Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/QJMVDgTwArXxtV7tgOrRBGhBngE.roa
File: QJMVDgTwArXxtV7tgOrRBGhBngE.roa (raw, json)
Hash identifier: M/oNl+Skp7CgQYIqxpJ5PFyykMLb51f41fhABWocCes=
Subject key identifier: 40:93:15:0E:04:F0:02:B5:F1:B5:5E:ED:80:EA:D1:04:68:41:9E:01
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 0189495060A9C01D4E9B4B0AA0D15226296A
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/QJMVDgTwArXxtV7tgOrRBGhBngE.roa
Signing time: Wed 12 Jul 2023 08:55:51 +0000
ROA not before: Wed 12 Jul 2023 08:55:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197216
IP address blocks: 185.55.230.0/24 maxlen: 24
185.55.229.0/24 maxlen: 24
185.55.228.0/24 maxlen: 24
185.239.124.0/24 maxlen: 24
185.55.231.0/24 maxlen: 24
185.239.126.0/24 maxlen: 24
185.199.38.0/24 maxlen: 24
185.199.37.0/24 maxlen: 24
185.199.36.0/22 maxlen: 22
195.189.80.0/22 maxlen: 22
79.98.105.0/24 maxlen: 24
185.228.24.0/22 maxlen: 22
79.98.104.0/24 maxlen: 24
79.98.108.0/24 maxlen: 24
79.98.107.0/24 maxlen: 24
79.98.106.0/24 maxlen: 24
79.98.111.0/24 maxlen: 24
79.98.110.0/24 maxlen: 24
79.98.109.0/24 maxlen: 24
185.52.205.0/24 maxlen: 24
185.52.204.0/24 maxlen: 24
185.52.204.0/22 maxlen: 22
2a02:80e0::/30 maxlen: 30
2a01:b6a0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:50:60:a9:c0:1d:4e:9b:4b:0a:a0:d1:52:26:29:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jul 12 08:55:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4093150e04f002b5f1b55eed80ead10468419e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cb:5c:f1:f5:0a:5b:ec:bb:88:e8:c7:e5:b4:
4d:ee:4c:3f:ba:ad:38:3e:61:13:25:d0:49:00:f4:
a2:71:df:2b:7d:68:d3:4c:e8:20:ee:b0:a9:37:57:
8f:8b:eb:99:bc:18:57:9c:59:9a:e6:36:42:14:a7:
20:60:d3:6a:08:66:ad:30:06:0f:6d:2a:d2:68:32:
ca:a4:74:07:3e:d1:10:e7:a2:86:e5:ea:33:3d:e3:
d5:9f:0b:0b:f3:7d:b2:2e:df:9c:99:fe:d7:e5:92:
53:1d:63:6a:52:1c:6d:5c:af:d5:bf:61:60:28:4e:
bd:25:1b:17:f7:d1:f6:e8:86:80:05:b9:68:51:b8:
50:48:0b:84:ab:56:8a:e6:f3:71:49:a3:c9:4f:96:
2f:45:46:15:28:c4:7e:54:b2:f9:f1:1d:3c:97:83:
76:50:78:2e:f2:3e:97:d3:d0:b8:22:01:96:00:c8:
54:fc:1d:aa:7a:b6:ae:42:b6:ae:a6:9b:8d:09:0f:
b0:e4:50:b5:bd:1d:43:b3:b3:44:ac:b0:f5:2d:e2:
e0:64:4a:98:81:c6:6c:3b:e1:d6:62:c9:e7:d8:43:
7e:36:2c:4c:5e:84:66:52:c9:74:b5:ad:5c:e1:82:
d1:64:b4:ce:41:90:d4:3a:0e:9f:bc:ce:79:20:24:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:93:15:0E:04:F0:02:B5:F1:B5:5E:ED:80:EA:D1:04:68:41:9E:01
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/QJMVDgTwArXxtV7tgOrRBGhBngE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.104.0/21
185.52.204.0/22
185.55.228.0/22
185.199.36.0/22
185.228.24.0/22
185.239.124.0/24
185.239.126.0/24
195.189.80.0/22
IPv6:
2a01:b6a0::/32
2a02:80e0::/30
Signature Algorithm: sha256WithRSAEncryption
c4:53:1d:d7:a0:67:52:f3:af:87:e2:85:34:c2:b8:49:f4:9e:
76:90:f7:ee:55:6a:87:f9:5f:ae:71:09:22:45:31:05:7a:d0:
c3:98:66:6c:37:88:3b:db:0e:c0:43:1d:be:fd:45:ea:a6:52:
d0:41:4a:70:32:51:34:de:c9:0b:65:92:24:ed:f3:8a:67:7e:
ea:15:6d:5e:14:6d:4f:c0:77:01:06:f0:27:0d:e6:8c:2e:90:
2d:d7:82:53:08:8a:2e:cf:6a:fa:8f:b4:54:2d:61:db:04:d5:
9a:c4:bd:61:7f:59:af:03:33:46:23:6e:49:1d:a7:36:1f:ec:
10:f7:b7:71:4b:53:5c:f7:fe:93:42:e0:0b:1f:ac:2f:d2:8f:
ac:a9:e3:e9:dd:7f:06:cd:64:83:2a:ce:99:5f:6c:93:6b:70:
b9:ea:0e:f5:c9:b2:4a:4f:c2:69:a5:9f:39:71:06:4b:0b:67:
69:f8:b3:41:58:f6:06:ac:3e:09:57:dc:62:b5:16:0d:94:9f:
fd:2f:1c:77:4a:8d:fd:e4:c0:78:7a:30:d5:72:c5:85:ac:2a:
26:29:56:69:2a:f0:01:d0:dd:d5:5c:6d:e3:8b:87:ab:08:0c:
8e:da:fb:1c:f4:5b:5a:8b:84:2b:52:aa:c4:92:0a:31:8d:b0:
ff:99:83:a9
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAYlJUGCpwB1Om0sKoNFSJilqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MGExMGEyNTY3MjhmMTFhNGJiYWFkYzMyMDRiN2YwYTM1
YTUwMDAwHhcNMjMwNzEyMDg1NTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDkzMTUwZTA0ZjAwMmI1ZjFiNTVlZWQ4MGVhZDEwNDY4NDE5ZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMtc8fUKW+y7iOjH5bRN7kw/uq04
PmETJdBJAPSicd8rfWjTTOgg7rCpN1ePi+uZvBhXnFma5jZCFKcgYNNqCGatMAYP
bSrSaDLKpHQHPtEQ56KG5eozPePVnwsL832yLt+cmf7X5ZJTHWNqUhxtXK/Vv2Fg
KE69JRsX99H26IaABbloUbhQSAuEq1aK5vNxSaPJT5YvRUYVKMR+VLL58R08l4N2
UHgu8j6X09C4IgGWAMhU/B2qerauQrauppuNCQ+w5FC1vR1Ds7NErLD1LeLgZEqY
gcZsO+HWYsnn2EN+NixMXoRmUsl0ta1c4YLRZLTOQZDUOg6fvM55ICSIBwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFECTFQ4E8AK18bVe7YDq0QRoQZ4BMB8GA1UdIwQY
MBaAFJQKEKJWco8RpLuq3DIEt/CjWlAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYt
ZGNlNmQ2OTA5MjQ3LzEvUUpNVkRnVHdBclh4dFY3dGdPclJCR2hCbmdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYtZGNlNmQ2OTA5MjQ3
LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQDT2JoAwQC
uTTMAwQCuTfkAwQCucckAwQCueQYAwQAue98AwQAue9+AwQCw71QMBQEAgACMA4D
BQAqAbagAwUCKgKA4DANBgkqhkiG9w0BAQsFAAOCAQEAxFMd16BnUvOvh+KFNMK4
SfSedpD37lVqh/lfrnEJIkUxBXrQw5hmbDeIO9sOwEMdvv1F6qZS0EFKcDJRNN7J
C2WSJO3zimd+6hVtXhRtT8B3AQbwJw3mjC6QLdeCUwiKLs9q+o+0VC1h2wTVmsS9
YX9ZrwMzRiNuSR2nNh/sEPe3cUtTXPf+k0LgCx+sL9KPrKnj6d1/Bs1kgyrOmV9s
k2twueoO9cmySk/CaaWfOXEGSwtnafizQVj2Bqw+CVfcYrUWDZSf/S8cd0qN/eTA
eHow1XLFhawqJilWaSrwAdDd1Vxt44uHqwgMjtr7HPRbWouEK1KqxJIKMY2w/5mD
qQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:22 2023 by rpki-client on console.sobornost.net