Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/QJ6EpHqE2zWqNA-lbEEbaMnqcMU.roa
File: QJ6EpHqE2zWqNA-lbEEbaMnqcMU.roa (raw, json)
Hash identifier: Adi5GZ7j7/6EEs+7JtxPQmeZQRSTDhS+SMA0W/meJ2U=
Subject key identifier: 40:9E:84:A4:7A:84:DB:35:AA:34:0F:A5:6C:41:1B:68:C9:EA:70:C5
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 0186DF5A7084CA2B07D810F790CA17F296EB
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/QJ6EpHqE2zWqNA-lbEEbaMnqcMU.roa
Signing time: Tue 14 Mar 2023 09:01:31 +0000
ROA not before: Tue 14 Mar 2023 09:01:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20910
IP address blocks: 89.191.96.0/19 maxlen: 32
91.188.32.0/19 maxlen: 32
85.115.96.0/19 maxlen: 32
79.132.64.0/19 maxlen: 32
93.177.192.0/18 maxlen: 32
62.84.0.0/19 maxlen: 32
80.255.224.0/20 maxlen: 20
185.144.184.0/22 maxlen: 32
188.112.128.0/18 maxlen: 32
77.38.128.0/17 maxlen: 32
89.18.192.0/19 maxlen: 32
195.244.128.0/20 maxlen: 32
91.123.64.0/20 maxlen: 32
62.205.192.0/18 maxlen: 18
87.226.0.0/17 maxlen: 32
217.198.224.0/20 maxlen: 32
213.180.96.0/19 maxlen: 32
195.62.128.0/19 maxlen: 32
94.30.128.0/17 maxlen: 32
217.199.96.0/19 maxlen: 32
217.24.64.0/20 maxlen: 32
79.135.128.0/19 maxlen: 32
37.148.168.0/21 maxlen: 32
80.254.208.0/20 maxlen: 32
85.234.160.0/19 maxlen: 32
109.110.0.0/19 maxlen: 32
91.142.0.0/20 maxlen: 32
136.169.0.0/17 maxlen: 17
89.201.0.0/17 maxlen: 32
2a00:f4a0::/29 maxlen: 29
2a00:9000::/29 maxlen: 32
2a03:6740::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:5a:70:84:ca:2b:07:d8:10:f7:90:ca:17:f2:96:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Mar 14 09:01:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=409e84a47a84db35aa340fa56c411b68c9ea70c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a0:f3:b3:a3:6a:29:17:54:de:c8:3e:1e:c8:
2d:eb:1d:05:2c:b2:ec:80:3d:fa:cf:60:42:72:7a:
46:3b:84:ae:f8:de:e3:9d:31:4a:4f:b8:90:3d:01:
14:2d:26:a8:fb:61:f5:0d:2c:75:f4:c8:fb:a3:a1:
d5:c2:02:c4:04:1d:20:0d:fa:a9:32:fa:ef:6e:c5:
27:67:85:97:84:54:f8:4c:2d:3d:5d:a6:3c:35:29:
1b:2e:c1:7a:92:e1:9f:0b:d1:53:83:94:ae:80:e8:
78:ef:c4:27:16:0e:6b:9c:98:01:2b:81:f9:3c:99:
84:ec:6b:c4:dc:c7:50:1d:37:2e:c8:14:8d:f1:fa:
f3:1f:20:fd:3e:8e:16:bf:2f:7d:e1:8f:a4:32:c5:
dd:c5:5d:c0:a4:05:0d:b3:97:95:12:40:10:55:56:
0f:63:a7:c0:ff:fd:87:50:5a:bd:c2:a2:e0:c2:61:
90:ba:05:4d:0b:93:62:ac:c4:47:a7:d9:4b:2e:35:
1e:0c:e4:15:9e:0f:d8:bb:da:0d:3e:ff:d9:2f:1d:
89:c5:96:16:b2:4b:77:3b:27:91:5a:48:2a:1c:30:
de:c7:4e:5f:09:9b:1e:70:8f:10:a6:fb:f8:98:be:
8d:35:79:95:e7:19:4d:7d:2c:87:d5:27:d6:b7:60:
65:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9E:84:A4:7A:84:DB:35:AA:34:0F:A5:6C:41:1B:68:C9:EA:70:C5
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/QJ6EpHqE2zWqNA-lbEEbaMnqcMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.168.0/21
62.84.0.0/19
62.205.192.0/18
77.38.128.0/17
79.132.64.0/19
79.135.128.0/19
80.254.208.0/20
80.255.224.0/20
85.115.96.0/19
85.234.160.0/19
87.226.0.0/17
89.18.192.0/19
89.191.96.0/19
89.201.0.0/17
91.123.64.0/20
91.142.0.0/20
91.188.32.0/19
93.177.192.0/18
94.30.128.0/17
109.110.0.0/19
136.169.0.0/17
185.144.184.0/22
188.112.128.0/18
195.62.128.0/19
195.244.128.0/20
213.180.96.0/19
217.24.64.0/20
217.198.224.0/20
217.199.96.0/19
IPv6:
2a00:9000::/29
2a00:f4a0::/29
2a03:6740::/29
Signature Algorithm: sha256WithRSAEncryption
0e:08:af:3e:cc:3f:88:45:d9:b7:00:d1:c3:1a:89:0a:10:a7:
1d:46:ab:46:2a:9a:c2:84:1e:2f:8d:42:ba:0f:a3:f1:9c:0f:
47:77:d5:21:4a:23:fe:09:91:b6:62:3a:fe:49:01:5d:eb:ea:
fc:e9:49:52:a5:34:ea:1b:fa:31:94:6c:61:41:ab:20:5a:96:
41:f7:fd:4d:5e:7b:99:78:62:16:11:60:e0:09:33:96:75:23:
fd:77:bd:07:2f:ea:f9:f5:b8:82:ad:e6:b6:86:66:80:4d:23:
a2:d4:02:70:b1:ee:98:69:ba:19:d7:e2:9d:bf:12:d2:c8:d4:
de:0d:6c:35:6a:37:4e:6f:27:4c:4f:10:11:9c:b7:78:fb:12:
8c:11:79:32:83:fe:8d:64:d2:78:5a:fc:5d:d0:c1:c4:13:a0:
99:82:bb:66:25:cb:e8:67:c8:e5:db:ff:fb:87:6b:15:3d:2d:
02:0f:b6:ab:37:de:be:67:f2:bd:93:6a:2c:95:ba:49:2f:64:
aa:30:bf:9e:63:1c:7b:a0:d5:68:cb:16:1a:8a:5e:14:c9:96:
3f:e9:0d:06:bb:fb:1b:a4:f0:f5:9d:12:1d:27:be:db:f4:be:
2b:b3:7a:1b:d1:52:72:90:6c:2e:52:b4:eb:72:61:5c:e8:82:
8c:dd:8e:be
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgISAYbfWnCEyisH2BD3kMoX8pbrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NWI4M2M4N2M0YTNkODMxNTAyNTM3OWY3Mjk4NzUyMGJi
NWQwNDYwHhcNMjMwMzE0MDkwMTMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDllODRhNDdhODRkYjM1YWEzNDBmYTU2YzQxMWI2OGM5ZWE3MGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaDzs6NqKRdU3sg+Hsgt6x0FLLLs
gD36z2BCcnpGO4Su+N7jnTFKT7iQPQEULSao+2H1DSx19Mj7o6HVwgLEBB0gDfqp
MvrvbsUnZ4WXhFT4TC09XaY8NSkbLsF6kuGfC9FTg5SugOh478QnFg5rnJgBK4H5
PJmE7GvE3MdQHTcuyBSN8frzHyD9Po4Wvy994Y+kMsXdxV3ApAUNs5eVEkAQVVYP
Y6fA//2HUFq9wqLgwmGQugVNC5NirMRHp9lLLjUeDOQVng/Yu9oNPv/ZLx2JxZYW
skt3OyeRWkgqHDDex05fCZsecI8Qpvv4mL6NNXmV5xlNfSyH1SfWt2BlBQIDAQAB
o4IC0zCCAs8wHQYDVR0OBBYEFECehKR6hNs1qjQPpWxBG2jJ6nDFMB8GA1UdIwQY
MBaAFOhbg8h8Sj2DFQJTefcph1ILtdBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGIt
ODlhYWVhMzYyODVlLzEvUUo2RXBIcUUyeldxTkEtbGJFRWJhTW5xY01VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGItODlhYWVhMzYyODVl
LzEvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHoBggrBgEFBQcBBwEB/wSB2DCB1TCBtQQCAAEwga4DBAMl
lKgDBAU+VAADBAY+zcADBAdNJoADBAVPhEADBAVPh4ADBARQ/tADBARQ/+ADBAVV
c2ADBAVV6qADBAdX4gADBAVZEsADBAVZv2ADBAdZyQADBARbe0ADBARbjgADBAVb
vCADBAZdscADBAdeHoADBAVtbgADBAeIqQADBAK5kLgDBAa8cIADBAXDPoADBATD
9IADBAXVtGADBATZGEADBATZxuADBAXZx2AwGwQCAAIwFQMFAyoAkAADBQMqAPSg
AwUDKgNnQDANBgkqhkiG9w0BAQsFAAOCAQEADgivPsw/iEXZtwDRwxqJChCnHUar
RiqawoQeL41Cug+j8ZwPR3fVIUoj/gmRtmI6/kkBXevq/OlJUqU06hv6MZRsYUGr
IFqWQff9TV57mXhiFhFg4AkzlnUj/Xe9By/q+fW4gq3mtoZmgE0jotQCcLHumGm6
Gdfinb8S0sjU3g1sNWo3Tm8nTE8QEZy3ePsSjBF5MoP+jWTSeFr8XdDBxBOgmYK7
ZiXL6GfI5dv/+4drFT0tAg+2qzfevmfyvZNqLJW6SS9kqjC/nmMce6DVaMsWGope
FMmWP+kNBrv7G6Tw9Z0SHSe+2/S+K7N6G9FScpBsLlK063JhXOiCjN2Ovg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:23 2023 by rpki-client on console.sobornost.net