Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/QH_QM-mWa7H_OQ-YTn-nM0zZAMo.roa
File: QH_QM-mWa7H_OQ-YTn-nM0zZAMo.roa (raw, json)
Hash identifier: 8QNp3ODQ/LaBkR6p8MPsVVJJiBirF4aDrcUC4O0oLCA=
Subject key identifier: 40:7F:D0:33:E9:96:6B:B1:FF:39:0F:98:4E:7F:A7:33:4C:D9:00:CA
Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial: 018570797A7981B6BAD55266B2BB5B53BB53
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/QH_QM-mWa7H_OQ-YTn-nM0zZAMo.roa
Signing time: Mon 02 Jan 2023 03:14:47 +0000
ROA not before: Mon 02 Jan 2023 03:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36614
IP address blocks: 85.31.94.0/23 maxlen: 23
5.11.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Aug 2023 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:7a:79:81:b6:ba:d5:52:66:b2:bb:5b:53:bb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
Validity
Not Before: Jan 2 03:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=407fd033e9966bb1ff390f984e7fa7334cd900ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:91:70:82:64:f8:6e:35:23:29:a1:a4:a0:22:
2d:d2:8b:3c:d4:08:16:1c:02:a4:da:1c:29:05:df:
ab:d3:65:1c:b9:9a:5e:fd:5a:89:82:1f:68:21:a3:
dc:6b:a2:0b:6f:8f:4a:d3:9f:dc:ef:bc:90:86:42:
fe:e9:3c:94:c3:6f:59:af:33:86:8e:6d:dd:39:de:
7a:66:5a:04:58:98:72:cb:3a:2d:27:16:19:a8:ff:
35:0c:19:50:cc:b1:e7:d3:08:16:9a:94:eb:c2:c1:
0c:c2:b1:c4:08:10:2e:4c:c1:01:d3:12:62:2f:4a:
d6:99:37:9b:7f:7d:64:2e:5b:16:31:a8:c8:a1:a2:
bf:2e:2b:26:58:77:6e:b8:1b:d7:7c:87:e2:a3:e9:
8d:f5:b0:8b:cc:20:8d:39:09:6e:8f:59:45:b3:f0:
b1:b4:75:b7:2e:10:e1:8f:1a:65:40:cf:c7:c3:89:
0a:84:d3:71:b0:16:19:6c:09:22:64:14:97:fe:21:
53:f9:8f:bc:17:6b:2e:80:fb:28:bf:24:3c:75:2e:
b5:2d:7e:96:e0:10:80:ae:7c:c7:b3:f2:80:90:4a:
83:9d:69:20:fb:36:77:2d:d9:e2:43:6c:2a:d2:d6:
b1:42:ef:ba:c9:49:e2:1e:5d:83:9c:f8:a9:e7:96:
4e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7F:D0:33:E9:96:6B:B1:FF:39:0F:98:4E:7F:A7:33:4C:D9:00:CA
X509v3 Authority Key Identifier:
keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/QH_QM-mWa7H_OQ-YTn-nM0zZAMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.28.0/24
85.31.94.0/23
Signature Algorithm: sha256WithRSAEncryption
71:30:75:27:9d:a1:b3:c5:e1:08:2d:03:1c:6a:1d:c6:10:59:
a3:7d:a4:f2:2b:01:8e:dc:71:e2:74:8f:03:c8:65:7b:0b:f0:
bb:18:83:59:2c:db:92:e5:fb:43:ea:ba:37:3c:24:80:a4:bb:
b2:84:78:f5:66:af:e1:32:6c:ff:dd:1d:e0:1a:28:f0:98:c0:
49:ca:ab:e1:b5:ae:fc:03:68:4d:3f:bb:f0:e6:4e:78:27:b8:
d9:07:d8:d1:7b:af:17:ab:53:b9:a0:c9:cf:73:28:16:fa:07:
0a:d8:14:82:7a:66:60:ab:2c:70:08:21:4e:bd:8e:e3:8f:fd:
a7:d4:e8:a0:2b:b6:ee:7e:81:4b:2c:80:59:3b:28:d2:5a:34:
87:20:ee:2c:cf:71:58:8b:e1:cd:79:e3:9b:ab:04:e4:5d:2d:
f3:93:03:09:c4:79:4b:d5:ab:fe:c5:18:96:93:26:1a:f3:90:
bb:8a:47:0b:85:e9:e7:53:81:a1:4f:0c:90:8b:bb:43:16:45:
0a:d3:be:6c:25:21:d0:f6:f0:0e:f1:bc:e3:64:4a:d8:10:39:
3c:e8:47:2e:7a:7b:65:0a:66:49:03:ec:e3:9f:8e:05:78:5f:
51:94:29:22:42:4c:d7:81:c4:ba:04:50:94:cd:4e:06:0a:4d:
ec:c6:14:3c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVweXp5gba61VJmsrtbU7tTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNTI5YTRkMjJmYWVmMjMxMzVkNmVmZjg5MTIyNjY2MjNj
NDkyNTUwHhcNMjMwMTAyMDMxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDdmZDAzM2U5OTY2YmIxZmYzOTBmOTg0ZTdmYTczMzRjZDkwMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5FwgmT4bjUjKaGkoCIt0os81AgW
HAKk2hwpBd+r02UcuZpe/VqJgh9oIaPca6ILb49K05/c77yQhkL+6TyUw29ZrzOG
jm3dOd56ZloEWJhyyzotJxYZqP81DBlQzLHn0wgWmpTrwsEMwrHECBAuTMEB0xJi
L0rWmTebf31kLlsWMajIoaK/LismWHduuBvXfIfio+mN9bCLzCCNOQluj1lFs/Cx
tHW3LhDhjxplQM/Hw4kKhNNxsBYZbAkiZBSX/iFT+Y+8F2sugPsovyQ8dS61LX6W
4BCArnzHs/KAkEqDnWkg+zZ3LdniQ2wq0taxQu+6yUniHl2DnPip55ZO4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEB/0DPplmux/zkPmE5/pzNM2QDKMB8GA1UdIwQY
MBaAFEtSmk0i+u8jE11u/4kSJmYjxJJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTct
MzZhZTc2ZWU5ODNlLzEvUUhfUU0tbVdhN0hfT1EtWVRuLW5NMHpaQU1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTctMzZhZTc2ZWU5ODNl
LzEvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABQscAwQB
VR9eMA0GCSqGSIb3DQEBCwUAA4IBAQBxMHUnnaGzxeEILQMcah3GEFmjfaTyKwGO
3HHidI8DyGV7C/C7GINZLNuS5ftD6ro3PCSApLuyhHj1Zq/hMmz/3R3gGijwmMBJ
yqvhta78A2hNP7vw5k54J7jZB9jRe68Xq1O5oMnPcygW+gcK2BSCemZgqyxwCCFO
vY7jj/2n1OigK7bufoFLLIBZOyjSWjSHIO4sz3FYi+HNeeObqwTkXS3zkwMJxHlL
1av+xRiWkyYa85C7ikcLhennU4GhTwyQi7tDFkUK075sJSHQ9vAO8bzjZErYEDk8
6EcuentlCmZJA+zjn44FeF9RlCkiQkzXgcS6BFCUzU4GCk3sxhQ8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:02 2024 by rpki-client on console-ams.rpki-client.org