Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/gqMGmiCXr8NMXPXx1qyAvjDTJyI.roa
File: gqMGmiCXr8NMXPXx1qyAvjDTJyI.roa (raw, json)
Hash identifier: nNYrIHbx/defR6qsgHy1gpB42xSSCrxtk5fqrVjmifI=
Subject key identifier: 82:A3:06:9A:20:97:AF:C3:4C:5C:F5:F1:D6:AC:80:BE:30:D3:27:22
Certificate issuer: /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial: 01856E667555E2D9219F9ADB7E6477DC7591
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/gqMGmiCXr8NMXPXx1qyAvjDTJyI.roa
Signing time: Sun 01 Jan 2023 17:34:46 +0000
ROA not before: Sun 01 Jan 2023 17:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 85.146.192.0/18 maxlen: 18
83.137.136.0/21 maxlen: 21
93.117.192.0/18 maxlen: 18
80.112.192.0/18 maxlen: 18
85.88.96.0/19 maxlen: 19
213.34.128.0/19 maxlen: 19
212.78.192.0/19 maxlen: 19
37.235.8.0/21 maxlen: 21
83.167.192.0/19 maxlen: 19
2a00:18c8::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:75:55:e2:d9:21:9f:9a:db:7e:64:77:dc:75:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Validity
Not Before: Jan 1 17:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82a3069a2097afc34c5cf5f1d6ac80be30d32722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:f7:08:96:c4:18:71:62:a1:d9:15:e7:29:
b2:44:1c:70:07:b0:b4:81:89:3e:aa:93:e2:d1:cf:
60:44:71:85:61:4e:4e:c3:fe:fb:2d:39:ab:cc:19:
3d:13:87:68:e8:f0:6b:f9:81:d3:5b:e9:5c:d4:26:
7e:fa:16:2b:c5:47:79:2e:f2:db:1b:02:ed:61:7f:
ce:e5:e5:ed:cc:6c:e2:92:19:ec:a2:c6:10:6f:14:
54:52:89:b0:25:da:b4:72:1f:3c:ff:95:22:5f:c6:
04:92:20:e7:4b:b7:aa:d2:44:8a:a8:f5:56:45:04:
46:5f:d7:5a:24:e9:e8:98:6e:02:ba:bc:6f:ac:18:
df:cd:4a:e5:d1:a3:12:c6:48:35:60:cf:ba:2d:5e:
eb:32:f4:6d:65:9f:3e:8b:c8:42:ea:8b:a6:10:39:
61:1e:b1:9b:5c:ac:00:22:e2:f5:9d:1f:88:ec:f7:
eb:e6:9a:1d:6b:f8:90:3a:a9:f2:ea:d2:a2:55:e2:
9c:a6:00:e8:34:ba:85:b0:88:aa:c2:8a:f7:7a:22:
bc:87:d4:32:2f:2a:f4:03:6c:62:6c:d3:7d:1c:9b:
2a:05:03:03:37:50:09:e6:de:d6:93:8e:86:d4:40:
3a:af:a0:ce:e6:b6:69:ee:d7:9a:37:0c:23:7e:f3:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A3:06:9A:20:97:AF:C3:4C:5C:F5:F1:D6:AC:80:BE:30:D3:27:22
X509v3 Authority Key Identifier:
keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/gqMGmiCXr8NMXPXx1qyAvjDTJyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.8.0/21
80.112.192.0/18
83.137.136.0/21
83.167.192.0/19
85.88.96.0/19
85.146.192.0/18
93.117.192.0/18
212.78.192.0/19
213.34.128.0/19
IPv6:
2a00:18c8::/29
Signature Algorithm: sha256WithRSAEncryption
08:64:39:e7:31:23:3c:02:c3:d6:b2:9d:19:e6:1d:ee:0c:97:
45:af:d0:da:13:f7:ed:3f:2e:92:83:e6:c5:db:04:2e:df:cc:
73:07:81:c5:c1:3d:dc:69:63:7a:ce:b0:27:d5:bb:a7:5d:2b:
50:4f:bf:9e:b8:a4:77:2e:4b:d5:a7:bd:2c:44:8a:07:21:da:
0d:18:b6:0d:02:83:90:6f:24:42:12:55:17:25:07:a7:ba:73:
94:9a:62:ce:a0:d9:8d:4b:55:ff:c9:90:13:9b:77:4e:22:a5:
f2:bd:28:25:16:8c:e3:b7:86:a7:0d:43:da:64:2b:1f:a0:19:
3a:b9:5d:e5:d5:25:7c:8a:16:be:dd:67:b8:65:09:c1:0a:95:
75:54:ec:a9:23:ba:6c:e3:86:c1:0e:ca:9e:30:7b:cd:1f:f4:
f4:67:06:bf:14:68:f6:09:c1:f8:cc:0b:7d:7c:a7:f7:7a:12:
1e:15:de:55:85:42:a3:13:4c:b7:c4:84:17:01:50:d9:41:33:
45:78:d6:06:e3:05:d3:27:59:24:c5:a7:b1:8e:98:de:ad:99:
f9:78:da:ec:5f:b1:d4:3a:d2:92:6b:f5:93:e5:cb:23:8c:ba:
c5:74:f8:f1:7f:5c:ed:2c:80:be:f9:d2:b3:25:82:6d:0a:16:
bd:1a:d8:9b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAYVuZnVV4tkhn5rbfmR33HWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOWY3NWIyNTkzY2EyYjFiMGE1ZmQwYzU0MDE1ZGUzMDZj
NDdlZTYwHhcNMjMwMTAxMTczNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmEzMDY5YTIwOTdhZmMzNGM1Y2Y1ZjFkNmFjODBiZTMwZDMyNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzP3CJbEGHFiodkV5ymyRBxwB7C0
gYk+qpPi0c9gRHGFYU5Ow/77LTmrzBk9E4do6PBr+YHTW+lc1CZ++hYrxUd5LvLb
GwLtYX/O5eXtzGzikhnsosYQbxRUUomwJdq0ch88/5UiX8YEkiDnS7eq0kSKqPVW
RQRGX9daJOnomG4CurxvrBjfzUrl0aMSxkg1YM+6LV7rMvRtZZ8+i8hC6oumEDlh
HrGbXKwAIuL1nR+I7Pfr5poda/iQOqny6tKiVeKcpgDoNLqFsIiqwor3eiK8h9Qy
Lyr0A2xibNN9HJsqBQMDN1AJ5t7Wk46G1EA6r6DO5rZp7teaNwwjfvPcVQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFIKjBpogl6/DTFz18dasgL4w0yciMB8GA1UdIwQY
MBaAFMGfdbJZPKKxsKX9DFQBXeMGxH7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1o5MXNsazhvckd3cGYwTVZBRmQ0d2JFZnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zN2E4ZDItMzQ2Ni00NjE2LWJjMWMt
MDEyNDBiY2ZkYjQyLzEvZ3FNR21pQ1hyOE5NWFBYeDFxeUF2akRUSnlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zN2E4ZDItMzQ2Ni00NjE2LWJjMWMtMDEyNDBiY2ZkYjQy
LzEvd1o5MXNsazhvckd3cGYwTVZBRmQ0d2JFZnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDJesIAwQG
UHDAAwQDU4mIAwQFU6fAAwQFVVhgAwQGVZLAAwQGXXXAAwQF1E7AAwQF1SKAMA0E
AgACMAcDBQMqABjIMA0GCSqGSIb3DQEBCwUAA4IBAQAIZDnnMSM8AsPWsp0Z5h3u
DJdFr9DaE/ftPy6Sg+bF2wQu38xzB4HFwT3caWN6zrAn1bunXStQT7+euKR3LkvV
p70sRIoHIdoNGLYNAoOQbyRCElUXJQenunOUmmLOoNmNS1X/yZATm3dOIqXyvSgl
Fozjt4anDUPaZCsfoBk6uV3l1SV8iha+3We4ZQnBCpV1VOypI7ps44bBDsqeMHvN
H/T0Zwa/FGj2CcH4zAt9fKf3ehIeFd5VhUKjE0y3xIQXAVDZQTNFeNYG4wXTJ1kk
xaexjpjerZn5eNrsX7HUOtKSa/WT5csjjLrFdPjxf1ztLIC++dKzJYJtCha9Gtib
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:14:56 2024 by rpki-client on console.sobornost.net