Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/QWMjKkdD6b0VL29ja5Y8Nh_Gn_Q.roa
File: QWMjKkdD6b0VL29ja5Y8Nh_Gn_Q.roa (raw, json)
Hash identifier: NFyuB44MSq6iPfmJPKz2THljzY3Q4BLjg9KJIb9JOHY=
Subject key identifier: 41:63:23:2A:47:43:E9:BD:15:2F:6F:63:6B:96:3C:36:1F:C6:9F:F4
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 01856EC23BD5E5EFA0300E716861FD239A1E
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/QWMjKkdD6b0VL29ja5Y8Nh_Gn_Q.roa
Signing time: Sun 01 Jan 2023 19:15:01 +0000
ROA not before: Sun 01 Jan 2023 19:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211090
IP address blocks: 194.127.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:3b:d5:e5:ef:a0:30:0e:71:68:61:fd:23:9a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Jan 1 19:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4163232a4743e9bd152f6f636b963c361fc69ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:02:f5:45:b3:d0:43:9c:77:46:72:ab:f5:
cc:2b:70:df:b4:28:31:7a:7c:c6:9c:29:9e:58:94:
33:5a:97:05:f3:0b:61:50:c3:ad:ae:66:84:65:21:
34:81:fa:d0:a3:a3:57:ec:18:9a:02:16:d1:7a:d0:
2a:a5:7a:55:ee:6b:d4:e8:97:5d:07:7d:c9:12:09:
29:f3:9d:86:c6:b7:da:72:4f:da:89:2e:ff:f4:8e:
20:2a:89:d0:75:cb:20:de:7f:eb:07:21:eb:84:87:
9f:36:f1:a0:1c:e5:ce:d4:af:88:5a:7b:a7:37:ca:
c9:bc:bc:b8:64:71:a2:89:c3:22:0f:b2:99:1e:89:
d8:59:2b:78:d4:c9:cd:bb:83:93:5a:90:53:1d:99:
04:30:52:28:c1:3e:ce:55:85:a7:35:c7:84:5f:a1:
50:03:fb:04:76:54:71:42:10:f0:1f:ce:63:1d:f4:
08:3e:25:56:c6:f2:5f:0e:6a:ff:5e:00:c2:fc:0c:
70:07:92:10:00:1c:00:3a:da:85:77:b5:ca:fc:28:
d4:65:44:1b:06:83:e3:30:8c:de:f9:94:a9:85:cc:
90:61:07:8e:b6:a8:7e:3a:a5:eb:11:e4:ab:de:ef:
17:ca:11:a3:9c:10:fb:b8:30:f9:88:68:96:4d:59:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:63:23:2A:47:43:E9:BD:15:2F:6F:63:6B:96:3C:36:1F:C6:9F:F4
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/QWMjKkdD6b0VL29ja5Y8Nh_Gn_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.111.0/24
Signature Algorithm: sha256WithRSAEncryption
61:be:35:9b:8c:93:cb:a5:d6:b5:15:5e:3d:7f:52:e4:29:bc:
5e:62:59:bc:56:6f:61:b3:a9:1d:57:84:cb:13:b0:98:d6:5f:
2a:a2:eb:7b:51:04:10:78:07:3e:1f:f5:96:82:d6:90:f6:33:
12:74:5f:a1:85:a8:cc:d5:69:a6:01:f8:98:0d:36:1b:8f:6a:
5b:30:d1:d1:15:76:27:05:a6:3c:21:62:61:ae:06:3d:2b:8d:
ff:3e:17:6b:90:e0:56:57:65:d5:62:98:c0:02:2c:0e:bd:4c:
96:1c:10:a7:a4:3e:60:87:e8:1a:1e:c9:b6:98:9d:4f:e9:e3:
86:b2:06:8e:26:20:b5:df:49:e0:57:30:39:00:f9:f3:59:41:
8f:16:b8:85:91:d6:ea:48:39:ef:73:c8:95:9d:5f:10:57:a7:
e9:08:3a:0b:fa:9d:46:86:bb:dc:c1:39:d5:f1:e7:90:ba:68:
ca:a2:b9:ef:6a:4f:87:b1:64:f0:ae:d7:0d:79:0e:a1:76:ab:
f3:d9:19:03:75:38:27:1f:2e:9f:00:df:da:8b:b9:3a:a4:37:
af:e8:66:99:80:05:e7:59:57:e0:7e:2d:af:f2:33:7d:60:f0:
58:60:27:5c:da:60:37:fe:8b:6d:21:9f:3d:73:a1:f6:ea:d7:
1a:48:4d:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuwjvV5e+gMA5xaGH9I5oeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0
ZDkwNTYwHhcNMjMwMTAxMTkxNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTYzMjMyYTQ3NDNlOWJkMTUyZjZmNjM2Yjk2M2MzNjFmYzY5ZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14YC9UWz0EOcd0Zyq/XMK3DftCgx
enzGnCmeWJQzWpcF8wthUMOtrmaEZSE0gfrQo6NX7BiaAhbRetAqpXpV7mvU6Jdd
B33JEgkp852Gxrfack/aiS7/9I4gKonQdcsg3n/rByHrhIefNvGgHOXO1K+IWnun
N8rJvLy4ZHGiicMiD7KZHonYWSt41MnNu4OTWpBTHZkEMFIowT7OVYWnNceEX6FQ
A/sEdlRxQhDwH85jHfQIPiVWxvJfDmr/XgDC/AxwB5IQABwAOtqFd7XK/CjUZUQb
BoPjMIze+ZSphcyQYQeOtqh+OqXrEeSr3u8XyhGjnBD7uDD5iGiWTVm6zwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEFjIypHQ+m9FS9vY2uWPDYfxp/0MB8GA1UdIwQY
MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt
NmNjMWQzZWE4MzJlLzEvUVdNaktrZEQ2YjBWTDI5amE1WThOaF9Hbl9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl
LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn9vMA0G
CSqGSIb3DQEBCwUAA4IBAQBhvjWbjJPLpda1FV49f1LkKbxeYlm8Vm9hs6kdV4TL
E7CY1l8qout7UQQQeAc+H/WWgtaQ9jMSdF+hhajM1WmmAfiYDTYbj2pbMNHRFXYn
BaY8IWJhrgY9K43/PhdrkOBWV2XVYpjAAiwOvUyWHBCnpD5gh+gaHsm2mJ1P6eOG
sgaOJiC130ngVzA5APnzWUGPFriFkdbqSDnvc8iVnV8QV6fpCDoL+p1GhrvcwTnV
8eeQumjKornvak+HsWTwrtcNeQ6hdqvz2RkDdTgnHy6fAN/ai7k6pDev6GaZgAXn
WVfgfi2v8jN9YPBYYCdc2mA3/ottIZ89c6H26tcaSE35
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:59 2024 by rpki-client on console-ams.rpki-client.org