Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/jQEeO5v13CKDDkTkMN-M855x1Lo.roa
File: jQEeO5v13CKDDkTkMN-M855x1Lo.roa (raw, json)
Hash identifier: y15WPE2g4DbQvAdp0YhJ5NpvI6euj/kf8dySeXM5iHg=
Subject key identifier: 8D:01:1E:3B:9B:F5:DC:22:83:0E:44:E4:30:DF:8C:F3:9E:71:D4:BA
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 018B1965AD4881F998B4304D6CDD6E82A871
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/jQEeO5v13CKDDkTkMN-M855x1Lo.roa
Signing time: Tue 10 Oct 2023 11:42:55 +0000
ROA not before: Tue 10 Oct 2023 11:42:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48716
IP address blocks: 90.156.230.0/24 maxlen: 24
188.225.31.0/24 maxlen: 24
217.151.230.0/24 maxlen: 24
185.247.17.0/24 maxlen: 24
2a03:6f06::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:65:ad:48:81:f9:98:b4:30:4d:6c:dd:6e:82:a8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Oct 10 11:42:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d011e3b9bf5dc22830e44e430df8cf39e71d4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:be:44:ea:22:39:e0:4d:af:06:7b:63:87:
01:11:11:37:29:6f:95:df:7a:e1:3d:57:ad:b4:f2:
02:04:9a:e7:5f:f0:4e:5a:62:0d:23:1b:ac:67:79:
2c:88:a4:02:c7:d8:64:0a:17:7a:62:eb:0b:a9:9e:
55:07:40:69:98:d3:2c:21:70:37:f0:da:f6:54:a8:
88:6b:a0:3a:4a:37:b7:1e:41:4a:11:a8:d2:7a:d0:
67:73:ed:78:25:96:9b:37:e0:a7:f6:c7:fb:13:fc:
7f:6a:90:b8:60:31:08:be:81:92:bd:f5:76:11:39:
a7:3d:cb:dd:5e:6a:51:55:ef:ad:03:b9:aa:81:d4:
fd:be:0b:08:da:b8:f8:7b:7a:35:88:36:d4:9a:de:
0b:f0:f7:48:26:1a:af:2f:1d:a0:4f:81:75:f7:53:
17:c3:c9:85:0e:ab:1e:a5:fe:f0:63:08:33:2e:54:
3d:9a:93:2c:b6:28:01:1e:91:7b:1d:31:47:58:a3:
b8:66:76:19:a3:32:19:fb:08:24:b9:15:ca:92:de:
d5:44:db:33:df:7b:02:55:e1:a1:a7:96:95:71:6e:
35:27:cf:7f:79:1c:7f:1f:10:90:f6:c9:d3:ba:28:
97:c5:49:86:2b:40:8f:d5:18:c9:b1:d2:35:e1:ae:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:01:1E:3B:9B:F5:DC:22:83:0E:44:E4:30:DF:8C:F3:9E:71:D4:BA
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/jQEeO5v13CKDDkTkMN-M855x1Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.230.0/24
185.247.17.0/24
188.225.31.0/24
217.151.230.0/24
IPv6:
2a03:6f06::/32
Signature Algorithm: sha256WithRSAEncryption
be:d9:5d:1c:f1:04:f9:bf:38:af:7d:a0:76:83:dd:e8:09:d5:
82:41:45:cf:52:b7:b7:5c:e2:a2:1a:de:29:cb:a7:f2:cd:44:
88:ee:66:ff:ee:46:e3:c8:47:be:e4:9b:ad:cd:c0:70:d3:62:
16:f0:7d:3e:60:b5:1a:b1:05:fb:50:7c:d7:e4:a0:e3:ee:0a:
13:35:c8:ce:ca:84:81:bb:71:a6:b7:0b:a1:9c:87:30:a1:5c:
1e:d3:78:cb:20:9c:0b:c8:68:bf:50:94:3a:7d:fd:dc:4d:9e:
45:8e:0f:7a:6f:f7:bd:17:98:40:09:9f:dc:82:fe:fc:b9:49:
4a:70:af:71:65:28:b8:72:c8:84:22:30:e0:d0:c5:02:8c:2e:
1d:a4:ac:ba:c8:d3:d2:de:e0:44:b0:5b:1d:54:1d:f6:9b:07:
85:07:f5:0e:c7:81:c8:9a:35:3b:c3:bd:ba:5e:bf:15:fc:34:
9a:a6:e2:40:ba:88:6e:4f:8c:8b:aa:66:7b:29:39:57:44:05:
00:dc:93:c1:18:da:3e:50:5e:22:5d:7d:83:56:bb:48:7f:26:
12:8f:1d:87:a3:02:1c:9e:34:7d:d9:c9:37:71:1c:c2:fe:e0:
5f:03:c4:b6:5b:1d:2e:1a:9c:69:ec:43:20:1f:2e:f8:70:f3:
0e:2b:80:da
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYsZZa1IgfmYtDBNbN1ugqhxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjBiMmIxYzgyOWQ4ODkzNmIxYWRhZWVjOTdmZGQxYjQw
ZDQxZTUwHhcNMjMxMDEwMTE0MjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDAxMWUzYjliZjVkYzIyODMwZTQ0ZTQzMGRmOGNmMzllNzFkNGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntW+ROoiOeBNrwZ7Y4cBERE3KW+V
33rhPVettPICBJrnX/BOWmINIxusZ3ksiKQCx9hkChd6YusLqZ5VB0BpmNMsIXA3
8Nr2VKiIa6A6Sje3HkFKEajSetBnc+14JZabN+Cn9sf7E/x/apC4YDEIvoGSvfV2
ETmnPcvdXmpRVe+tA7mqgdT9vgsI2rj4e3o1iDbUmt4L8PdIJhqvLx2gT4F191MX
w8mFDqsepf7wYwgzLlQ9mpMstigBHpF7HTFHWKO4ZnYZozIZ+wgkuRXKkt7VRNsz
33sCVeGhp5aVcW41J89/eRx/HxCQ9snTuiiXxUmGK0CP1RjJsdI14a46BwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFI0BHjub9dwigw5E5DDfjPOecdS6MB8GA1UdIwQY
MBaAFCFgsrHIKdiJNrGtruyX/dG0DUHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEt
M2RmN2ZhZjM1MzVkLzEvalFFZU81djEzQ0tERGtUa01OLU04NTV4MUxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEtM2RmN2ZhZjM1MzVk
LzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAWpzmAwQA
ufcRAwQAvOEfAwQA2ZfmMA0EAgACMAcDBQAqA28GMA0GCSqGSIb3DQEBCwUAA4IB
AQC+2V0c8QT5vzivfaB2g93oCdWCQUXPUre3XOKiGt4py6fyzUSI7mb/7kbjyEe+
5JutzcBw02IW8H0+YLUasQX7UHzX5KDj7goTNcjOyoSBu3GmtwuhnIcwoVwe03jL
IJwLyGi/UJQ6ff3cTZ5Fjg96b/e9F5hACZ/cgv78uUlKcK9xZSi4csiEIjDg0MUC
jC4dpKy6yNPS3uBEsFsdVB32mweFB/UOx4HImjU7w726Xr8V/DSapuJAuohuT4yL
qmZ7KTlXRAUA3JPBGNo+UF4iXX2DVrtIfyYSjx2HowIcnjR92ck3cRzC/uBfA8S2
Wx0uGpxp7EMgHy74cPMOK4Da
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:55 2024 by rpki-client on console-ams.rpki-client.org