Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/qryMmE9aCm3g8Lbo1rfd_zhPpaE.roa
File: qryMmE9aCm3g8Lbo1rfd_zhPpaE.roa (raw, json)
Hash identifier: XrcLVNRP0ZMupMhc37++GlyAc9T8RDOB09ODdNWHciw=
Subject key identifier: AA:BC:8C:98:4F:5A:0A:6D:E0:F0:B6:E8:D6:B7:DD:FF:38:4F:A5:A1
Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial: 01856E0B0215AEE8EC5134378B6CB80B55A2
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/qryMmE9aCm3g8Lbo1rfd_zhPpaE.roa
Signing time: Sun 01 Jan 2023 15:54:53 +0000
ROA not before: Sun 01 Jan 2023 15:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39053
IP address blocks: 193.176.68.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:02:15:ae:e8:ec:51:34:37:8b:6c:b8:0b:55:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Validity
Not Before: Jan 1 15:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aabc8c984f5a0a6de0f0b6e8d6b7ddff384fa5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:03:66:f3:23:78:d7:91:32:64:1a:a1:42:
bd:01:cc:50:bc:9c:d2:e5:b2:70:10:61:57:f1:a5:
e6:8d:0c:95:6a:d1:1c:aa:c4:b7:18:9f:9f:19:9b:
e9:73:19:34:86:75:43:4d:f6:98:e4:0c:13:17:59:
1a:32:b6:0b:24:3c:c1:37:c7:cd:dc:e3:74:4b:a7:
f2:df:c5:ab:de:d7:86:f3:a8:8d:c9:d2:4a:20:56:
e5:6c:72:cb:63:60:f3:56:02:82:cf:6c:00:e9:0f:
90:bc:72:86:b2:ba:ae:af:ba:99:f6:85:0a:ae:d8:
d7:fb:61:59:71:8b:2c:8a:85:0b:fe:19:3d:73:7c:
4d:f1:90:79:5d:51:58:ee:17:1a:b5:73:af:7b:e6:
74:b5:cb:e4:9f:66:f2:ed:1b:07:1a:7f:91:b4:cc:
4a:b9:a9:df:8e:35:e0:fc:44:b4:d9:98:d4:5e:06:
6b:f5:88:36:b4:6b:db:f8:91:03:99:eb:8f:72:10:
52:13:e8:d7:16:7c:a1:ef:82:97:08:4a:1a:73:ed:
5d:ca:76:bd:ee:0f:b6:82:25:82:dc:2f:e8:c5:b7:
75:1c:c6:9a:91:77:35:2f:76:03:86:7d:40:08:35:
ca:ff:4a:c9:e4:bf:c2:65:9a:8f:df:f1:6e:0c:d8:
56:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BC:8C:98:4F:5A:0A:6D:E0:F0:B6:E8:D6:B7:DD:FF:38:4F:A5:A1
X509v3 Authority Key Identifier:
keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/qryMmE9aCm3g8Lbo1rfd_zhPpaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.68.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:89:79:79:7c:db:ed:31:a7:e3:57:d1:5b:6e:c2:87:3d:8b:
cd:35:53:32:c1:56:42:62:17:c6:49:97:b9:c4:c8:4e:0d:82:
b9:49:c2:6d:34:11:a0:57:11:00:bd:7f:c6:56:65:8b:85:97:
08:0a:7c:78:b3:ad:b1:1b:6a:0b:e5:62:8f:71:bf:f0:2a:71:
62:a2:a0:62:63:d6:84:50:3f:d2:cf:f3:df:00:83:6c:59:43:
a0:3c:cc:27:c0:50:c7:df:03:ff:10:12:12:69:1b:58:f3:d3:
14:55:1a:04:fc:a6:d9:1b:03:d7:76:53:bb:5f:42:a0:ef:48:
04:a3:5e:84:5a:28:80:62:53:25:50:2c:84:7c:01:0c:f9:4f:
bb:95:6a:36:40:df:4f:d6:d7:90:2b:c8:e6:86:c4:28:48:dc:
53:5a:3a:6c:ac:a1:37:7d:97:97:bf:3f:96:e8:4e:86:ac:24:
0a:cf:bf:03:65:4b:ee:e9:87:a2:5a:f1:2c:ae:59:47:18:9a:
32:3c:fa:d7:11:42:1d:8b:f2:69:71:77:fa:fe:77:a0:68:c4:
01:2e:db:83:7f:d4:1b:ea:2e:4d:ad:e4:3a:e5:10:05:7e:dc:
e5:6c:53:94:8a:43:df:e9:c5:fe:74:df:a2:97:fd:99:bc:a0:
9c:5d:78:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuCwIVrujsUTQ3i2y4C1WiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOGIyNWFkN2M5NjU4OWU0YThjYWE1ZmE0ODkyY2M0ZGZj
YzdiNTMwHhcNMjMwMTAxMTU1NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWJjOGM5ODRmNWEwYTZkZTBmMGI2ZThkNmI3ZGRmZjM4NGZhNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn0DZvMjeNeRMmQaoUK9AcxQvJzS
5bJwEGFX8aXmjQyVatEcqsS3GJ+fGZvpcxk0hnVDTfaY5AwTF1kaMrYLJDzBN8fN
3ON0S6fy38Wr3teG86iNydJKIFblbHLLY2DzVgKCz2wA6Q+QvHKGsrqur7qZ9oUK
rtjX+2FZcYssioUL/hk9c3xN8ZB5XVFY7hcatXOve+Z0tcvkn2by7RsHGn+RtMxK
uanfjjXg/ES02ZjUXgZr9Yg2tGvb+JEDmeuPchBSE+jXFnyh74KXCEoac+1dyna9
7g+2giWC3C/oxbd1HMaakXc1L3YDhn1ACDXK/0rJ5L/CZZqP3/FuDNhWWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKq8jJhPWgpt4PC26Na33f84T6WhMB8GA1UdIwQY
MBaAFLOLJa18llieSoyqX6SJLMTfzHtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTct
M2Y0MDU0N2U1MmQxLzEvcXJ5TW1FOWFDbTNnOExibzFyZmRfemhQcGFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTctM2Y0MDU0N2U1MmQx
LzEvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbBEMA0G
CSqGSIb3DQEBCwUAA4IBAQBOiXl5fNvtMafjV9FbbsKHPYvNNVMywVZCYhfGSZe5
xMhODYK5ScJtNBGgVxEAvX/GVmWLhZcICnx4s62xG2oL5WKPcb/wKnFioqBiY9aE
UD/Sz/PfAINsWUOgPMwnwFDH3wP/EBISaRtY89MUVRoE/KbZGwPXdlO7X0Kg70gE
o16EWiiAYlMlUCyEfAEM+U+7lWo2QN9P1teQK8jmhsQoSNxTWjpsrKE3fZeXvz+W
6E6GrCQKz78DZUvu6YeiWvEsrllHGJoyPPrXEUIdi/JpcXf6/negaMQBLtuDf9Qb
6i5NreQ65RAFftzlbFOUikPf6cX+dN+il/2ZvKCcXXhe
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:19 2024 by rpki-client on console.sobornost.net