:6a:da:38:08:a5:55:a2:c8:35:11:
0e:fe:82:83:19:80:cb:7f:15:13:a2:d1:ef:89:f9:
bb:8f:07:be:3e:99:71:a1:ab:56:91:9e:cb:15:18:
be:76:6c:c4:ab:f4:e0:34:04:d2:f6:c6:4e:58:f0:
e1:69:8a:4d:d7:ce:56:aa:3e:ba:a1:44:37:c4:a6:
2b:88:0a:d6:0d:6a:60:34:a8:77:25:3d:98:1a:ac:
dd:ce:d3:3a:e8:0f:6a:fe:84:10:90:18:de:f4:85:
f8:c7:e1:ab:c6:94:81:81:e4:66:ea:b7:6d:b5:0b:
eb:3d:62:52:70:9b:f4:1c:f5:ff:88:93:3f:9a:b9:
db:49:28:2b:01:b2:a8:68:aa:9a:20:e8:9a:c0:cf:
83:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:33:3F:2C:FF:DA:23:E0:93:F9:05:30:CE:F0:99:9B:49:A6:B6:B2
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/QzM_LP_aI-CT-QUwzvCZm0mmtrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f0:bd:a9:9d:3d:c9:33:f3:23:53:be:84:d5:4c:6e:fa:b9:
5d:6f:10:5f:b4:dd:bc:b7:ef:39:04:c8:bf:42:a3:c3:ad:f6:
5d:6e:21:cd:56:77:04:25:79:45:53:5c:e2:7e:14:6e:23:96:
c9:41:c0:eb:4d:40:8e:ac:e2:fc:e4:a5:f2:2c:61:93:81:ad:
e1:08:f9:12:07:e7:8e:86:b3:c0:64:f8:3d:dd:02:9c:e9:3d:
a4:94:17:75:27:88:60:8d:01:f4:94:33:2a:c2:c0:f6:ff:d9:
e3:32:cc:60:c6:de:e2:54:d9:5e:c9:28:81:1d:a3:05:47:cd:
e8:4f:63:ea:e0:44:55:d5:bf:60:58:4b:4c:20:66:5b:f2:8e:
9a:37:0f:cf:fa:82:44:91:37:74:54:9b:63:21:ac:75:a5:84:
bd:ff:35:4f:ca:44:63:f0:ea:4e:dd:41:f8:9f:11:e5:f3:52:
5d:85:c8:79:0c:f1:0d:e9:0c:77:19:bb:f1:00:06:90:f1:78:
ee:88:70:90:b4:0a:fa:2d:77:1c:e6:55:46:d7:7f:01:45:f2:
d5:74:3f:21:a0:e1:89:de:f6:2d:de:08:e2:a9:c3:25:8d:8b:
97:cc:da:5e:82:e8:24:79:45:c3:e1:24:55:b9:3f:9c:fa:a7:
5c:66:fb:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1NM9yHBghtrQysfL3N3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi
ZWJmOGQwHhcNMjMwMTAxMTkzNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzMzM2YyY2ZmZGEyM2UwOTNmOTA1MzBjZWYwOTk5YjQ5YTZiNmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/wI713u6aKXXYQyarC07qB2avL2
HtNm8uYUToOj0RojSrCyUJ4kxMn65MkOb1gF4r5XfLxkQ5syIVi3qYPActgKK0pj
qg2zRUb7+MhYTmn4QYKYqxugVxvlk1lsJ/eZerJhqpCiArqssp5EAmraOAilVaLI
NREO/oKDGYDLfxUTotHvifm7jwe+PplxoatWkZ7LFRi+dmzEq/TgNATS9sZOWPDh
aYpN185Wqj66oUQ3xKYriArWDWpgNKh3JT2YGqzdztM66A9q/oQQkBje9IX4x+Gr
xpSBgeRm6rdttQvrPWJScJv0HPX/iJM/mrnbSSgrAbKoaKqaIOiawM+DOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEMzPyz/2iPgk/kFMM7wmZtJprayMB8GA1UdIwQY
MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt
NWM1ODkyYWZhNDg3LzEvUXpNX0xQX2FJLUNULVFVd3p2Q1ptMG1tdHJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3
LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALq+CMA0G
CSqGSIb3DQEBCwUAA4IBAQAk8L2pnT3JM/MjU76E1Uxu+rldbxBftN28t+85BMi/
QqPDrfZdbiHNVncEJXlFU1zifhRuI5bJQcDrTUCOrOL85KXyLGGTga3hCPkSB+eO
hrPAZPg93QKc6T2klBd1J4hgjQH0lDMqwsD2/9njMsxgxt7iVNleySiBHaMFR83o
T2Pq4ERV1b9gWEtMIGZb8o6aNw/P+oJEkTd0VJtjIax1pYS9/zVPykRj8OpO3UH4
nxHl81Jdhch5DPEN6Qx3GbvxAAaQ8XjuiHCQtAr6LXcc5lVG138BRfLVdD8hoOGJ
3vYt3gjiqcMljYuXzNpegugkeUXD4SRVuT+c+qdcZvsK
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:38 2023 by rpki-client on console-fra.rpki-client.org