Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/qs0I0-cVQWnqkls9nat1yZki5_s.roa
File: qs0I0-cVQWnqkls9nat1yZki5_s.roa (raw, json)
Hash identifier: wv+VXyXIW+RZiKGcPMZ865MTW0+DLh6Od3GWSdnOBRs=
Subject key identifier: AA:CD:08:D3:E7:15:41:69:EA:92:5B:3D:9D:AB:75:C9:99:22:E7:FB
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01891FB73FDC647947ACCF378DE505B6E3F4
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/qs0I0-cVQWnqkls9nat1yZki5_s.roa
Signing time: Tue 04 Jul 2023 07:04:10 +0000
ROA not before: Tue 04 Jul 2023 07:04:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 93.115.155.0/24 maxlen: 24
86.104.209.0/24 maxlen: 24
217.19.1.0/24 maxlen: 24
89.42.40.0/24 maxlen: 24
185.77.249.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:b7:3f:dc:64:79:47:ac:cf:37:8d:e5:05:b6:e3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jul 4 07:04:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aacd08d3e7154169ea925b3d9dab75c99922e7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:9f:7e:11:63:72:e9:56:c3:da:e0:de:c8:
42:cb:7c:4b:61:0e:77:70:4e:fa:e2:4d:07:f5:b6:
6b:20:48:55:88:40:7f:95:27:b3:7f:ef:f0:22:36:
7c:7d:78:39:89:6d:e9:0b:0c:57:be:44:47:dd:20:
d2:06:50:0c:c8:78:39:3e:34:5c:5a:a1:15:9a:e6:
59:5b:30:41:8d:d1:ed:39:7b:4d:ba:d1:65:c2:ae:
fa:f1:ef:1e:12:2e:06:5f:4d:a9:ab:21:b4:82:d3:
33:75:85:9e:69:31:bf:e4:11:15:b3:2d:c5:88:ee:
88:18:b4:51:b6:7b:c1:90:0c:33:a9:40:fe:60:8c:
6a:db:92:2f:e4:c3:2f:40:e3:56:81:bd:33:10:73:
2d:ae:91:b3:98:f4:77:12:e3:38:5c:78:ee:2c:3f:
c6:f4:45:c5:1d:e3:92:0b:e7:a1:43:66:ba:1b:b9:
03:85:59:cd:73:c2:d9:2f:45:b2:4b:c7:43:46:16:
52:59:0d:af:2a:4c:38:0d:85:e2:6b:38:ce:e9:dd:
8c:8c:b4:fb:19:89:b0:1b:63:76:47:7c:c0:1d:30:
ae:d0:7b:3a:95:9e:d2:1a:d2:dc:93:da:c1:fb:2a:
93:a4:54:45:1a:86:cd:b5:78:58:b8:45:84:e5:0b:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CD:08:D3:E7:15:41:69:EA:92:5B:3D:9D:AB:75:C9:99:22:E7:FB
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/qs0I0-cVQWnqkls9nat1yZki5_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
86.104.209.0/24
89.42.40.0/24
93.115.155.0/24
185.77.249.0/24
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
21:52:c6:a0:2b:45:59:e7:41:3f:45:d8:be:c9:94:37:c2:1c:
9d:ea:3a:be:7d:3c:0a:ba:e4:ed:d1:19:11:4c:00:95:1e:76:
ee:1a:af:47:5d:83:29:c9:b4:71:75:26:9b:6e:51:e2:e7:51:
37:c0:02:32:7c:8c:d7:c4:2b:04:9f:2d:f0:e2:16:ad:23:26:
fe:49:ab:6f:5a:fe:9d:ca:b6:12:ff:df:83:a9:0d:51:52:b4:
bf:5c:23:f8:b8:33:6c:69:25:ec:84:a1:30:9a:8b:70:f4:22:
e8:da:a1:06:c5:52:75:9b:36:cd:40:ed:40:74:49:ad:a1:dd:
12:33:eb:3c:a1:dc:7d:fd:de:ac:36:6c:6b:ca:bf:1e:68:ab:
cd:a6:7a:04:01:4f:a6:9b:90:eb:57:d1:3f:25:d1:ea:3e:5e:
67:ba:a4:4a:21:a0:03:b4:5a:c7:5e:ad:69:d7:f7:39:3e:b7:
33:df:a1:c6:05:03:3f:0c:33:89:8e:89:66:6e:e7:59:30:1c:
05:0f:bb:f5:a6:a7:a2:d7:ad:14:76:05:29:98:ed:70:e9:54:
78:1d:cb:ee:e7:e8:9c:b6:d4:bb:d7:00:d7:97:a4:7d:f5:a1:
e8:b4:32:a0:c4:58:ec:85:82:1c:12:a4:ed:71:0a:8d:40:3d:
8c:16:aa:8d
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYkftz/cZHlHrM83jeUFtuP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMwNzA0MDcwNDEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWNkMDhkM2U3MTU0MTY5ZWE5MjViM2Q5ZGFiNzVjOTk5MjJlN2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L+ffhFjculWw9rg3shCy3xLYQ53
cE764k0H9bZrIEhViEB/lSezf+/wIjZ8fXg5iW3pCwxXvkRH3SDSBlAMyHg5PjRc
WqEVmuZZWzBBjdHtOXtNutFlwq768e8eEi4GX02pqyG0gtMzdYWeaTG/5BEVsy3F
iO6IGLRRtnvBkAwzqUD+YIxq25Iv5MMvQONWgb0zEHMtrpGzmPR3EuM4XHjuLD/G
9EXFHeOSC+ehQ2a6G7kDhVnNc8LZL0WyS8dDRhZSWQ2vKkw4DYXiazjO6d2MjLT7
GYmwG2N2R3zAHTCu0Hs6lZ7SGtLck9rB+yqTpFRFGobNtXhYuEWE5QveBQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFKrNCNPnFUFp6pJbPZ2rdcmZIuf7MB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvcXMwSTAtY1ZRV25xa2xzOW5hdDF5WmtpNV9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVPc7AwQA
VmjRAwQAWSooAwQAXXObAwQAuU35AwQA2RMBMA0GCSqGSIb3DQEBCwUAA4IBAQAh
UsagK0VZ50E/Rdi+yZQ3whyd6jq+fTwKuuTt0RkRTACVHnbuGq9HXYMpybRxdSab
blHi51E3wAIyfIzXxCsEny3w4hatIyb+SatvWv6dyrYS/9+DqQ1RUrS/XCP4uDNs
aSXshKEwmotw9CLo2qEGxVJ1mzbNQO1AdEmtod0SM+s8odx9/d6sNmxryr8eaKvN
pnoEAU+mm5DrV9E/JdHqPl5nuqRKIaADtFrHXq1p1/c5Prcz36HGBQM/DDOJjolm
budZMBwFD7v1pqei160UdgUpmO1w6VR4Hcvu5+icttS71wDXl6R99aHotDKgxFjs
hYIcEqTtcQqNQD2MFqqN
Generated at Tue Aug 29 02:52:43 2023 by rpki-client on console-ams.rpki-client.org