Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/QLDWhXVMyOC0c__qafP0bQnv8gQ.roa
File: QLDWhXVMyOC0c__qafP0bQnv8gQ.roa (raw, json)
Hash identifier: c0tvF4q8IJEYMvWriO0CV7yxBChCKrCxtsFCLiqX4Ck=
Subject key identifier: 40:B0:D6:85:75:4C:C8:E0:B4:73:FF:EA:69:F3:F4:6D:09:EF:F2:04
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 018CA4DE8F9FAB601F0AC0EB4E9A7645E701
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/QLDWhXVMyOC0c__qafP0bQnv8gQ.roa
Signing time: Tue 26 Dec 2023 06:44:58 +0000
ROA not before: Tue 26 Dec 2023 06:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29555
IP address blocks: 85.117.98.0/24 maxlen: 24
85.117.96.0/24 maxlen: 24
85.117.97.0/24 maxlen: 24
85.117.99.0/24 maxlen: 24
85.117.100.0/24 maxlen: 24
85.117.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 07:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a4:de:8f:9f:ab:60:1f:0a:c0:eb:4e:9a:76:45:e7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Dec 26 06:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40b0d685754cc8e0b473ffea69f3f46d09eff204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:a6:e9:73:98:c5:47:a8:44:37:c5:e0:96:
6b:92:7d:6e:73:36:ff:6d:34:9c:07:cc:7b:de:f4:
e8:ed:68:d4:7b:4a:ca:fa:1f:f0:44:ed:aa:a8:2f:
ea:50:fc:57:dd:9e:ec:fc:01:49:11:91:1a:5b:58:
61:e2:27:c9:93:e1:ed:25:66:6f:e2:a4:e6:da:5e:
67:50:8b:93:5f:90:a2:7c:26:a3:c1:97:8d:33:2f:
02:53:ac:46:15:a5:f3:bb:c6:37:16:ac:23:da:7a:
ff:0a:ca:58:dd:de:a1:d0:e2:87:88:85:c6:7a:ee:
c0:71:13:23:bb:59:9c:84:81:c1:90:df:16:48:cf:
d9:fb:e4:5a:29:69:20:ec:3c:90:d2:d7:eb:11:b1:
df:3d:1d:6c:5f:1e:1c:af:f9:9f:5d:00:04:a8:09:
a5:2d:20:65:4e:14:02:19:e5:0e:b1:fe:c4:a0:3c:
d1:84:c1:05:85:01:3b:b2:ce:d9:ff:c3:0e:1d:86:
6d:d0:33:4b:86:ea:e9:f8:e9:1b:31:a1:cb:8f:0e:
96:1d:ce:17:cd:70:d8:20:aa:b8:23:3d:c1:e8:1e:
0b:fd:2f:6f:6d:15:97:97:82:c3:77:94:96:c2:7a:
09:a9:0e:d8:3b:5b:e6:c8:a9:43:0a:a9:31:26:9e:
9e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B0:D6:85:75:4C:C8:E0:B4:73:FF:EA:69:F3:F4:6D:09:EF:F2:04
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/QLDWhXVMyOC0c__qafP0bQnv8gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.96.0-85.117.101.255
Signature Algorithm: sha256WithRSAEncryption
96:e7:cd:87:1c:ee:9f:db:d5:fa:15:75:22:92:cc:ed:d5:a0:
a9:c1:39:a7:f1:80:30:85:68:41:20:c9:f2:3a:cc:db:ce:ff:
a6:01:b1:81:31:99:c5:4a:cf:56:c0:38:c9:66:5d:cb:09:9e:
62:51:96:a6:5d:fc:46:d3:81:b2:f8:4b:8f:9b:7f:8d:da:37:
1d:a3:ad:cf:a6:b6:0c:01:31:ba:66:ab:bd:92:20:8d:4f:dc:
23:4c:58:dc:6f:66:a1:77:3a:79:42:85:47:c6:f4:e2:59:f8:
c8:04:df:5b:70:83:20:3d:26:cc:79:90:62:e7:b0:2e:29:48:
9f:31:3d:85:8e:4e:d7:6a:39:8c:f1:86:ab:c3:da:9b:f7:40:
85:fa:44:df:a6:0f:df:bb:df:24:8d:35:67:f2:5c:5c:3d:3f:
58:12:3d:62:09:50:f7:98:10:6e:d3:0f:f3:d5:55:c8:bd:8f:
2d:ef:6c:6e:07:89:a0:e5:dc:1e:c3:ec:d9:66:8d:73:71:0a:
94:bb:66:1f:55:0d:aa:70:52:35:bd:f0:3b:6a:af:1a:1e:b3:
f1:1c:f3:3f:96:6c:3c:e0:9d:b2:8d:1a:c5:cb:4b:7a:8e:ee:
fb:cd:41:97:e6:83:31:24:7f:57:92:e3:30:11:37:df:09:f3:
1f:70:20:37
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYyk3o+fq2AfCsDrTpp2RecBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYmJhMDczNWEwN2U0MGNhMzIwMjYyNzhiMjY3ODY3OGY4
YmFjZDkwHhcNMjMxMjI2MDY0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGIwZDY4NTc1NGNjOGUwYjQ3M2ZmZWE2OWYzZjQ2ZDA5ZWZmMjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMqm6XOYxUeoRDfF4JZrkn1uczb/
bTScB8x73vTo7WjUe0rK+h/wRO2qqC/qUPxX3Z7s/AFJEZEaW1hh4ifJk+HtJWZv
4qTm2l5nUIuTX5CifCajwZeNMy8CU6xGFaXzu8Y3Fqwj2nr/CspY3d6h0OKHiIXG
eu7AcRMju1mchIHBkN8WSM/Z++RaKWkg7DyQ0tfrEbHfPR1sXx4cr/mfXQAEqAml
LSBlThQCGeUOsf7EoDzRhMEFhQE7ss7Z/8MOHYZt0DNLhurp+OkbMaHLjw6WHc4X
zXDYIKq4Iz3B6B4L/S9vbRWXl4LDd5SWwnoJqQ7YO1vmyKlDCqkxJp6ecwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFECw1oV1TMjgtHP/6mnz9G0J7/IEMB8GA1UdIwQY
MBaAFF67oHNaB+QMoyAmJ4smeGePi6zZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAt
MzIxMmI2ODU4NGU5LzEvUUxEV2hYVk15T0MwY19fcWFmUDBiUW52OGdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAtMzIxMmI2ODU4NGU5
LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVVdWAD
BAFVdWQwDQYJKoZIhvcNAQELBQADggEBAJbnzYcc7p/b1foVdSKSzO3VoKnBOafx
gDCFaEEgyfI6zNvO/6YBsYExmcVKz1bAOMlmXcsJnmJRlqZd/EbTgbL4S4+bf43a
Nx2jrc+mtgwBMbpmq72SII1P3CNMWNxvZqF3OnlChUfG9OJZ+MgE31twgyA9Jsx5
kGLnsC4pSJ8xPYWOTtdqOYzxhqvD2pv3QIX6RN+mD9+73ySNNWfyXFw9P1gSPWIJ
UPeYEG7TD/PVVci9jy3vbG4HiaDl3B7D7NlmjXNxCpS7Zh9VDapwUjW98Dtqrxoe
s/Ec8z+WbDzgnbKNGsXLS3qO7vvNQZfmgzEkf1eS4zARN98J8x9wIDc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:08 2024 by rpki-client on console-fra.rpki-client.org