Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/qmYOao2fQnkK-Une2AmDjaiSTdk.roa
File: qmYOao2fQnkK-Une2AmDjaiSTdk.roa (raw, json)
Hash identifier: 4cuEgiy3o/UeoWkOr20thw/8FFPhXa5xOvRHxllD1v4=
Subject key identifier: AA:66:0E:6A:8D:9F:42:79:0A:F9:49:DE:D8:09:83:8D:A8:92:4D:D9
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018797ACE068D9A5A8568FE17F6DFD5BB22C
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/qmYOao2fQnkK-Une2AmDjaiSTdk.roa
Signing time: Wed 19 Apr 2023 04:01:41 +0000
ROA not before: Wed 19 Apr 2023 04:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.153.132.0/24 maxlen: 24
46.102.174.0/24 maxlen: 24
176.223.190.0/24 maxlen: 24
94.177.113.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:97:ac:e0:68:d9:a5:a8:56:8f:e1:7f:6d:fd:5b:b2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 19 04:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa660e6a8d9f42790af949ded809838da8924dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:8c:fe:91:1a:c6:bf:a4:6d:a7:36:bf:27:
44:42:e3:66:3c:d3:12:b2:da:84:a1:a9:2e:14:61:
17:1b:6e:e5:15:c0:ed:e0:1d:11:56:eb:91:9e:c3:
c1:84:44:ab:d9:d8:96:fc:6c:9a:ae:56:c6:c0:89:
e9:64:47:00:11:13:d0:bb:34:08:14:17:ff:da:a5:
d9:74:08:66:0d:c6:b3:20:72:b5:d9:83:e1:c4:dc:
67:c2:f2:19:2f:0d:23:12:70:f6:f4:60:b7:40:8b:
6d:22:9c:b5:ae:a0:a3:32:f2:62:0e:d4:35:f5:4b:
b5:81:14:69:5b:9b:74:0f:54:68:24:b2:17:a9:ef:
a7:31:9c:7f:35:6c:2f:fa:f4:41:07:30:1d:5e:33:
ac:63:ad:9a:8b:99:bf:86:c4:9c:5f:3b:1e:89:fa:
9f:ed:a0:48:b6:a5:86:08:a2:23:d1:da:5e:ab:e9:
f1:d6:a0:c0:da:6a:90:94:2c:05:f5:88:c9:53:b0:
4e:8c:a2:63:c6:82:e8:d1:aa:d3:b1:46:b4:06:7a:
9e:55:bb:f7:08:e7:8e:52:c2:30:7a:02:ae:7d:c5:
ff:dc:93:4e:f2:ae:b1:fd:1f:d3:e3:b9:d6:a9:6b:
30:a9:d2:44:70:d1:f8:1f:3b:88:08:b2:a6:31:d2:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:66:0E:6A:8D:9F:42:79:0A:F9:49:DE:D8:09:83:8D:A8:92:4D:D9
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/qmYOao2fQnkK-Une2AmDjaiSTdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.132.0/24
46.102.174.0/24
94.177.113.0/24
94.177.118.0/24
176.223.190.0/24
Signature Algorithm: sha256WithRSAEncryption
49:8b:c0:cf:f9:46:aa:c6:24:1d:e6:ff:d1:79:be:07:43:11:
d6:70:e5:26:6c:04:f6:a7:b5:47:72:29:6e:15:79:5f:2a:ee:
48:ea:75:c3:19:6e:9e:a1:52:9f:de:76:1a:29:03:0b:b4:6d:
24:3e:ed:5b:b0:d8:5a:c7:f6:3e:1f:09:ce:ee:23:6b:4f:72:
41:00:c1:1b:c9:e9:eb:21:b6:61:44:78:56:4a:0b:5a:84:01:
d7:0e:e0:7f:01:15:cf:9b:30:ef:d6:69:b2:14:9e:cb:57:0d:
11:9c:3c:6f:2a:53:01:28:85:90:63:f3:c8:1d:ec:12:6e:65:
70:85:7c:2d:bd:80:cc:43:19:f4:b2:b8:0f:ce:27:1f:a5:41:
6a:f4:d0:ff:0d:4c:38:f5:f7:44:27:ab:2b:2b:d5:e5:60:39:
a8:39:28:80:15:a6:57:a5:59:81:90:7b:3a:6d:13:60:91:58:
70:bf:6e:17:fd:62:02:40:e2:d3:63:58:7b:7b:11:19:46:4c:
d4:a5:e6:a2:74:da:88:06:64:c5:fc:48:a5:27:75:69:a6:da:
5a:f4:7b:d1:7e:90:fe:fa:13:32:6e:d6:a9:e6:d1:14:e3:82:
e4:30:c6:44:d8:e4:78:4d:32:9a:a0:50:35:92:58:19:9e:54:
a1:c3:3f:23
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYeXrOBo2aWoVo/hf239W7IsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMwNDE5MDQwMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTY2MGU2YThkOWY0Mjc5MGFmOTQ5ZGVkODA5ODM4ZGE4OTI0ZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYaM/pEaxr+kbac2vydEQuNmPNMS
stqEoakuFGEXG27lFcDt4B0RVuuRnsPBhESr2diW/GyarlbGwInpZEcAERPQuzQI
FBf/2qXZdAhmDcazIHK12YPhxNxnwvIZLw0jEnD29GC3QIttIpy1rqCjMvJiDtQ1
9Uu1gRRpW5t0D1RoJLIXqe+nMZx/NWwv+vRBBzAdXjOsY62ai5m/hsScXzseifqf
7aBItqWGCKIj0dpeq+nx1qDA2mqQlCwF9YjJU7BOjKJjxoLo0arTsUa0BnqeVbv3
COeOUsIwegKufcX/3JNO8q6x/R/T47nWqWswqdJEcNH4HzuICLKmMdL5iQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKpmDmqNn0J5CvlJ3tgJg42okk3ZMB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvcW1ZT2FvMmZRbmtLLVVuZTJBbURqYWlTVGRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAJZmEAwQA
LmauAwQAXrFxAwQAXrF2AwQAsN++MA0GCSqGSIb3DQEBCwUAA4IBAQBJi8DP+Uaq
xiQd5v/Reb4HQxHWcOUmbAT2p7VHciluFXlfKu5I6nXDGW6eoVKf3nYaKQMLtG0k
Pu1bsNhax/Y+HwnO7iNrT3JBAMEbyenrIbZhRHhWSgtahAHXDuB/ARXPmzDv1mmy
FJ7LVw0RnDxvKlMBKIWQY/PIHewSbmVwhXwtvYDMQxn0srgPzicfpUFq9ND/DUw4
9fdEJ6srK9XlYDmoOSiAFaZXpVmBkHs6bRNgkVhwv24X/WICQOLTY1h7exEZRkzU
peaidNqIBmTF/EilJ3Vpptpa9HvRfpD++hMybtap5tEU44LkMMZE2OR4TTKaoFA1
klgZnlShwz8j
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org