Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/qymH4CiUXiUtAeAG3VyrbZdoVpQ.roa
File: qymH4CiUXiUtAeAG3VyrbZdoVpQ.roa (raw, json)
Hash identifier: yZc245HZBVUcMN39EBL3Wh4q+OWZnM8zW6mOLdMEokg=
Subject key identifier: AB:29:87:E0:28:94:5E:25:2D:01:E0:06:DD:5C:AB:6D:97:68:56:94
Certificate issuer: /CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Certificate serial: 01856D0175CE3B001E333608CABDEDB0BD20
Authority key identifier: BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/qymH4CiUXiUtAeAG3VyrbZdoVpQ.roa
Signing time: Sun 01 Jan 2023 11:04:50 +0000
ROA not before: Sun 01 Jan 2023 11:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31069
IP address blocks: 193.30.246.0/24 maxlen: 24
193.30.246.0/23 maxlen: 24
193.30.247.0/24 maxlen: 24
194.187.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:75:ce:3b:00:1e:33:36:08:ca:bd:ed:b0:bd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Validity
Not Before: Jan 1 11:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab2987e028945e252d01e006dd5cab6d97685694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:ca:97:dc:38:b5:52:e5:a0:71:5f:d3:9c:
fa:84:9f:35:f0:fc:b5:3d:8e:2b:ab:77:3e:ee:d5:
64:11:c9:2a:d2:53:21:d2:e9:9a:b7:73:08:50:5c:
9c:ee:ab:1a:c0:08:37:fa:38:51:68:a3:4d:56:a9:
75:da:a6:20:c5:f6:db:56:ac:cb:45:d9:47:41:14:
5e:a1:07:52:e7:51:cf:66:b8:e3:a9:31:9d:07:d9:
a6:39:1b:be:ec:4e:df:c5:80:50:60:b0:b5:44:8e:
ed:e7:cc:5f:50:d0:56:1b:e8:1b:65:ca:98:c6:4c:
9f:e5:5c:2f:de:aa:b0:52:8a:25:ee:f4:df:53:59:
f0:22:3b:f1:f6:8f:25:3f:8d:aa:20:0c:3c:0f:c2:
1d:4f:b4:10:7f:3d:e2:7e:c9:31:f8:93:71:29:96:
42:03:a4:db:f6:b5:dd:6d:cf:30:c0:80:7f:09:5b:
d4:d0:c4:0a:80:f9:e1:9f:e2:b8:bf:6b:17:23:f5:
61:2f:db:47:17:da:91:78:c2:b9:67:cd:72:00:5e:
5a:03:bf:cc:29:72:cc:f6:4d:c8:bc:fe:16:bb:3e:
83:9e:df:e9:c7:3f:15:9f:d8:8b:2d:56:fc:a7:66:
8e:5c:41:8d:d0:7e:f4:aa:f1:88:3a:a1:16:f4:21:
92:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:29:87:E0:28:94:5E:25:2D:01:E0:06:DD:5C:AB:6D:97:68:56:94
X509v3 Authority Key Identifier:
keyid:BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/qymH4CiUXiUtAeAG3VyrbZdoVpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.246.0/23
194.187.28.0/24
Signature Algorithm: sha256WithRSAEncryption
29:bf:cd:cf:6a:b1:2e:0f:0d:bf:39:02:48:c4:27:83:c0:fb:
16:77:14:9e:87:a0:88:76:49:38:6f:b1:d2:45:df:4b:11:92:
22:fd:d5:30:ae:e3:54:4f:da:db:a4:b1:be:cb:86:31:93:e9:
ce:37:a8:49:3a:05:08:b6:f1:0f:00:a9:89:e5:47:21:2f:75:
95:07:01:fe:e1:dd:c8:a8:14:97:a0:0a:57:ca:f1:36:0c:a7:
b6:92:7d:8b:8d:02:a3:0f:2e:b8:96:6a:cd:33:61:2c:d2:bc:
51:9b:02:36:32:d5:84:9c:6c:ed:55:f8:26:ab:4d:88:50:e7:
90:20:fb:4b:83:5c:01:36:04:c6:94:9d:58:6e:48:5c:bb:19:
fa:56:b1:2a:21:97:ab:de:64:1b:37:a0:0a:a1:2e:04:ea:dc:
52:f1:ac:8a:ea:03:69:ae:cc:f1:92:86:c3:3a:f5:8c:ff:c2:
3e:1a:19:00:6c:22:84:66:1c:5e:7b:4b:ce:83:06:f3:20:1b:
16:cb:de:9f:84:ad:ac:e1:32:dc:b1:03:aa:6b:59:cc:c2:81:
c7:be:ba:b7:75:8b:4f:70:73:c4:45:87:8b:da:08:81:d3:77:
35:3d:ad:ff:ca:0c:1e:fa:7d:97:0f:40:0d:94:de:54:e4:5c:
12:97:72:09
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtAXXOOwAeMzYIyr3tsL0gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmVmYTBhYjk3NDAwNDhkODNiNDg5ZDljYTRlMDI4ZTBm
NWNmZWYwHhcNMjMwMTAxMTEwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjI5ODdlMDI4OTQ1ZTI1MmQwMWUwMDZkZDVjYWI2ZDk3Njg1Njk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUvKl9w4tVLloHFf05z6hJ818Py1
PY4rq3c+7tVkEckq0lMh0umat3MIUFyc7qsawAg3+jhRaKNNVql12qYgxfbbVqzL
RdlHQRReoQdS51HPZrjjqTGdB9mmORu+7E7fxYBQYLC1RI7t58xfUNBWG+gbZcqY
xkyf5Vwv3qqwUool7vTfU1nwIjvx9o8lP42qIAw8D8IdT7QQfz3ifskx+JNxKZZC
A6Tb9rXdbc8wwIB/CVvU0MQKgPnhn+K4v2sXI/VhL9tHF9qReMK5Z81yAF5aA7/M
KXLM9k3IvP4Wuz6Dnt/pxz8Vn9iLLVb8p2aOXEGN0H70qvGIOqEW9CGSewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKsph+AolF4lLQHgBt1cq22XaFaUMB8GA1UdIwQY
MBaAFLz++gq5dABI2DtInZyk4Cjg9c/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYjhlZGItZTMwNC00NzE0LTk1MmUt
YzY2YmVhMWYxYWEyLzEvcXltSDRDaVVYaVV0QWVBRzNWeXJiWmRvVnBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mYjhlZGItZTMwNC00NzE0LTk1MmUtYzY2YmVhMWYxYWEy
LzEvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwR72AwQA
wrscMA0GCSqGSIb3DQEBCwUAA4IBAQApv83ParEuDw2/OQJIxCeDwPsWdxSeh6CI
dkk4b7HSRd9LEZIi/dUwruNUT9rbpLG+y4Yxk+nON6hJOgUItvEPAKmJ5UchL3WV
BwH+4d3IqBSXoApXyvE2DKe2kn2LjQKjDy64lmrNM2Es0rxRmwI2MtWEnGztVfgm
q02IUOeQIPtLg1wBNgTGlJ1Ybkhcuxn6VrEqIZer3mQbN6AKoS4E6txS8ayK6gNp
rszxkobDOvWM/8I+GhkAbCKEZhxee0vOgwbzIBsWy96fhK2s4TLcsQOqa1nMwoHH
vrq3dYtPcHPERYeL2giB03c1Pa3/ygwe+n2XD0ANlN5U5FwSl3IJ
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:34 2024 by rpki-client on console-fra.rpki-client.org