Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/qIFkzwUMdYDcZpUVKDOvkn4tBLE.roa
File: qIFkzwUMdYDcZpUVKDOvkn4tBLE.roa (raw, json)
Hash identifier: mq/B5whNTd0jENf9gdN5M/AToupPbneM+lb6+YH4Hc8=
Subject key identifier: A8:81:64:CF:05:0C:75:80:DC:66:95:15:28:33:AF:92:7E:2D:04:B1
Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Certificate serial: 018C1A5F4A7A1AD2063FF6F009E881D01D44
Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/qIFkzwUMdYDcZpUVKDOvkn4tBLE.roa
Signing time: Wed 29 Nov 2023 09:18:21 +0000
ROA not before: Wed 29 Nov 2023 09:18:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.235.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:5f:4a:7a:1a:d2:06:3f:f6:f0:09:e8:81:d0:1d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Validity
Not Before: Nov 29 09:18:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a88164cf050c7580dc6695152833af927e2d04b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:aa:15:91:12:7b:e6:d5:25:11:55:d9:29:
d1:68:a4:3a:6e:d9:08:e0:d2:5c:ce:78:4e:5f:ab:
df:57:66:34:b7:ba:aa:b2:87:28:1f:ff:1f:41:2a:
be:6f:6c:cf:68:37:a4:77:a6:28:11:c1:58:0f:73:
91:ef:47:32:e2:47:71:19:9f:9b:e7:e0:2e:de:21:
d0:4f:28:22:7d:ec:96:13:4a:78:59:f8:49:7c:39:
4c:6d:53:5e:cc:51:11:62:bf:32:08:b9:63:98:2a:
43:0e:eb:de:29:f3:a1:d4:af:05:12:ee:01:84:10:
b3:92:07:bc:d1:9d:89:60:bf:26:c9:5e:d7:91:a2:
33:3c:bc:ef:6f:2f:49:d4:c4:f8:1f:85:88:ef:18:
ba:32:d2:e1:dc:7f:79:82:f2:07:45:70:c0:0c:b9:
01:8c:33:ab:1b:c3:7c:81:6f:a2:d0:19:b7:eb:12:
69:47:6f:1a:3c:d7:9c:8c:6f:4e:cd:38:c3:31:84:
16:9e:51:7a:0f:6e:05:cf:ab:91:23:1b:f7:0c:21:
7d:68:34:23:10:3c:36:a4:ae:6f:ca:92:da:0d:d7:
2c:ed:e7:c3:e6:a2:c1:2e:ed:43:14:d0:f6:e6:9c:
35:6b:8b:5b:6d:99:d8:e2:cf:df:ad:bc:49:b6:e9:
24:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:81:64:CF:05:0C:75:80:DC:66:95:15:28:33:AF:92:7E:2D:04:B1
X509v3 Authority Key Identifier:
keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/qIFkzwUMdYDcZpUVKDOvkn4tBLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.199.0/24
Signature Algorithm: sha256WithRSAEncryption
37:50:65:6a:8e:01:8e:d9:a7:f6:c2:bd:b5:2b:8d:84:8f:e0:
76:29:6c:00:11:23:93:b8:fa:2a:88:e4:d2:95:9c:af:92:ff:
04:cb:10:89:fa:e9:c4:6f:50:73:c6:4f:89:79:74:b7:f6:c2:
a0:12:b3:8d:94:1e:fa:a7:10:ba:43:94:0a:c0:10:d8:f4:5e:
75:e1:c6:4b:be:f0:60:26:ea:79:2e:60:88:80:02:86:b1:f5:
ad:30:47:c5:c6:cc:96:85:17:cd:ab:ef:44:78:b3:99:f2:88:
32:0f:ea:f2:52:b1:3e:02:7e:8e:72:84:4f:aa:9c:03:74:d1:
28:c4:65:2f:40:d7:0f:7e:b4:c7:d3:7c:23:7e:95:bd:06:12:
c6:dd:09:ef:5f:64:0e:20:c4:28:09:a9:99:86:2a:09:86:b0:
96:35:91:8b:35:13:f2:71:fa:4e:0f:35:a5:7a:59:14:1d:42:
6f:5a:18:76:4c:58:7f:09:a2:10:77:ff:4c:af:7a:bd:88:89:
e1:12:98:5e:c5:9e:ef:0a:ad:92:ae:4c:77:44:68:52:c0:9c:
45:b3:72:9a:5a:a1:1f:09:4c:91:15:11:59:4a:25:12:4b:48:
bb:f9:74:5c:9c:ce:cf:b2:d3:ae:f9:7e:b7:8b:0c:52:d9:58:
1a:f2:86:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwaX0p6GtIGP/bwCeiB0B1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYmU5MWViNjNhNDRmMWU5ZjFhODNlZGQyMThhMWVjNzVj
MjVlOTEwHhcNMjMxMTI5MDkxODIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODgxNjRjZjA1MGM3NTgwZGM2Njk1MTUyODMzYWY5MjdlMmQwNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoyqFZESe+bVJRFV2SnRaKQ6btkI
4NJcznhOX6vfV2Y0t7qqsocoH/8fQSq+b2zPaDekd6YoEcFYD3OR70cy4kdxGZ+b
5+Au3iHQTygifeyWE0p4WfhJfDlMbVNezFERYr8yCLljmCpDDuveKfOh1K8FEu4B
hBCzkge80Z2JYL8myV7XkaIzPLzvby9J1MT4H4WI7xi6MtLh3H95gvIHRXDADLkB
jDOrG8N8gW+i0Bm36xJpR28aPNecjG9OzTjDMYQWnlF6D24Fz6uRIxv3DCF9aDQj
EDw2pK5vypLaDdcs7efD5qLBLu1DFND25pw1a4tbbZnY4s/frbxJtukkuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKiBZM8FDHWA3GaVFSgzr5J+LQSxMB8GA1UdIwQY
MBaAFAy+ketjpE8enxqD7dIYoex1wl6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREw2UjYyT2tUeDZmR29QdDBoaWg3SFhDWHBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83ZTUxYjQtMGFiNC00NzE5LWIzMzAt
YmRjNWFlOGFiZGIxLzEvcUlGa3p3VU1kWURjWnBVVktET3ZrbjR0QkxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83ZTUxYjQtMGFiNC00NzE5LWIzMzAtYmRjNWFlOGFiZGIx
LzEvREw2UjYyT2tUeDZmR29QdDBoaWg3SFhDWHBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuevHMA0G
CSqGSIb3DQEBCwUAA4IBAQA3UGVqjgGO2af2wr21K42Ej+B2KWwAESOTuPoqiOTS
lZyvkv8EyxCJ+unEb1Bzxk+JeXS39sKgErONlB76pxC6Q5QKwBDY9F514cZLvvBg
Jup5LmCIgAKGsfWtMEfFxsyWhRfNq+9EeLOZ8ogyD+ryUrE+An6OcoRPqpwDdNEo
xGUvQNcPfrTH03wjfpW9BhLG3QnvX2QOIMQoCamZhioJhrCWNZGLNRPycfpODzWl
elkUHUJvWhh2TFh/CaIQd/9Mr3q9iInhEphexZ7vCq2Srkx3RGhSwJxFs3KaWqEf
CUyRFRFZSiUSS0i7+XRcnM7PstOu+X63iwxS2Vga8oZl
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:26 2024 by rpki-client on console-ams.rpki-client.org