Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/qRjnVoOhiRgPvnyZvldVRLH2FmQ.roa
File: qRjnVoOhiRgPvnyZvldVRLH2FmQ.roa (raw, json)
Hash identifier: BC83xrPNnvWLYWd++YHpUBg71D5uW41s99cNZvuj8qI=
Subject key identifier: A9:18:E7:56:83:A1:89:18:0F:BE:7C:99:BE:57:55:44:B1:F6:16:64
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 01856DA634CB1F765AB72FB260B4769F8FDA
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/qRjnVoOhiRgPvnyZvldVRLH2FmQ.roa
Signing time: Sun 01 Jan 2023 14:04:47 +0000
ROA not before: Sun 01 Jan 2023 14:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 185.246.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:34:cb:1f:76:5a:b7:2f:b2:60:b4:76:9f:8f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Jan 1 14:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a918e75683a189180fbe7c99be575544b1f61664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:d2:bb:f2:0a:40:5e:df:cd:33:19:28:58:
3b:28:50:c8:e6:51:7d:49:a7:e2:c4:f7:27:be:ce:
f0:d6:56:30:1b:b3:f4:9d:24:6c:ef:e6:53:c7:03:
fb:d0:56:ec:ce:2a:8f:40:a7:85:00:fa:3e:e7:c4:
6b:f4:e4:7f:70:47:42:af:a2:ab:d7:b7:77:2f:50:
1a:dd:5e:e2:b5:e5:94:27:27:d8:ce:f4:1e:5b:0c:
13:2a:b6:f6:46:3a:28:c2:5f:1f:08:9c:32:79:9b:
5d:87:6a:4f:f6:94:75:5f:c3:11:07:86:65:2b:50:
08:99:ef:dc:0c:17:aa:59:bf:a6:f7:43:3e:ee:1f:
44:fd:b2:05:1f:22:52:be:a3:61:17:3f:c7:ca:17:
bd:ff:73:10:8e:30:17:d0:98:1e:a2:83:8a:f0:0d:
e4:61:98:c7:01:7d:df:8f:09:4b:48:c2:66:5b:ee:
91:f3:26:f7:3b:c9:11:7c:69:50:6f:2a:b2:9c:df:
d8:c7:6f:9a:be:64:13:4f:32:bf:09:aa:bc:57:92:
b6:ff:04:ee:7d:0c:5b:fb:f4:f9:22:5c:27:6e:bc:
f7:7d:81:35:12:36:d6:f8:81:ae:44:38:13:00:b8:
70:c0:49:01:b4:5b:95:67:8c:67:ed:bc:90:4f:61:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:18:E7:56:83:A1:89:18:0F:BE:7C:99:BE:57:55:44:B1:F6:16:64
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/qRjnVoOhiRgPvnyZvldVRLH2FmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.131.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:24:be:40:c7:a5:2c:48:91:ca:7d:c2:74:e8:86:e1:e9:e8:
29:1b:8a:51:32:a0:f4:e6:55:bb:f9:35:33:07:b3:89:4c:39:
64:6b:a9:6e:d9:64:8a:8d:2d:2e:f8:8a:b7:73:9e:fb:58:81:
bc:14:7d:03:bf:5d:b9:e5:38:37:81:b4:2b:eb:df:dc:4f:29:
a2:ed:38:47:f6:2a:eb:f6:00:67:1f:ed:a4:01:c3:9f:a0:41:
c1:a0:52:fa:3b:6c:5b:f5:55:aa:bf:7f:ab:84:be:6e:9a:13:
e8:c8:30:90:ce:88:f4:0b:64:02:2e:f7:00:d9:aa:e0:c7:0f:
1b:c6:09:c0:cc:5d:32:2d:4a:7a:5c:73:da:fc:8c:80:c2:1b:
36:9c:8c:d8:ca:d5:b1:20:f5:72:ce:8b:eb:ff:6d:23:a5:e7:
20:ab:5f:86:2d:3f:e6:91:9c:78:9a:b2:22:6c:e1:5e:88:b8:
49:0d:4e:a9:ba:6e:df:e1:3c:e8:35:85:b0:ad:9d:7c:73:49:
6a:12:68:38:cc:01:28:8e:96:08:17:50:38:8d:1e:71:5e:23:
bc:38:53:d7:e5:67:0f:d0:f8:22:21:b3:a8:47:51:a4:bb:98:
8a:c1:b1:5e:61:a0:72:02:2f:25:4b:af:b1:42:ee:a7:13:71:
b7:0b:da:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtpjTLH3Zaty+yYLR2n4/aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNzk4ZjBmZTRmNGRmZmRmZWQyYzhlNjJkMjM1NDMwZjQ5
Mzc3Y2QwHhcNMjMwMTAxMTQwNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTE4ZTc1NjgzYTE4OTE4MGZiZTdjOTliZTU3NTU0NGIxZjYxNjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrDSu/IKQF7fzTMZKFg7KFDI5lF9
SafixPcnvs7w1lYwG7P0nSRs7+ZTxwP70FbsziqPQKeFAPo+58Rr9OR/cEdCr6Kr
17d3L1Aa3V7iteWUJyfYzvQeWwwTKrb2Rjoowl8fCJwyeZtdh2pP9pR1X8MRB4Zl
K1AIme/cDBeqWb+m90M+7h9E/bIFHyJSvqNhFz/Hyhe9/3MQjjAX0JgeooOK8A3k
YZjHAX3fjwlLSMJmW+6R8yb3O8kRfGlQbyqynN/Yx2+avmQTTzK/Caq8V5K2/wTu
fQxb+/T5Ilwnbrz3fYE1EjbW+IGuRDgTALhwwEkBtFuVZ4xn7byQT2FgTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKkY51aDoYkYD758mb5XVUSx9hZkMB8GA1UdIwQY
MBaAFGp5jw/k9N/9/tLI5i0jVDD0k3fNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMt
NzdjZjgxMDQxMDgzLzEvcVJqblZvT2hpUmdQdm55WnZsZFZSTEgyRm1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMtNzdjZjgxMDQxMDgz
LzEvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufaDMA0G
CSqGSIb3DQEBCwUAA4IBAQBvJL5Ax6UsSJHKfcJ06Ibh6egpG4pRMqD05lW7+TUz
B7OJTDlka6lu2WSKjS0u+Iq3c577WIG8FH0Dv1255Tg3gbQr69/cTymi7ThH9irr
9gBnH+2kAcOfoEHBoFL6O2xb9VWqv3+rhL5umhPoyDCQzoj0C2QCLvcA2argxw8b
xgnAzF0yLUp6XHPa/IyAwhs2nIzYytWxIPVyzovr/20jpecgq1+GLT/mkZx4mrIi
bOFeiLhJDU6pum7f4TzoNYWwrZ18c0lqEmg4zAEojpYIF1A4jR5xXiO8OFPX5WcP
0PgiIbOoR1Gku5iKwbFeYaByAi8lS6+xQu6nE3G3C9pY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:17 2024 by rpki-client on console-ams.rpki-client.org