Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/qqCGiMFn0AYCWcXYiBdh3QTny-Y.roa
File: qqCGiMFn0AYCWcXYiBdh3QTny-Y.roa (raw, json)
Hash identifier: 622G+B9ldAwyIjQqL4YvehyMQGFC74cUXIEnvVGcCnM=
Subject key identifier: AA:A0:86:88:C1:67:D0:06:02:59:C5:D8:88:17:61:DD:04:E7:CB:E6
Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial: 01856CB840D108D9359A94F5136DAE8EEF25
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/qqCGiMFn0AYCWcXYiBdh3QTny-Y.roa
Signing time: Sun 01 Jan 2023 09:44:52 +0000
ROA not before: Sun 01 Jan 2023 09:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 143.196.125.0/24 maxlen: 24
143.196.124.0/24 maxlen: 24
143.196.126.0/24 maxlen: 24
143.196.127.0/24 maxlen: 24
143.196.130.0/24 maxlen: 24
143.196.144.0/24 maxlen: 24
143.196.143.0/24 maxlen: 24
143.196.159.0/24 maxlen: 24
143.196.158.0/24 maxlen: 24
143.196.0.0/24 maxlen: 24
143.196.1.0/24 maxlen: 24
143.196.17.0/24 maxlen: 24
143.196.16.0/24 maxlen: 24
143.196.20.0/24 maxlen: 24
143.196.21.0/24 maxlen: 24
143.196.18.0/24 maxlen: 24
143.196.250.0/24 maxlen: 24
143.196.252.0/24 maxlen: 24
143.196.253.0/24 maxlen: 24
143.196.160.0/24 maxlen: 24
143.196.161.0/24 maxlen: 24
143.196.163.0/24 maxlen: 24
143.196.162.0/24 maxlen: 24
143.196.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Aug 2023 11:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:40:d1:08:d9:35:9a:94:f5:13:6d:ae:8e:ef:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Validity
Not Before: Jan 1 09:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaa08688c167d0060259c5d8881761dd04e7cbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:f9:43:3f:e7:af:17:9b:3f:bb:18:17:c5:
bd:b5:31:37:a0:33:65:5c:ed:a0:ba:8c:9f:85:a2:
d3:29:0e:c7:56:89:9e:34:fd:82:c3:d0:50:2c:5b:
5c:67:f5:9c:d5:d1:a5:0d:71:ee:16:ca:39:06:99:
08:07:8b:7b:2c:72:7f:9b:89:13:f9:47:4c:ae:61:
f0:df:cc:cc:fb:ef:6e:20:68:be:57:d3:ad:d1:f2:
66:7d:ab:03:9d:14:c4:79:ab:3b:28:16:8b:d5:61:
be:4a:6f:00:27:34:21:26:0e:51:72:c5:2e:95:d3:
05:77:4f:12:67:c3:1b:29:a2:cb:13:e8:6c:4a:a5:
a7:1c:25:3e:2c:11:e3:ee:f5:c0:2a:c5:77:28:2b:
4c:c7:b5:39:00:25:1b:ba:7e:e5:fb:42:19:b7:ca:
2d:c6:b4:fd:29:8c:47:20:94:e8:48:34:d5:39:58:
50:72:c8:37:9d:ee:92:80:b9:15:03:c5:31:60:44:
72:04:87:b1:71:00:d6:60:25:3c:9d:49:26:58:a3:
56:60:fd:42:1c:28:04:25:be:02:98:4e:c2:1b:11:
bd:5f:57:63:1a:5e:8f:23:c7:92:00:ec:91:ce:53:
51:ca:7b:22:4c:dc:8a:ae:8d:e8:41:55:dc:cc:c4:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A0:86:88:C1:67:D0:06:02:59:C5:D8:88:17:61:DD:04:E7:CB:E6
X509v3 Authority Key Identifier:
keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/qqCGiMFn0AYCWcXYiBdh3QTny-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.196.0.0/23
143.196.16.0-143.196.18.255
143.196.20.0/23
143.196.124.0/22
143.196.130.0/24
143.196.143.0-143.196.144.255
143.196.158.0-143.196.164.255
143.196.250.0/24
143.196.252.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:f2:b0:5a:f7:56:cf:f1:63:a7:9c:18:56:9f:66:97:73:74:
06:0b:46:0a:32:10:4c:2e:d6:e5:81:7a:9e:d5:21:f2:ca:ac:
d1:83:12:ff:54:f1:70:df:f8:1b:9a:72:be:17:04:c0:58:b5:
c5:83:26:01:54:3e:0e:f2:f6:b3:04:59:ee:0e:e2:6a:00:d5:
cf:fc:91:8c:0a:31:b2:4f:d4:f9:fe:f0:4d:e5:63:e3:b4:20:
04:92:6d:3f:ad:81:5a:2b:30:9e:ed:c6:b6:3c:98:dd:15:75:
db:ab:9f:d7:17:e7:79:ba:28:b3:cb:52:86:62:d8:65:49:be:
b3:ec:37:de:75:8d:2f:82:03:eb:56:5c:1a:a6:aa:61:ea:31:
77:25:03:21:16:51:0c:87:be:51:a0:31:f0:fe:9e:8c:05:ab:
42:fb:ef:2c:07:1e:55:2f:b6:83:af:9e:9b:15:65:29:01:90:
b8:0c:f3:ad:a9:d5:43:3f:6f:df:71:03:37:33:84:c6:cf:7d:
d3:8f:91:bf:64:45:7d:5e:4b:7c:e3:65:12:b9:b1:b7:02:e9:
70:4e:6a:37:53:f1:da:2f:23:44:8a:83:fa:1a:1a:69:8e:e7:
22:1b:cf:e3:4b:30:3b:db:89:60:09:81:28:39:a8:56:e2:2d:
e0:82:42:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAYVsuEDRCNk1mpT1E22uju8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MWJkMTQwMjkyNGVjMmE2NDRlOGY1NGU2OTk0Y2I0YWM4
ZTI0YTYwHhcNMjMwMTAxMDk0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWEwODY4OGMxNjdkMDA2MDI1OWM1ZDg4ODE3NjFkZDA0ZTdjYmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRn5Qz/nrxebP7sYF8W9tTE3oDNl
XO2guoyfhaLTKQ7HVomeNP2Cw9BQLFtcZ/Wc1dGlDXHuFso5BpkIB4t7LHJ/m4kT
+UdMrmHw38zM++9uIGi+V9Ot0fJmfasDnRTEeas7KBaL1WG+Sm8AJzQhJg5RcsUu
ldMFd08SZ8MbKaLLE+hsSqWnHCU+LBHj7vXAKsV3KCtMx7U5ACUbun7l+0IZt8ot
xrT9KYxHIJToSDTVOVhQcsg3ne6SgLkVA8UxYERyBIexcQDWYCU8nUkmWKNWYP1C
HCgEJb4CmE7CGxG9X1djGl6PI8eSAOyRzlNRynsiTNyKro3oQVXczMQeTwIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFKqghojBZ9AGAlnF2IgXYd0E58vmMB8GA1UdIwQY
MBaAFIgb0UApJOwqZE6PVOaZTLSsjiSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMt
N2EwYjE0NWNmNjJiLzEvcXFDR2lNRm4wQVlDV2NYWWlCZGgzUVRueS1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMtN2EwYjE0NWNmNjJi
LzEvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBj8QAMAwD
BASPxBADBACPxBIDBAGPxBQDBAKPxHwDBACPxIIwDAMEAI/EjwMEAI/EkDAMAwQB
j8SeAwQAj8SkAwQAj8T6AwQBj8T8MA0GCSqGSIb3DQEBCwUAA4IBAQBb8rBa91bP
8WOnnBhWn2aXc3QGC0YKMhBMLtblgXqe1SHyyqzRgxL/VPFw3/gbmnK+FwTAWLXF
gyYBVD4O8vazBFnuDuJqANXP/JGMCjGyT9T5/vBN5WPjtCAEkm0/rYFaKzCe7ca2
PJjdFXXbq5/XF+d5uiizy1KGYthlSb6z7DfedY0vggPrVlwapqph6jF3JQMhFlEM
h75RoDHw/p6MBatC++8sBx5VL7aDr56bFWUpAZC4DPOtqdVDP2/fcQM3M4TGz33T
j5G/ZEV9Xkt842USubG3AulwTmo3U/HaLyNEioP6GhppjuciG8/jSzA724lgCYEo
OahW4i3ggkJH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:11 2024 by rpki-client on console-ams.rpki-client.org