Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/qxA1XM485F99tyiAe6zfNZ69CL0.roa
File: qxA1XM485F99tyiAe6zfNZ69CL0.roa (raw, json)
Hash identifier: QlmKKGYs+PcAAZVcgVNGa7awsWzhgtF/PLtoGRVPvSg=
Subject key identifier: AB:10:35:5C:CE:3C:E4:5F:7D:B7:28:80:7B:AC:DF:35:9E:BD:08:BD
Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial: 018A93D479DECF06CB706B9F14261FCBEA26
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/qxA1XM485F99tyiAe6zfNZ69CL0.roa
Signing time: Thu 14 Sep 2023 13:14:50 +0000
ROA not before: Thu 14 Sep 2023 13:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12361
IP address blocks: 195.97.52.0/24 maxlen: 24
62.74.128.0/17 maxlen: 17
77.69.38.0/24 maxlen: 24
213.249.32.0/19 maxlen: 19
62.74.0.0/17 maxlen: 22
213.249.40.0/24 maxlen: 24
62.74.0.0/16 maxlen: 24
213.249.59.0/24 maxlen: 24
195.46.0.0/19 maxlen: 24
195.46.0.0/20 maxlen: 20
185.158.220.0/22 maxlen: 22
185.158.220.0/23 maxlen: 23
185.158.222.0/23 maxlen: 23
213.249.0.0/18 maxlen: 18
213.249.0.0/19 maxlen: 19
213.249.0.0/21 maxlen: 21
195.46.16.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:d4:79:de:cf:06:cb:70:6b:9f:14:26:1f:cb:ea:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Validity
Not Before: Sep 14 13:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab10355cce3ce45f7db728807bacdf359ebd08bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:38:ae:92:47:94:19:f8:d5:bb:86:d8:7e:0b:
b7:d9:06:be:e2:a9:b5:2b:a8:2f:d3:84:e2:6b:17:
3a:79:83:23:6e:54:3e:bf:e2:10:81:8e:4a:aa:ce:
f1:fb:68:ce:38:f1:8a:fe:7e:05:0b:bb:ae:1c:b9:
b3:dd:df:0b:8f:fe:26:d1:c2:99:11:a2:f5:6b:19:
3f:5a:c1:79:de:e7:0c:b3:fe:a1:3c:b4:5f:20:5c:
a2:d7:07:af:f5:cf:ca:17:ee:56:97:2c:54:7a:88:
ce:b4:56:47:ff:73:4e:5b:f2:3d:c7:4f:b4:f4:53:
07:4a:38:1d:69:33:b9:e1:9e:08:c4:05:3f:11:fb:
9c:4c:f3:2e:38:71:d4:1c:77:f8:de:bf:aa:e2:37:
d0:03:1a:14:33:e1:ea:1e:9f:8c:18:b3:7d:90:24:
8c:0b:f0:c3:ce:22:ac:6b:22:e9:15:3f:a0:eb:2a:
90:b0:21:fe:32:5d:47:53:58:2f:d1:63:da:2b:0d:
44:91:1c:da:d5:0f:f3:60:9e:d5:de:b3:fe:f8:df:
37:45:cd:03:c9:dc:8d:71:82:f5:bb:c9:3c:7f:f7:
d9:00:ed:83:de:67:4c:55:9e:1a:24:64:b4:16:87:
dc:97:78:95:0b:0f:fe:4e:be:76:7b:9a:c4:dc:93:
45:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:10:35:5C:CE:3C:E4:5F:7D:B7:28:80:7B:AC:DF:35:9E:BD:08:BD
X509v3 Authority Key Identifier:
keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/qxA1XM485F99tyiAe6zfNZ69CL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.74.0.0/16
77.69.38.0/24
185.158.220.0/22
195.46.0.0/19
195.97.52.0/24
213.249.0.0/18
Signature Algorithm: sha256WithRSAEncryption
57:c0:a0:91:87:ed:d0:36:e4:ec:ea:45:b7:c6:68:2c:c7:8a:
fa:6a:8d:44:fd:ba:86:b5:7a:ea:21:9e:0b:1f:e8:3b:4a:b0:
f6:43:70:18:ae:81:0b:ea:2a:72:2d:a6:c1:dc:f0:29:29:f6:
fc:70:f1:a3:ae:0f:b4:e3:8b:3d:4f:e4:7f:51:93:c8:f4:0c:
24:aa:6d:06:ba:a3:29:4c:46:03:80:39:9e:57:ea:e9:49:48:
08:b5:a8:bb:13:3f:26:1b:cf:a7:5f:6c:ee:c6:84:12:81:01:
58:d8:2d:b4:9f:cd:65:ed:45:b8:b6:5b:78:c2:9f:e6:8f:c3:
82:35:27:66:42:22:51:81:61:8a:a7:85:11:2a:ad:9b:b1:0f:
8d:d7:7c:d3:d0:61:59:e8:77:db:3f:84:13:6f:01:99:f5:4e:
69:7f:34:38:5e:e3:2c:55:38:67:d0:5d:56:8e:75:3f:5b:b7:
34:14:21:3c:ee:5a:5e:77:fa:3b:c6:33:61:b2:2b:2c:e4:9f:
b5:a8:35:3e:4e:8c:8c:0c:6f:0b:79:29:e1:69:6e:c7:fb:77:
da:23:28:be:38:07:fd:ef:2f:19:a9:7a:0a:ab:9c:73:6d:1d:
c7:29:a3:5f:75:2f:48:63:49:ae:93:81:8a:69:09:be:30:47:
d8:e4:c5:cb
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYqT1HnezwbLcGufFCYfy+omMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NTVjNWE3MTM3ZWI1ZDQ3ZWEyNGUxN2QyN2ZhOTJkMGI0
MmZiZDgwHhcNMjMwOTE0MTMxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjEwMzU1Y2NlM2NlNDVmN2RiNzI4ODA3YmFjZGYzNTllYmQwOGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDiukkeUGfjVu4bYfgu32Qa+4qm1
K6gv04Tiaxc6eYMjblQ+v+IQgY5Kqs7x+2jOOPGK/n4FC7uuHLmz3d8Lj/4m0cKZ
EaL1axk/WsF53ucMs/6hPLRfIFyi1wev9c/KF+5WlyxUeojOtFZH/3NOW/I9x0+0
9FMHSjgdaTO54Z4IxAU/EfucTPMuOHHUHHf43r+q4jfQAxoUM+HqHp+MGLN9kCSM
C/DDziKsayLpFT+g6yqQsCH+Ml1HU1gv0WPaKw1EkRza1Q/zYJ7V3rP++N83Rc0D
ydyNcYL1u8k8f/fZAO2D3mdMVZ4aJGS0Fofcl3iVCw/+Tr52e5rE3JNFbQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFKsQNVzOPORffbcogHus3zWevQi9MB8GA1UdIwQY
MBaAFJlVxacTfrXUfqJOF9J/qS0LQvvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85NDUzYTAtZTY1NS00ODBlLWI2YTkt
ZTM5NTI0ZTdhNmVkLzEvcXhBMVhNNDg1Rjk5dHlpQWU2emZOWjY5Q0wwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy85NDUzYTAtZTY1NS00ODBlLWI2YTktZTM5NTI0ZTdhNmVk
LzEvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAATAjAwMAPkoDBABN
RSYDBAK5ntwDBAXDLgADBADDYTQDBAbV+QAwDQYJKoZIhvcNAQELBQADggEBAFfA
oJGH7dA25OzqRbfGaCzHivpqjUT9uoa1euohngsf6DtKsPZDcBiugQvqKnItpsHc
8Ckp9vxw8aOuD7Tjiz1P5H9Rk8j0DCSqbQa6oylMRgOAOZ5X6ulJSAi1qLsTPyYb
z6dfbO7GhBKBAVjYLbSfzWXtRbi2W3jCn+aPw4I1J2ZCIlGBYYqnhREqrZuxD43X
fNPQYVnod9s/hBNvAZn1Tml/NDhe4yxVOGfQXVaOdT9btzQUITzuWl53+jvGM2Gy
Kyzkn7WoNT5OjIwMbwt5KeFpbsf7d9ojKL44B/3vLxmpegqrnHNtHccpo191L0hj
Sa6TgYppCb4wR9jkxcs=
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:45 2024 by rpki-client on console.sobornost.net