Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/QZ04Mz-EN9fTleYlA0-Emvd6EkA.roa
File: QZ04Mz-EN9fTleYlA0-Emvd6EkA.roa (raw, json)
Hash identifier: UV16oPHH/9NBuhR07dz/YVC82hl+HkTdrZN7utpG9BA=
Subject key identifier: 41:9D:38:33:3F:84:37:D7:D3:95:E6:25:03:4F:84:9A:F7:7A:12:40
Certificate issuer: /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Certificate serial: 018991D511C375607DACA159222C47655038
Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/QZ04Mz-EN9fTleYlA0-Emvd6EkA.roa
Signing time: Wed 26 Jul 2023 10:53:27 +0000
ROA not before: Wed 26 Jul 2023 10:53:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47605
IP address blocks: 85.194.194.0/23 maxlen: 23
62.220.228.0/22 maxlen: 22
85.194.220.0/22 maxlen: 22
87.236.152.0/21 maxlen: 21
85.194.234.0/23 maxlen: 23
185.38.0.0/22 maxlen: 22
80.208.240.0/21 maxlen: 21
2a00:1d50:3::/48 maxlen: 48
2a00:1d50::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:d5:11:c3:75:60:7d:ac:a1:59:22:2c:47:65:50:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Validity
Not Before: Jul 26 10:53:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=419d38333f8437d7d395e625034f849af77a1240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:b1:94:3d:e3:8b:36:f5:11:2c:63:55:45:
56:e1:92:01:5b:38:de:00:59:66:82:be:39:1b:b4:
3f:a2:48:1b:43:e6:52:ce:3c:07:21:b6:ba:56:34:
51:58:c6:18:74:d0:a5:1a:e6:af:54:d0:25:f9:bf:
f9:dc:9f:9c:4e:de:fb:b7:d8:6a:a6:22:d3:56:6c:
cf:cc:f9:cd:df:40:d8:80:6a:d8:2d:53:2e:46:ce:
cd:b5:05:03:b9:f3:2b:61:0e:11:02:10:25:0b:35:
87:1d:cb:a7:4a:6d:7f:35:66:f3:85:7d:f5:9d:3b:
d1:11:e7:9b:a7:33:44:77:09:f7:3e:fb:0c:85:29:
37:b1:34:02:b2:b9:48:d4:20:27:13:b1:da:22:f6:
c1:77:a6:be:e6:c7:ca:3b:10:18:1d:3b:18:76:1b:
2a:10:1d:34:0c:66:e0:f6:8d:73:70:86:60:ee:2e:
29:d7:1f:2c:1e:30:1b:36:a7:d3:6d:86:ae:b9:e8:
b6:90:3f:22:8d:59:e5:49:ff:80:b4:2a:88:b1:3c:
17:c0:8e:9c:12:8e:83:e6:0d:5a:84:bc:9c:74:a7:
df:0f:6f:d6:b7:49:89:b3:32:39:df:47:d0:08:3f:
72:78:2f:e6:c6:f1:bd:4a:a5:04:20:15:52:ec:53:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9D:38:33:3F:84:37:D7:D3:95:E6:25:03:4F:84:9A:F7:7A:12:40
X509v3 Authority Key Identifier:
keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/QZ04Mz-EN9fTleYlA0-Emvd6EkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.228.0/22
80.208.240.0/21
85.194.194.0/23
85.194.220.0/22
85.194.234.0/23
87.236.152.0/21
185.38.0.0/22
IPv6:
2a00:1d50::/32
Signature Algorithm: sha256WithRSAEncryption
11:52:19:3b:bd:10:54:a0:73:e7:ac:3b:59:87:3e:88:96:2f:
6d:b8:fa:77:ef:b0:55:92:16:84:94:03:8a:1e:58:2b:8c:df:
26:18:3b:e7:f0:e9:ed:1a:fa:eb:90:9f:19:88:1a:09:a6:cd:
8e:f6:16:db:f1:2e:f3:6e:1e:3d:f8:4c:63:41:9a:1b:76:7b:
57:35:06:b3:82:86:1b:5a:0d:74:03:58:62:41:47:ca:99:e3:
21:d4:97:22:84:a9:f3:dc:9f:da:39:72:40:f2:d7:ed:97:92:
6f:41:b3:79:bd:17:c5:ab:72:a5:ee:17:a5:5f:00:06:06:e3:
69:7d:c8:2f:d2:37:93:22:fb:96:98:97:f8:7a:66:f3:fe:29:
01:be:b7:18:4f:0b:6a:1c:3f:5f:11:fd:9a:53:82:72:4e:b8:
b7:2c:9c:be:5e:9f:e1:c2:11:72:0e:56:fc:f1:a2:0c:8b:49:
42:09:ab:70:79:8d:7b:3e:f0:ba:ca:71:37:28:2d:05:cd:1e:
51:29:14:a2:82:9c:88:19:5b:c3:89:5d:f4:c6:bc:c1:4c:10:
19:6e:d5:c9:94:16:0d:aa:88:3a:f9:fe:ea:26:f0:c6:4a:92:
5d:a6:ff:77:6b:d2:28:fa:0b:99:d1:b6:a6:19:c7:db:0a:04:
16:ea:4d:ce
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYmR1RHDdWB9rKFZIixHZVA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZmIwOTlhYTQzMDgxYWM4Mzk1ZWUwYjkwY2NmMWE4ODQ0
ZjhkNjQwHhcNMjMwNzI2MTA1MzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTlkMzgzMzNmODQzN2Q3ZDM5NWU2MjUwMzRmODQ5YWY3N2ExMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueqxlD3jizb1ESxjVUVW4ZIBWzje
AFlmgr45G7Q/okgbQ+ZSzjwHIba6VjRRWMYYdNClGuavVNAl+b/53J+cTt77t9hq
piLTVmzPzPnN30DYgGrYLVMuRs7NtQUDufMrYQ4RAhAlCzWHHcunSm1/NWbzhX31
nTvREeebpzNEdwn3PvsMhSk3sTQCsrlI1CAnE7HaIvbBd6a+5sfKOxAYHTsYdhsq
EB00DGbg9o1zcIZg7i4p1x8sHjAbNqfTbYauuei2kD8ijVnlSf+AtCqIsTwXwI6c
Eo6D5g1ahLycdKffD2/Wt0mJszI530fQCD9yeC/mxvG9SqUEIBVS7FMyEQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFEGdODM/hDfX05XmJQNPhJr3ehJAMB8GA1UdIwQY
MBaAFHj7CZqkMIGsg5XuC5DM8aiET41kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jZDE3ZmUtZTQ0YS00Yjk4LTlmMWMt
MmQ4YThkOTY2OWY4LzEvUVowNE16LUVOOWZUbGVZbEEwLUVtdmQ2RWtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9jZDE3ZmUtZTQ0YS00Yjk4LTlmMWMtMmQ4YThkOTY2OWY4
LzEvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCPtzkAwQD
UNDwAwQBVcLCAwQCVcLcAwQBVcLqAwQDV+yYAwQCuSYAMA0EAgACMAcDBQAqAB1Q
MA0GCSqGSIb3DQEBCwUAA4IBAQARUhk7vRBUoHPnrDtZhz6Ili9tuPp377BVkhaE
lAOKHlgrjN8mGDvn8OntGvrrkJ8ZiBoJps2O9hbb8S7zbh49+ExjQZobdntXNQaz
goYbWg10A1hiQUfKmeMh1JcihKnz3J/aOXJA8tftl5JvQbN5vRfFq3Kl7helXwAG
BuNpfcgv0jeTIvuWmJf4embz/ikBvrcYTwtqHD9fEf2aU4JyTri3LJy+Xp/hwhFy
Dlb88aIMi0lCCatweY17PvC6ynE3KC0FzR5RKRSigpyIGVvDiV30xrzBTBAZbtXJ
lBYNqog6+f7qJvDGSpJdpv93a9Io+guZ0bamGcfbCgQW6k3O
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:09 2024 by rpki-client on console.sobornost.net