Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/qzaLGn_was7US1kUuzccG1hexvM.roa
File: qzaLGn_was7US1kUuzccG1hexvM.roa (raw, json)
Hash identifier: 909gcnSyk1Y3uOX62lnQUMe2YzB3PPS1STbRnzKIsuw=
Subject key identifier: AB:36:8B:1A:7F:F0:6A:CE:D4:4B:59:14:BB:37:1C:1B:58:5E:C6:F3
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018AB1702073860DE858A62977991C730928
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/qzaLGn_was7US1kUuzccG1hexvM.roa
Signing time: Wed 20 Sep 2023 07:13:50 +0000
ROA not before: Wed 20 Sep 2023 07:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16589
IP address blocks: 93.152.214.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:70:20:73:86:0d:e8:58:a6:29:77:99:1c:73:09:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Sep 20 07:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab368b1a7ff06aced44b5914bb371c1b585ec6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:b6:de:17:38:7d:15:ef:e6:94:71:de:d4:
03:dd:c7:bd:48:28:b7:9d:4b:ea:e8:36:11:e9:99:
61:1c:94:3e:d7:b8:f3:95:15:a9:6d:b0:02:9e:13:
62:6a:6c:a8:36:01:92:a2:66:fb:6c:ac:da:4f:1e:
69:7f:2d:08:0a:f3:86:f3:bb:fd:96:80:8a:e4:dd:
89:36:67:dd:3a:48:5b:a4:8f:bf:12:76:9d:2a:3f:
31:cd:79:82:1a:8c:64:cb:09:8c:bc:16:44:28:27:
bc:c2:03:47:b3:88:15:d7:5b:eb:40:a8:d8:9c:91:
55:40:d3:84:b1:29:c7:f9:97:d6:73:3e:dd:ce:e3:
0f:98:65:80:55:c7:16:58:5e:8e:fe:cf:3e:e1:ec:
76:f7:d6:9a:79:d6:95:dd:8d:81:74:62:6b:1b:70:
87:04:27:b5:8c:a5:df:77:82:ad:c5:7f:51:f4:89:
b5:05:80:47:e2:20:08:cb:74:05:2a:b5:2e:7e:ed:
4f:f0:12:d7:38:fe:02:5d:cb:5d:3f:38:f1:ed:28:
22:f1:b6:58:4a:fc:7e:d4:47:dd:15:28:63:9b:7f:
77:fe:c4:40:6d:e4:8f:5f:a7:f7:58:8e:7b:33:40:
e2:68:2e:a3:fc:98:e6:42:21:12:dd:cf:e0:07:9b:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:36:8B:1A:7F:F0:6A:CE:D4:4B:59:14:BB:37:1C:1B:58:5E:C6:F3
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/qzaLGn_was7US1kUuzccG1hexvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.235.0/24
93.152.214.0/24
93.152.220.0/23
93.152.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:9c:85:33:5d:c3:ba:f5:87:a6:84:6c:eb:b5:32:80:0a:9a:
0a:c0:7b:1a:7c:53:51:d7:18:9f:6e:40:3e:c7:0b:7d:9a:83:
19:56:92:4f:87:42:df:a8:ff:50:9b:85:e3:64:97:d0:18:26:
3a:85:4c:08:bd:16:3b:92:f6:47:1e:99:ff:b0:70:bf:4e:5c:
73:04:ad:d8:44:9b:8e:57:bd:ba:c1:e0:fb:46:e3:e9:bc:f4:
61:34:dc:86:e0:05:c2:38:1e:9f:59:a9:e6:cf:b1:38:aa:90:
39:9c:d3:4e:1f:26:6d:95:93:0c:4a:2c:74:e1:9c:f0:35:c6:
45:85:30:69:b7:ef:2e:72:39:5a:72:da:cb:99:5f:5a:cc:15:
4a:dd:e4:78:33:32:99:20:1f:0e:86:81:01:e6:7d:2d:9d:b9:
81:cc:2f:7e:18:b6:53:4c:d8:2b:e8:b8:82:1d:71:e7:e1:3c:
07:5c:d7:a2:a1:a4:79:dc:40:a1:8e:67:cf:95:0f:33:48:e8:
74:ca:f3:d5:e7:1d:48:61:91:78:c4:20:5d:95:db:2b:03:39:
0d:d4:0b:74:1e:ca:8f:76:66:ea:06:e9:c4:43:e3:28:00:4a:
5f:5a:7e:79:25:1d:d6:0c:e8:8d:e0:e4:d7:ad:27:2e:5c:ab:
6b:7d:d3:a0
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYqxcCBzhg3oWKYpd5kccwkoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjMwOTIwMDcxMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjM2OGIxYTdmZjA2YWNlZDQ0YjU5MTRiYjM3MWMxYjU4NWVjNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CG23hc4fRXv5pRx3tQD3ce9SCi3
nUvq6DYR6ZlhHJQ+17jzlRWpbbACnhNiamyoNgGSomb7bKzaTx5pfy0ICvOG87v9
loCK5N2JNmfdOkhbpI+/EnadKj8xzXmCGoxkywmMvBZEKCe8wgNHs4gV11vrQKjY
nJFVQNOEsSnH+ZfWcz7dzuMPmGWAVccWWF6O/s8+4ex299aaedaV3Y2BdGJrG3CH
BCe1jKXfd4KtxX9R9Im1BYBH4iAIy3QFKrUufu1P8BLXOP4CXctdPzjx7Sgi8bZY
Svx+1EfdFShjm393/sRAbeSPX6f3WI57M0DiaC6j/JjmQiES3c/gB5v7FwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKs2ixp/8GrO1EtZFLs3HBtYXsbzMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvcXphTEduX3dhczdVUzFrVXV6Y2NHMWhleHZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALY3rAwQA
XZjWAwQBXZjcAwQAXZjmMA0GCSqGSIb3DQEBCwUAA4IBAQBsnIUzXcO69YemhGzr
tTKACpoKwHsafFNR1xifbkA+xwt9moMZVpJPh0LfqP9Qm4XjZJfQGCY6hUwIvRY7
kvZHHpn/sHC/TlxzBK3YRJuOV726weD7RuPpvPRhNNyG4AXCOB6fWanmz7E4qpA5
nNNOHyZtlZMMSix04ZzwNcZFhTBpt+8ucjlactrLmV9azBVK3eR4MzKZIB8OhoEB
5n0tnbmBzC9+GLZTTNgr6LiCHXHn4TwHXNeioaR53EChjmfPlQ8zSOh0yvPV5x1I
YZF4xCBdldsrAzkN1At0HsqPdmbqBunEQ+MoAEpfWn55JR3WDOiN4OTXrScuXKtr
fdOg
-----END CERTIFICATE-----
Generated at Tue Sep 26 13:29:27 2023 by rpki-client on console-ams.rpki-client.org