Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/QWqrfFE4Ent6jHgzOyCddn-AQx8.roa
File: QWqrfFE4Ent6jHgzOyCddn-AQx8.roa (raw, json)
Hash identifier: mCpRHmYSKekBtSaBPiltGh8xUP8ArAbTUZWI6cMnOHU=
Subject key identifier: 41:6A:AB:7C:51:38:12:7B:7A:8C:78:33:3B:20:9D:76:7F:80:43:1F
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA46125C324419E0D8BD3B7EDAF8E2
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/QWqrfFE4Ent6jHgzOyCddn-AQx8.roa
Signing time: Mon 02 Jan 2023 13:44:48 +0000
ROA not before: Mon 02 Jan 2023 13:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8991
IP address blocks: 83.212.250.0/24 maxlen: 24
83.212.249.0/24 maxlen: 24
195.251.36.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:46:12:5c:32:44:19:e0:d8:bd:3b:7e:da:f8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=416aab7c5138127b7a8c78333b209d767f80431f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:4b:a3:96:b8:5f:ab:89:22:db:b5:b1:00:
2c:d0:fc:03:1b:04:aa:09:6f:b5:18:e1:1b:1d:f7:
e5:72:18:ff:f2:8a:e0:ab:e0:68:68:69:e0:d3:58:
e5:ca:78:47:0d:1f:88:04:f9:55:c2:b2:58:b7:c9:
14:7a:45:6d:95:b3:c7:a8:ca:fa:2a:6c:b9:03:51:
25:08:db:29:05:2b:2b:a2:f1:83:2e:dc:c1:61:ef:
1d:7f:fc:87:54:87:bb:9d:7c:96:08:0e:bf:d4:25:
e0:43:40:0e:05:a1:c3:26:03:aa:55:6a:12:be:33:
1f:37:7b:3c:96:a0:07:2d:38:cb:ac:97:fa:ee:a5:
b3:88:60:33:c4:8d:0a:c7:dd:be:1f:ef:d1:10:73:
79:32:b5:b1:86:bb:5d:3b:50:59:37:d1:e3:b0:31:
e3:df:2b:2e:f3:46:60:71:99:ef:35:5f:d0:f3:1d:
2f:98:62:69:03:e6:9e:11:0c:b4:10:02:ae:d6:0a:
11:b9:e8:0d:da:e2:22:77:fa:b6:af:63:a9:e3:c0:
d8:a9:5c:d6:7d:bf:f9:cb:a0:0f:7c:b1:23:3b:92:
4d:4c:3e:ee:60:9a:6c:73:b0:95:e2:c1:7a:d1:43:
16:83:ad:4a:0e:1b:f0:0b:e8:a4:22:bc:4e:c1:c9:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6A:AB:7C:51:38:12:7B:7A:8C:78:33:3B:20:9D:76:7F:80:43:1F
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/QWqrfFE4Ent6jHgzOyCddn-AQx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.212.249.0-83.212.250.255
195.251.36.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:af:be:81:35:64:fa:df:a5:85:de:22:be:35:24:d7:74:69:
20:d9:85:35:e6:7f:8e:7f:3e:4e:d8:65:ea:e1:0b:e4:9b:b8:
63:b7:a6:39:ca:44:5e:4f:09:00:79:d8:98:cb:9e:24:6a:c6:
b8:b0:7c:54:b0:fd:24:75:80:10:a5:51:53:9b:5d:3a:d5:99:
b4:ae:49:d5:bf:56:d9:5d:26:aa:18:7e:7a:97:ac:22:a0:4e:
1a:4e:dd:69:57:5c:64:d1:bc:fc:09:53:e9:ec:fd:29:61:90:
1b:9c:6d:e7:b8:55:f8:c5:e9:f0:ca:05:96:39:dd:be:15:8d:
5d:a3:e0:5a:1d:51:4d:8f:60:a2:66:ec:f9:8c:78:de:84:f0:
5d:6f:60:47:45:76:d8:53:b6:03:4f:f0:42:2f:51:0d:92:cf:
c0:b9:ec:34:e6:be:df:ac:de:0e:ef:bf:3d:02:f5:19:34:f5:
47:ce:f6:fa:ca:c1:62:8e:df:f5:ad:44:15:61:49:35:41:17:
b9:e1:ae:a7:eb:17:60:60:dd:67:33:46:ab:f0:07:cf:31:93:
f4:9d:0d:fc:b3:b7:19:07:ef:b8:08:ba:a1:88:86:19:c8:fc:
84:47:02:24:00:b4:c1:13:e5:7f:0f:ad:de:25:bd:87:1e:2c:
0b:89:a2:3c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVyukYSXDJEGeDYvTt+2vjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1
MjlkYzMwHhcNMjMwMTAyMTM0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTZhYWI3YzUxMzgxMjdiN2E4Yzc4MzMzYjIwOWQ3NjdmODA0MzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPpLo5a4X6uJItu1sQAs0PwDGwSq
CW+1GOEbHfflchj/8orgq+BoaGng01jlynhHDR+IBPlVwrJYt8kUekVtlbPHqMr6
Kmy5A1ElCNspBSsrovGDLtzBYe8df/yHVIe7nXyWCA6/1CXgQ0AOBaHDJgOqVWoS
vjMfN3s8lqAHLTjLrJf67qWziGAzxI0Kx92+H+/REHN5MrWxhrtdO1BZN9HjsDHj
3ysu80ZgcZnvNV/Q8x0vmGJpA+aeEQy0EAKu1goRuegN2uIid/q2r2Op48DYqVzW
fb/5y6APfLEjO5JNTD7uYJpsc7CV4sF60UMWg61KDhvwC+ikIrxOwcmZwwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFEFqq3xROBJ7eox4MzsgnXZ/gEMfMB8GA1UdIwQY
MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut
YWFhNDU1M2QyYWJkLzEvUVdxcmZGRTRFbnQ2akhnek95Q2Rkbi1BUXg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk
LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABT1PkD
BABT1PoDBAHD+yQwDQYJKoZIhvcNAQELBQADggEBAE+vvoE1ZPrfpYXeIr41JNd0
aSDZhTXmf45/Pk7YZerhC+SbuGO3pjnKRF5PCQB52JjLniRqxriwfFSw/SR1gBCl
UVObXTrVmbSuSdW/VtldJqoYfnqXrCKgThpO3WlXXGTRvPwJU+ns/SlhkBucbee4
VfjF6fDKBZY53b4VjV2j4FodUU2PYKJm7PmMeN6E8F1vYEdFdthTtgNP8EIvUQ2S
z8C57DTmvt+s3g7vvz0C9Rk09UfO9vrKwWKO3/WtRBVhSTVBF7nhrqfrF2Bg3Wcz
RqvwB88xk/SdDfyztxkH77gIuqGIhhnI/IRHAiQAtMET5X8Prd4lvYceLAuJojw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org