Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/3PQnnm2aylSEiU8I6SASPTUBOQA.roa
File: 3PQnnm2aylSEiU8I6SASPTUBOQA.roa (raw, json)
Hash identifier: RRBXr4vTJw5kX7iMCJkDBpcI6PpC3Ej1ZpfMKiqKN54=
Subject key identifier: DC:F4:27:9E:6D:9A:CA:54:84:89:4F:08:E9:20:12:3D:35:01:39:00
Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Certificate serial: 018572DF13E5D71A3D1FFAC25BD150999C8F
Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/3PQnnm2aylSEiU8I6SASPTUBOQA.roa
Signing time: Mon 02 Jan 2023 14:25:00 +0000
ROA not before: Mon 02 Jan 2023 14:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48293
IP address blocks: 91.194.246.0/24 maxlen: 24
91.194.246.0/23 maxlen: 23
91.194.247.0/24 maxlen: 24
94.228.192.0/20 maxlen: 20
94.228.192.0/24 maxlen: 24
94.228.194.0/24 maxlen: 24
94.228.196.0/24 maxlen: 24
94.228.195.0/24 maxlen: 24
94.228.193.0/24 maxlen: 24
94.228.198.0/24 maxlen: 24
94.228.197.0/24 maxlen: 24
94.228.199.0/24 maxlen: 24
94.228.205.0/24 maxlen: 24
94.228.204.0/24 maxlen: 24
94.228.206.0/24 maxlen: 24
94.228.201.0/24 maxlen: 24
94.228.200.0/24 maxlen: 24
94.228.203.0/24 maxlen: 24
94.228.202.0/24 maxlen: 24
94.228.207.0/24 maxlen: 24
185.108.23.0/24 maxlen: 24
185.108.20.0/22 maxlen: 22
185.108.20.0/25 maxlen: 25
185.108.20.0/24 maxlen: 24
185.108.22.0/24 maxlen: 24
185.108.21.0/24 maxlen: 24
91.212.217.0/24 maxlen: 24
2a06:4180::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:13:e5:d7:1a:3d:1f:fa:c2:5b:d1:50:99:9c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Validity
Not Before: Jan 2 14:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcf4279e6d9aca5484894f08e920123d35013900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:05:4f:7e:78:01:ec:05:1c:5f:0c:06:03:
6d:e4:41:ae:f0:93:81:0d:5b:b4:e4:95:4b:1c:6b:
b4:26:35:87:9f:56:b2:28:40:27:d6:24:a8:94:2c:
da:7e:55:26:75:15:ca:a5:ad:b1:4b:77:b4:9b:91:
85:c8:3d:43:62:aa:5e:c4:38:99:69:33:18:4c:5b:
c6:dd:c8:ab:d3:57:bd:e6:b8:5e:ad:c5:26:81:52:
b9:17:17:3d:b1:00:7f:4f:b7:d0:e2:85:72:48:8b:
d5:df:53:2d:f1:a3:6a:78:58:8f:dc:78:01:31:d3:
8e:62:80:2b:50:5d:36:f5:ff:36:1e:ac:41:96:c0:
d4:31:bc:de:b2:e3:0e:58:61:e4:e2:9d:35:22:a6:
77:5a:17:60:8f:4a:72:1a:b5:d9:74:dc:da:41:8a:
ad:ab:b7:17:2b:da:d9:ec:7b:98:00:73:74:9a:9c:
9a:94:66:7a:bf:a7:e0:7f:36:83:79:23:3e:85:8b:
87:f2:b5:e0:54:ea:09:8f:31:3a:a7:6b:87:3a:56:
d4:55:37:39:22:5f:15:cb:66:99:32:3a:60:9b:36:
dc:46:6e:76:7b:32:56:d8:5c:7f:66:bf:31:1f:62:
08:aa:e6:f2:f7:8f:af:18:5b:f2:9e:cc:e7:b8:da:
ec:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F4:27:9E:6D:9A:CA:54:84:89:4F:08:E9:20:12:3D:35:01:39:00
X509v3 Authority Key Identifier:
keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/3PQnnm2aylSEiU8I6SASPTUBOQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.246.0/23
91.212.217.0/24
94.228.192.0/20
185.108.20.0/22
IPv6:
2a06:4180::/29
Signature Algorithm: sha256WithRSAEncryption
32:c5:96:29:b3:41:b5:2d:c4:8f:60:26:7c:77:d1:17:b2:fe:
61:9d:81:67:92:fb:76:e1:d9:e4:9b:f6:cb:b2:07:bb:97:5f:
32:3d:c6:a1:f7:0f:bc:7f:ef:b6:fb:bb:e6:03:86:f0:bf:6d:
97:e6:40:ae:a3:6c:71:dd:b0:fb:66:b2:bb:16:45:57:95:60:
63:83:36:42:ef:90:9d:ce:08:5f:70:e6:f2:76:00:40:8c:23:
4d:1b:fa:29:84:19:3d:84:32:e8:d8:51:6d:fc:4d:03:85:02:
94:bc:a7:e6:46:88:3b:90:c1:3d:90:61:06:93:c0:4d:77:a5:
11:d3:60:22:5c:04:c8:69:ce:b7:a3:36:54:0e:14:09:d1:2e:
50:ae:9e:fe:6c:11:5e:b9:08:4c:69:fc:a2:53:77:6b:20:64:
d3:1f:f5:6a:f4:65:9f:17:3b:78:ba:fb:ad:9f:6f:f5:c6:bb:
81:1f:45:a8:79:a7:b7:6b:99:0a:fa:c5:cc:5b:b4:52:df:b5:
19:cc:10:a6:7e:ab:73:ba:e2:42:c7:8d:a9:6e:c8:54:85:0a:
55:34:b0:37:a6:7a:ed:7b:dd:a3:c4:a3:f5:6a:34:a2:f7:42:
45:71:fa:62:43:a5:ca:9c:25:ab:b9:7f:58:f5:2e:f2:c6:a6:
55:e0:4b:a2
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVy3xPl1xo9H/rCW9FQmZyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYjRjNzlhMjJhM2ZlOTg3ZWYzMTkwOGNkNDRmZjgxZTli
MWFjZjQwHhcNMjMwMTAyMTQyNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2Y0Mjc5ZTZkOWFjYTU0ODQ4OTRmMDhlOTIwMTIzZDM1MDEzOTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA394FT354AewFHF8MBgNt5EGu8JOB
DVu05JVLHGu0JjWHn1ayKEAn1iSolCzaflUmdRXKpa2xS3e0m5GFyD1DYqpexDiZ
aTMYTFvG3cir01e95rhercUmgVK5Fxc9sQB/T7fQ4oVySIvV31Mt8aNqeFiP3HgB
MdOOYoArUF029f82HqxBlsDUMbzesuMOWGHk4p01IqZ3Whdgj0pyGrXZdNzaQYqt
q7cXK9rZ7HuYAHN0mpyalGZ6v6fgfzaDeSM+hYuH8rXgVOoJjzE6p2uHOlbUVTc5
Il8Vy2aZMjpgmzbcRm52ezJW2Fx/Zr8xH2IIquby94+vGFvynsznuNrsMQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFNz0J55tmspUhIlPCOkgEj01ATkAMB8GA1UdIwQY
MBaAFEK0x5oio/6YfvMZCM1E/4Hpsaz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXJUSG1pS2pfcGgtOHhrSXpVVF9nZW14clBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80YjkxMWMtM2Q0ZC00MmQ1LTkyMzQt
ZjI4ODEzN2NiNTAwLzEvM1BRbm5tMmF5bFNFaVU4STZTQVNQVFVCT1FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC80YjkxMWMtM2Q0ZC00MmQ1LTkyMzQtZjI4ODEzN2NiNTAw
LzEvUXJUSG1pS2pfcGgtOHhrSXpVVF9nZW14clBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBW8L2AwQA
W9TZAwQEXuTAAwQCuWwUMA0EAgACMAcDBQMqBkGAMA0GCSqGSIb3DQEBCwUAA4IB
AQAyxZYps0G1LcSPYCZ8d9EXsv5hnYFnkvt24dnkm/bLsge7l18yPcah9w+8f++2
+7vmA4bwv22X5kCuo2xx3bD7ZrK7FkVXlWBjgzZC75CdzghfcObydgBAjCNNG/op
hBk9hDLo2FFt/E0DhQKUvKfmRog7kME9kGEGk8BNd6UR02AiXATIac63ozZUDhQJ
0S5Qrp7+bBFeuQhMafyiU3drIGTTH/Vq9GWfFzt4uvutn2/1xruBH0Woeae3a5kK
+sXMW7RS37UZzBCmfqtzuuJCx42pbshUhQpVNLA3pnrte92jxKP1ajSi90JFcfpi
Q6XKnCWruX9Y9S7yxqZV4Eui
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:16:50 2024 by rpki-client on console.sobornost.net