Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/QhdfNiJQ1wabhcvUS5pvRt9CE7k.roa
File: QhdfNiJQ1wabhcvUS5pvRt9CE7k.roa (raw, json)
Hash identifier: 0SEhFZtsObFZgxOCP45jVB+0rTZg8aO3gbkZxUyRjWk=
Subject key identifier: 42:17:5F:36:22:50:D7:06:9B:85:CB:D4:4B:9A:6F:46:DF:42:13:B9
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 018FB5123D990A9C653E897F26D0B1B72080
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/QhdfNiJQ1wabhcvUS5pvRt9CE7k.roa
Signing time: Sun 26 May 2024 13:23:42 +0000
ROA not before: Sun 26 May 2024 13:23:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 92.114.110.0/24 maxlen: 24
93.115.36.0/24 maxlen: 24
93.119.193.0/24 maxlen: 24
94.176.150.0/24 maxlen: 24
176.126.204.0/24 maxlen: 24
188.208.108.0/24 maxlen: 24
188.208.116.0/24 maxlen: 24
188.211.234.0/24 maxlen: 24
188.241.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 11:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b5:12:3d:99:0a:9c:65:3e:89:7f:26:d0:b1:b7:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: May 26 13:23:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42175f362250d7069b85cbd44b9a6f46df4213b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:77:5d:d5:27:6b:31:53:32:89:d0:1f:70:
b5:97:dc:7d:f6:3d:55:2e:fd:d0:3a:f1:d4:dd:95:
36:ab:52:2f:bb:4b:6e:06:ee:4b:2e:cf:aa:3c:19:
6d:71:ee:4f:86:e4:19:4f:e4:8d:01:67:a3:92:d8:
99:cd:0a:b9:dc:8c:49:e4:0a:5b:4a:53:15:f1:d9:
ff:c2:7c:bc:9d:68:ca:77:44:5b:05:27:c8:09:50:
3c:b9:6c:fc:e2:f7:c4:97:7e:57:53:9e:1f:64:8d:
39:fb:d3:f3:0c:f4:9a:7e:59:22:b5:04:86:be:cc:
d3:e7:29:64:d4:07:20:43:bb:97:f4:cf:87:a1:db:
df:f6:57:40:c1:c1:4b:1a:0f:23:07:41:2a:23:b3:
38:0e:e2:c9:7f:d5:79:ac:59:a3:fc:28:2d:4f:1d:
14:6f:6d:3d:4e:4e:ab:21:93:fc:f2:b3:47:33:37:
ce:0f:44:04:07:e5:da:e5:91:5a:30:98:c1:34:6d:
93:13:06:29:00:1e:10:46:f7:ba:5c:b9:33:ea:75:
16:67:4c:f5:62:f7:ce:07:7b:19:cd:d4:90:46:4b:
b1:21:05:1e:84:4f:eb:bf:67:a0:c2:26:94:df:a3:
cc:87:07:7e:46:d2:14:36:7b:8d:24:e0:93:ac:85:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:17:5F:36:22:50:D7:06:9B:85:CB:D4:4B:9A:6F:46:DF:42:13:B9
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/QhdfNiJQ1wabhcvUS5pvRt9CE7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.110.0/24
93.115.36.0/24
93.119.193.0/24
94.176.150.0/24
176.126.204.0/24
188.208.108.0/24
188.208.116.0/24
188.211.234.0/24
188.241.192.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a0:ae:e0:38:df:2c:cf:7e:cf:89:43:ba:0d:4d:6b:87:0e:
20:b6:86:cc:4d:f4:dd:1e:33:fd:f5:0d:d0:55:9c:aa:d9:f8:
49:f7:2e:03:9b:2e:fb:55:9d:7e:c9:5e:c3:2b:3d:e0:ce:2e:
90:2d:ce:3e:7b:ac:85:60:db:68:78:4d:1f:2c:ea:c9:e1:e5:
26:fe:6e:14:ad:c8:9b:fe:97:13:23:a2:ab:aa:20:8b:35:1e:
10:54:0c:eb:06:b2:45:45:07:d6:19:83:a5:36:ad:d6:4a:f9:
ec:6f:8c:bd:b9:70:a1:d1:b7:45:9a:3c:bf:de:d1:b6:c8:44:
d8:92:0e:10:c9:94:cf:0e:6b:5c:59:c8:39:ac:a0:5a:94:4c:
b5:0e:cc:3b:de:89:fc:51:7a:1c:bf:85:bf:b9:1a:0e:f7:6a:
94:b4:4b:35:2b:8e:40:d8:3b:9f:8a:fa:ba:2b:9f:cf:d3:9e:
76:76:48:79:67:ad:dd:46:fe:47:cb:a8:4f:6e:65:f0:83:23:
0d:eb:86:52:56:44:99:f7:f3:e4:de:26:99:10:9a:07:37:f6:
09:46:99:4c:18:58:0f:e4:77:eb:1b:d0:4c:6e:71:f3:67:ed:
8c:e2:3b:8b:f5:8a:95:3d:0b:9a:ec:b9:3a:34:78:c1:0b:d8:
05:68:db:69
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAY+1Ej2ZCpxlPol/JtCxtyCAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWYzMmQwY2ZhN2E4NmQzMGU3ZTExYTczZWJiZDBiMjRk
YmY0MWYwHhcNMjQwNTI2MTMyMzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjE3NWYzNjIyNTBkNzA2OWI4NWNiZDQ0YjlhNmY0NmRmNDIxM2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOp3XdUnazFTMonQH3C1l9x99j1V
Lv3QOvHU3ZU2q1Ivu0tuBu5LLs+qPBltce5PhuQZT+SNAWejktiZzQq53IxJ5Apb
SlMV8dn/wny8nWjKd0RbBSfICVA8uWz84vfEl35XU54fZI05+9PzDPSaflkitQSG
vszT5ylk1AcgQ7uX9M+Hodvf9ldAwcFLGg8jB0EqI7M4DuLJf9V5rFmj/CgtTx0U
b209Tk6rIZP88rNHMzfOD0QEB+Xa5ZFaMJjBNG2TEwYpAB4QRve6XLkz6nUWZ0z1
YvfOB3sZzdSQRkuxIQUehE/rv2egwiaU36PMhwd+RtIUNnuNJOCTrIX8jQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFEIXXzYiUNcGm4XL1Euab0bfQhO5MB8GA1UdIwQY
MBaAFD4fMtDPp6htMOfhGnPrvQsk2/QfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGg4eTBNLW5xRzB3NS1FYWMtdTlDeVRiOUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81ZjA0OGItMmRmMy00MTQwLTlmNGUt
NjA2OGMwNGQxYmUwLzEvUWhkZk5pSlExd2FiaGN2VVM1cHZSdDlDRTdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81ZjA0OGItMmRmMy00MTQwLTlmNGUtNjA2OGMwNGQxYmUw
LzEvUGg4eTBNLW5xRzB3NS1FYWMtdTlDeVRiOUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAXHJuAwQA
XXMkAwQAXXfBAwQAXrCWAwQAsH7MAwQAvNBsAwQAvNB0AwQAvNPqAwQAvPHAMA0G
CSqGSIb3DQEBCwUAA4IBAQAQoK7gON8sz37PiUO6DU1rhw4gtobMTfTdHjP99Q3Q
VZyq2fhJ9y4Dmy77VZ1+yV7DKz3gzi6QLc4+e6yFYNtoeE0fLOrJ4eUm/m4Urcib
/pcTI6KrqiCLNR4QVAzrBrJFRQfWGYOlNq3WSvnsb4y9uXCh0bdFmjy/3tG2yETY
kg4QyZTPDmtcWcg5rKBalEy1Dsw73on8UXocv4W/uRoO92qUtEs1K45A2Dufivq6
K5/P0552dkh5Z63dRv5Hy6hPbmXwgyMN64ZSVkSZ9/Pk3iaZEJoHN/YJRplMGFgP
5HfrG9BMbnHzZ+2M4juL9YqVPQua7Lk6NHjBC9gFaNtp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:05 2024 by rpki-client on console-ams.rpki-client.org