Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/QhM0ZmO1N9qmifSDFBTewJueTP0.roa
File: QhM0ZmO1N9qmifSDFBTewJueTP0.roa (raw, json)
Hash identifier: xHHyaqxb2PCuMp7LlznhwCfSf4dbb970JZNb13L4hbg=
Subject key identifier: 42:13:34:66:63:B5:37:DA:A6:89:F4:83:14:14:DE:C0:9B:9E:4C:FD
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 0185E8DCA950E96088126E3490383C38EA33
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/QhM0ZmO1N9qmifSDFBTewJueTP0.roa
Signing time: Wed 25 Jan 2023 12:17:33 +0000
ROA not before: Wed 25 Jan 2023 12:17:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31655
IP address blocks: 83.245.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:dc:a9:50:e9:60:88:12:6e:34:90:38:3c:38:ea:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 25 12:17:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4213346663b537daa689f4831414dec09b9e4cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:53:15:31:0b:68:4b:05:24:c9:fa:63:98:
8b:d0:f5:a6:08:e4:8e:be:ab:58:45:bf:28:5f:d5:
75:f0:05:9e:10:d5:9b:f6:86:44:69:61:6f:cd:dc:
87:65:27:e0:0a:6c:a5:8a:12:91:43:19:be:07:e9:
c3:c4:d2:3c:37:e9:dd:72:e7:92:73:55:e3:c2:2e:
78:68:95:84:6c:ec:59:a3:4b:a8:33:b3:4a:4f:e7:
52:03:d5:e8:fb:4f:48:60:d6:18:bb:2f:aa:0d:38:
5d:ed:d0:4a:28:34:6c:eb:b1:f2:c5:94:91:6b:fd:
d5:dd:44:de:41:44:45:e5:ce:81:3e:02:e3:f2:37:
a7:26:05:de:e0:37:cb:70:f9:6d:8c:15:53:9c:9d:
21:1e:00:d7:01:58:f9:fa:18:61:ec:bc:96:79:a1:
f6:b1:14:6f:56:3d:9d:b5:ae:51:c9:36:7a:22:7d:
b1:a1:36:ad:94:03:b6:5f:f6:24:af:fc:d9:6f:05:
66:f8:1e:0b:7c:d5:e1:0c:f2:3f:91:fc:f6:5d:df:
e1:48:9e:a6:5c:0b:3f:46:0f:fd:8c:59:42:34:a2:
be:b8:96:05:7d:84:48:36:3f:f4:ab:9a:5c:9f:c2:
f5:54:a1:ab:ca:5b:f8:68:3e:93:da:70:de:3c:6e:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:13:34:66:63:B5:37:DA:A6:89:F4:83:14:14:DE:C0:9B:9E:4C:FD
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/QhM0ZmO1N9qmifSDFBTewJueTP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.6.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:31:0a:ae:33:65:0c:fb:49:ef:21:85:0b:8a:d5:42:9c:a2:
42:6d:97:0c:8a:87:46:73:fb:9f:b3:fa:fc:39:d2:a4:a9:fa:
46:f8:a8:3a:01:4e:52:b5:cc:94:94:28:a6:9d:29:e0:2f:4d:
47:d4:38:c1:07:4d:e6:4d:bd:d1:d9:63:d6:30:b5:86:52:06:
a0:11:ec:79:5a:fe:71:63:08:8f:1a:7a:38:c8:d6:75:13:c0:
3e:15:8f:3c:b7:4c:1e:95:fc:ca:20:9a:05:fd:cb:53:a0:a8:
aa:67:f3:65:a5:27:9d:57:7d:8c:7b:15:98:15:e6:25:dc:27:
d8:dc:06:4a:6d:79:59:72:d7:c8:00:04:cd:48:7e:3e:6e:7b:
cf:76:54:d4:65:28:87:06:d1:45:7d:b5:8a:1d:f1:98:4a:52:
78:ba:ca:cc:39:70:a6:6d:0e:82:6f:8a:5b:a9:04:0e:91:54:
06:f0:f2:9f:d7:a2:ae:f0:02:45:43:eb:c7:35:fd:43:cc:36:
49:1a:6f:9f:0c:2d:68:63:d9:a0:32:13:29:9a:e5:42:f1:9c:
1d:e3:18:a5:45:a0:d7:c3:04:69:e2:c0:97:97:5e:f5:ba:a1:
df:72:e1:ef:c7:29:89:7a:14:19:14:d0:1c:96:1c:7d:08:b2:
66:29:97:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXo3KlQ6WCIEm40kDg8OOozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjMwMTI1MTIxNzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjEzMzQ2NjYzYjUzN2RhYTY4OWY0ODMxNDE0ZGVjMDliOWU0Y2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqatTFTELaEsFJMn6Y5iL0PWmCOSO
vqtYRb8oX9V18AWeENWb9oZEaWFvzdyHZSfgCmylihKRQxm+B+nDxNI8N+ndcueS
c1Xjwi54aJWEbOxZo0uoM7NKT+dSA9Xo+09IYNYYuy+qDThd7dBKKDRs67HyxZSR
a/3V3UTeQURF5c6BPgLj8jenJgXe4DfLcPltjBVTnJ0hHgDXAVj5+hhh7LyWeaH2
sRRvVj2dta5RyTZ6In2xoTatlAO2X/Ykr/zZbwVm+B4LfNXhDPI/kfz2Xd/hSJ6m
XAs/Rg/9jFlCNKK+uJYFfYRINj/0q5pcn8L1VKGrylv4aD6T2nDePG7Q5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEITNGZjtTfapon0gxQU3sCbnkz9MB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvUWhNMFptTzFOOXFtaWZTREZCVGV3SnVlVFAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU/UGMA0G
CSqGSIb3DQEBCwUAA4IBAQCLMQquM2UM+0nvIYULitVCnKJCbZcMiodGc/ufs/r8
OdKkqfpG+Kg6AU5StcyUlCimnSngL01H1DjBB03mTb3R2WPWMLWGUgagEex5Wv5x
YwiPGno4yNZ1E8A+FY88t0welfzKIJoF/ctToKiqZ/NlpSedV32MexWYFeYl3CfY
3AZKbXlZctfIAATNSH4+bnvPdlTUZSiHBtFFfbWKHfGYSlJ4usrMOXCmbQ6Cb4pb
qQQOkVQG8PKf16Ku8AJFQ+vHNf1DzDZJGm+fDC1oY9mgMhMpmuVC8Zwd4xilRaDX
wwRp4sCXl171uqHfcuHvxymJehQZFNAclhx9CLJmKZdB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:26 2024 by rpki-client on console-fra.rpki-client.org