Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/7QOqUf454HJRdxLFpOosxNYmLnw.roa
File: 7QOqUf454HJRdxLFpOosxNYmLnw.roa (raw, json)
Hash identifier: vbhmZAKCpiC64QjdQo6Kz6tH5CKUeMMa/STmJ+J9yLc=
Subject key identifier: ED:03:AA:51:FE:39:E0:72:51:77:12:C5:A4:EA:2C:C4:D6:26:2E:7C
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01897489117C657E8B43001A2B05B8826C40
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/7QOqUf454HJRdxLFpOosxNYmLnw.roa
Signing time: Thu 20 Jul 2023 18:21:27 +0000
ROA not before: Thu 20 Jul 2023 18:21:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 85.204.107.0/24 maxlen: 24
195.74.93.0/24 maxlen: 24
46.229.243.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
2a12:3200::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:74:89:11:7c:65:7e:8b:43:00:1a:2b:05:b8:82:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jul 20 18:21:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed03aa51fe39e072517712c5a4ea2cc4d6262e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:e4:b4:6c:64:fb:a0:d9:e4:ab:66:ad:9b:
9b:94:a1:71:c8:57:d1:0a:30:a2:66:7f:7f:2f:b1:
df:f7:c7:b8:f2:c6:3f:ae:c6:32:22:ca:34:d2:71:
65:5a:6f:cd:90:28:ec:e7:b7:5a:96:18:32:49:a0:
38:46:6f:ea:0a:65:47:f2:2d:f8:ce:11:fe:6e:ad:
83:85:b7:96:5c:82:35:a4:ed:9c:dd:fc:6f:6b:75:
a8:c3:db:fd:ee:24:2e:13:53:12:3e:39:3a:d0:8d:
11:35:5b:27:06:69:c2:62:c7:84:85:5d:41:e5:10:
d2:d4:24:83:c7:0c:d5:df:39:2b:a1:fa:eb:67:5e:
09:4d:df:0b:e0:06:8b:e6:f0:ef:f8:24:00:42:5f:
8d:7f:cc:1f:4c:e1:cb:fa:30:d5:b2:44:a1:67:3f:
17:d6:9e:70:8f:c8:23:dc:b1:21:df:64:e2:75:59:
82:97:94:7b:3f:52:4d:c3:5a:4e:3f:26:dd:96:b3:
7f:73:26:a6:12:45:a7:51:59:44:58:42:44:f1:50:
42:e3:73:f7:42:a9:52:c1:c9:4d:a0:69:57:dc:c0:
95:14:ff:33:49:eb:60:28:c6:93:ad:68:8f:79:d5:
36:4e:1b:d5:cb:88:1b:dd:1f:2c:05:85:c7:c9:86:
14:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:03:AA:51:FE:39:E0:72:51:77:12:C5:A4:EA:2C:C4:D6:26:2E:7C
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/7QOqUf454HJRdxLFpOosxNYmLnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.253.0/24
85.204.107.0/24
195.74.93.0/24
IPv6:
2a12:3200::/36
Signature Algorithm: sha256WithRSAEncryption
ad:84:f3:ce:74:f3:3c:f5:f0:63:7b:b1:0e:82:23:b9:8d:46:
85:64:9a:dc:45:73:14:69:de:d6:b9:df:0a:88:b8:5d:e0:97:
59:38:12:65:1d:74:fd:15:6f:b8:88:2c:ac:ef:43:9e:a4:d0:
7d:fb:df:da:f8:e2:32:1e:40:45:88:ba:21:15:45:ee:4b:94:
89:b0:77:be:8a:92:e3:02:ed:34:54:b6:bb:68:21:23:77:56:
39:e3:29:d9:5e:63:24:f6:d7:13:02:bf:57:23:02:3d:86:3c:
99:fd:1a:97:ec:67:fb:f6:75:7d:b3:1a:2c:d5:e2:e6:c1:7c:
aa:3c:a3:c5:d5:e7:05:1f:51:a3:e0:08:fe:69:6d:41:3d:e2:
b0:34:9e:21:19:c8:28:9d:b4:89:49:11:3b:25:57:08:8a:ba:
c7:54:5e:97:83:02:d2:90:e7:de:62:7e:fa:e2:5e:24:7c:2a:
64:8e:44:0e:98:dd:be:5d:84:b8:5e:e9:9d:85:64:bd:b9:0e:
e2:19:82:72:ae:62:e9:8d:f3:04:83:0d:7b:40:c2:ab:71:6b:
5f:28:ee:8f:e3:77:ae:96:28:f0:fb:dc:92:37:be:be:4f:36:
63:60:2f:30:64:69:1d:89:18:55:67:06:9e:51:b2:ad:1d:55:
0a:24:f7:0c
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYl0iRF8ZX6LQwAaKwW4gmxAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1
MWRlZDAwHhcNMjMwNzIwMTgyMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDAzYWE1MWZlMzllMDcyNTE3NzEyYzVhNGVhMmNjNGQ2MjYyZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgLktGxk+6DZ5KtmrZublKFxyFfR
CjCiZn9/L7Hf98e48sY/rsYyIso00nFlWm/NkCjs57dalhgySaA4Rm/qCmVH8i34
zhH+bq2DhbeWXII1pO2c3fxva3Wow9v97iQuE1MSPjk60I0RNVsnBmnCYseEhV1B
5RDS1CSDxwzV3zkrofrrZ14JTd8L4AaL5vDv+CQAQl+Nf8wfTOHL+jDVskShZz8X
1p5wj8gj3LEh32TidVmCl5R7P1JNw1pOPybdlrN/cyamEkWnUVlEWEJE8VBC43P3
QqlSwclNoGlX3MCVFP8zSetgKMaTrWiPedU2ThvVy4gb3R8sBYXHyYYULQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFO0DqlH+OeByUXcSxaTqLMTWJi58MB8GA1UdIwQY
MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt
MWNhZGE2ZThiMWE5LzEvN1FPcVVmNDU0SEpSZHhMRnBPb3N4TlltTG53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5
LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQALuXzAwQA
LuX9AwQAVcxrAwQAw0pdMA4EAgACMAgDBgQqEjIAADANBgkqhkiG9w0BAQsFAAOC
AQEArYTzznTzPPXwY3uxDoIjuY1GhWSa3EVzFGne1rnfCoi4XeCXWTgSZR10/RVv
uIgsrO9DnqTQffvf2vjiMh5ARYi6IRVF7kuUibB3voqS4wLtNFS2u2ghI3dWOeMp
2V5jJPbXEwK/VyMCPYY8mf0al+xn+/Z1fbMaLNXi5sF8qjyjxdXnBR9Ro+AI/mlt
QT3isDSeIRnIKJ20iUkROyVXCIq6x1Rel4MC0pDn3mJ++uJeJHwqZI5EDpjdvl2E
uF7pnYVkvbkO4hmCcq5i6Y3zBIMNe0DCq3FrXyjuj+N3rpYo8Pvckje+vk82Y2Av
MGRpHYkYVWcGnlGyrR1VCiT3DA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net