Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/qOIg0F8vJB_RA4CU6a50IepVBAk.roa
File: qOIg0F8vJB_RA4CU6a50IepVBAk.roa (raw, json)
Hash identifier: z/KL0AiZ2Fbs0bzPF8zCiIpsx6niC/V6jSPZdQAZ7BE=
Subject key identifier: A8:E2:20:D0:5F:2F:24:1F:D1:03:80:94:E9:AE:74:21:EA:55:04:09
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0185B5F98B7A60F60F4B0464C83BE49F27D7
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/qOIg0F8vJB_RA4CU6a50IepVBAk.roa
Signing time: Sun 15 Jan 2023 15:08:28 +0000
ROA not before: Sun 15 Jan 2023 15:08:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 46.23.100.0/22 maxlen: 22
5.10.248.0/22 maxlen: 22
188.64.12.0/22 maxlen: 22
185.81.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b5:f9:8b:7a:60:f6:0f:4b:04:64:c8:3b:e4:9f:27:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 15 15:08:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8e220d05f2f241fd1038094e9ae7421ea550409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:34:b3:61:61:be:37:d4:ca:ea:84:4f:e2:
6d:d3:e6:ed:42:4d:e0:a6:9e:89:e7:c3:22:4b:46:
02:53:99:ff:ca:f0:06:58:b8:fa:8e:b0:93:bd:ef:
ad:5b:39:34:87:a2:aa:b7:d1:6e:80:33:6c:2b:e6:
14:bb:d7:31:53:d3:c0:14:8c:41:49:16:62:ff:05:
c5:09:ad:aa:7d:9a:5e:15:8c:51:7f:c3:53:56:38:
ee:01:ec:1a:d0:22:62:d8:c8:ef:0d:d6:8e:28:52:
6b:05:1f:94:28:96:62:31:50:fa:06:53:65:11:42:
29:74:4b:ad:dc:40:5c:f4:a0:50:60:68:98:25:1f:
9a:35:9a:b3:95:f6:0e:2d:8e:f9:f0:1f:b4:a0:fb:
eb:2f:fd:49:b7:78:46:36:1a:d0:97:56:bb:28:c6:
c5:e9:57:5c:61:e7:37:46:21:e7:bb:77:34:e3:cd:
30:36:f4:84:13:e2:f2:19:f3:bd:ef:e6:81:97:1b:
c5:0b:3d:84:9b:6a:bb:df:3a:a5:fc:3f:a3:50:83:
db:2e:81:60:7f:8a:16:32:92:d7:62:b6:e0:db:6f:
4d:9f:af:ea:16:c5:f7:82:cb:20:09:e9:68:f3:13:
3f:ed:20:81:91:26:24:3d:e5:28:86:11:27:74:da:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E2:20:D0:5F:2F:24:1F:D1:03:80:94:E9:AE:74:21:EA:55:04:09
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/qOIg0F8vJB_RA4CU6a50IepVBAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.248.0/22
46.23.100.0/22
185.81.217.0/24
188.64.12.0/22
Signature Algorithm: sha256WithRSAEncryption
74:9d:da:38:0e:ee:93:e2:9d:ee:a8:60:af:07:bc:ac:f6:d6:
b2:2f:0b:92:ba:41:52:af:dc:eb:54:7f:22:ba:eb:cc:49:ff:
de:e1:25:90:81:86:e4:13:95:2a:ca:6a:ba:b6:5d:e7:50:41:
00:6c:d9:74:cb:4e:e8:40:f2:33:51:b3:9c:ad:a4:04:3c:20:
41:c8:5f:61:40:2e:17:93:92:58:ae:ad:1f:52:8f:03:54:4a:
9a:7a:a2:31:b6:fe:7a:1a:21:5f:11:01:f8:a7:0d:07:5e:8f:
f2:51:20:7e:d0:63:c5:40:39:32:69:a5:b9:c9:d8:7e:18:b8:
55:2c:57:6a:9e:91:e4:1e:e1:74:ff:aa:e4:da:d7:3b:e7:bf:
bb:7f:31:2a:25:88:9e:c8:a3:28:4e:0b:2f:ab:3e:59:3f:34:
55:1f:57:a6:f8:80:7b:1e:06:ef:ce:3b:1a:ba:40:2d:ba:c0:
50:56:65:bd:ac:f1:49:65:74:d1:3a:64:ce:24:25:3d:2e:2a:
3a:2d:c0:77:7d:db:0d:1b:0e:c4:72:c1:57:de:03:d9:c3:fe:
6f:aa:4e:74:56:85:3e:b9:25:45:39:f3:cb:e2:36:1e:8e:a8:
43:47:16:b1:47:ab:4f:9f:8e:13:20:0b:e2:05:3b:0e:1a:5f:
da:cc:6e:a6
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYW1+Yt6YPYPSwRkyDvknyfXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMTE1MTUwODI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGUyMjBkMDVmMmYyNDFmZDEwMzgwOTRlOWFlNzQyMWVhNTUwNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz900s2FhvjfUyuqET+Jt0+btQk3g
pp6J58MiS0YCU5n/yvAGWLj6jrCTve+tWzk0h6Kqt9FugDNsK+YUu9cxU9PAFIxB
SRZi/wXFCa2qfZpeFYxRf8NTVjjuAewa0CJi2MjvDdaOKFJrBR+UKJZiMVD6BlNl
EUIpdEut3EBc9KBQYGiYJR+aNZqzlfYOLY758B+0oPvrL/1Jt3hGNhrQl1a7KMbF
6VdcYec3RiHnu3c0480wNvSEE+LyGfO97+aBlxvFCz2Em2q73zql/D+jUIPbLoFg
f4oWMpLXYrbg229Nn6/qFsX3gssgCelo8xM/7SCBkSYkPeUohhEndNriHwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKjiINBfLyQf0QOAlOmudCHqVQQJMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvcU9JZzBGOHZKQl9SQTRDVTZhNTBJZXBWQkFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCBQr4AwQC
LhdkAwQAuVHZAwQCvEAMMA0GCSqGSIb3DQEBCwUAA4IBAQB0ndo4Du6T4p3uqGCv
B7ys9tayLwuSukFSr9zrVH8iuuvMSf/e4SWQgYbkE5Uqymq6tl3nUEEAbNl0y07o
QPIzUbOcraQEPCBByF9hQC4Xk5JYrq0fUo8DVEqaeqIxtv56GiFfEQH4pw0HXo/y
USB+0GPFQDkyaaW5ydh+GLhVLFdqnpHkHuF0/6rk2tc757+7fzEqJYieyKMoTgsv
qz5ZPzRVH1em+IB7HgbvzjsaukAtusBQVmW9rPFJZXTROmTOJCU9Lio6LcB3fdsN
Gw7EcsFX3gPZw/5vqk50VoU+uSVFOfPL4jYejqhDRxaxR6tPn44TIAviBTsOGl/a
zG6m
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org