Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/qp_WardHFIx9YXWABP5nfPdqdDk.roa
File: qp_WardHFIx9YXWABP5nfPdqdDk.roa (raw, json)
Hash identifier: 9f5EkL368RySk/Rqi0iKsgKjDYc1jNcYKA1SZXIjlIc=
Subject key identifier: AA:9F:D6:6A:B7:47:14:8C:7D:61:75:80:04:FE:67:7C:F7:6A:74:39
Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial: 0189B7BB62E7136782081396082BF25A87FA
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/qp_WardHFIx9YXWABP5nfPdqdDk.roa
Signing time: Wed 02 Aug 2023 19:30:58 +0000
ROA not before: Wed 02 Aug 2023 19:30:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 178.236.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b7:bb:62:e7:13:67:82:08:13:96:08:2b:f2:5a:87:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Validity
Not Before: Aug 2 19:30:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa9fd66ab747148c7d61758004fe677cf76a7439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b9:9d:32:5a:2a:44:fa:80:9f:d0:e2:af:0b:
cb:bb:86:c5:49:8a:f3:1d:d9:6c:4b:86:e9:1c:82:
f2:13:6f:2a:31:d5:9c:f3:32:04:9b:89:58:4c:f4:
ff:63:05:ee:e5:cd:9d:fe:92:c2:33:d7:f8:c7:f2:
c8:d4:7a:84:83:b0:69:3e:c5:22:a0:89:33:7b:e6:
58:72:03:39:65:5b:84:b2:06:72:4f:24:9c:a4:9e:
41:fe:92:8b:89:a7:0d:54:b6:88:f3:eb:22:f7:b2:
a5:8a:3b:a7:18:f6:fb:e6:d9:93:53:54:81:01:70:
43:21:95:17:2c:7a:45:00:e6:b6:ce:fd:09:1b:ee:
f9:5b:58:3d:9e:d9:c4:76:38:a4:1a:79:1a:71:c9:
51:4f:41:1b:e1:e8:ef:12:07:0d:56:df:23:06:82:
11:b9:cf:23:5b:19:38:d1:77:40:4c:76:70:00:ff:
28:e4:62:6c:00:3d:b9:76:55:45:81:1b:b7:b8:8a:
45:13:76:ca:a5:9f:09:e2:86:da:73:24:92:72:3d:
e1:0c:06:1c:44:e9:2f:76:3f:18:d0:71:d1:8c:ff:
49:80:40:99:1a:d3:5b:16:f2:ad:80:af:dc:ee:a3:
36:11:ba:09:b7:f8:05:17:e7:2d:7b:95:c2:a7:ed:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9F:D6:6A:B7:47:14:8C:7D:61:75:80:04:FE:67:7C:F7:6A:74:39
X509v3 Authority Key Identifier:
keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/qp_WardHFIx9YXWABP5nfPdqdDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.184.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7b:07:9a:22:63:00:e9:6a:ab:37:ca:25:9d:67:16:05:34:
43:5c:d6:d1:15:c7:0e:7f:d2:75:5f:80:8f:37:9f:0e:fc:e2:
64:d9:2e:cb:e4:bb:c1:6b:bd:81:56:9d:fd:3e:40:50:90:b4:
2f:7b:13:9a:ab:d2:46:95:cf:54:61:30:98:64:9c:95:08:93:
29:8d:aa:ee:8e:02:61:ac:25:a6:da:cf:09:5d:8c:01:9b:2e:
7d:8f:ba:23:fe:40:6a:2b:2c:79:01:e0:4a:0e:c0:97:47:67:
3e:9d:0c:2c:90:41:00:f8:44:2a:fd:bd:85:62:c3:4b:e6:09:
0f:85:18:ef:51:6e:03:9a:9e:94:2e:d6:36:aa:b9:9c:3a:f0:
67:0e:12:36:09:e6:2d:38:55:12:79:d2:01:0e:2e:50:f7:a0:
2e:24:91:63:62:db:64:6a:cb:3e:10:77:40:0c:2d:3c:d6:55:
92:25:22:a8:3a:fe:ec:ea:76:e4:ef:2b:8e:62:db:2f:26:02:
d1:4a:31:c0:35:17:9d:4b:13:5f:7e:57:73:26:3f:75:d4:24:
fd:75:ed:2b:21:ae:9a:f0:82:22:31:86:74:67:a3:b4:a0:69:
ea:30:40:6e:75:d4:f5:b9:f1:7d:6b:1e:4d:31:7c:b2:a9:a0:
9e:73:82:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYm3u2LnE2eCCBOWCCvyWof6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNmNGNiNGJhYjVjMTA4MDFhNzcwNjU4ZGY4OTFjZmI4
YzY4YzYwHhcNMjMwODAyMTkzMDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTlmZDY2YWI3NDcxNDhjN2Q2MTc1ODAwNGZlNjc3Y2Y3NmE3NDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7mdMloqRPqAn9DirwvLu4bFSYrz
HdlsS4bpHILyE28qMdWc8zIEm4lYTPT/YwXu5c2d/pLCM9f4x/LI1HqEg7BpPsUi
oIkze+ZYcgM5ZVuEsgZyTyScpJ5B/pKLiacNVLaI8+si97KlijunGPb75tmTU1SB
AXBDIZUXLHpFAOa2zv0JG+75W1g9ntnEdjikGnkacclRT0Eb4ejvEgcNVt8jBoIR
uc8jWxk40XdATHZwAP8o5GJsAD25dlVFgRu3uIpFE3bKpZ8J4obacySScj3hDAYc
ROkvdj8Y0HHRjP9JgECZGtNbFvKtgK/c7qM2EboJt/gFF+cte5XCp+0pfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKqf1mq3RxSMfWF1gAT+Z3z3anQ5MB8GA1UdIwQY
MBaAFJ0j9MtLq1wQgBp3BljfiRz7jGjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODkt
MDE1NzdhOTI3ZmE5LzEvcXBfV2FyZEhGSXg5WVhXQUJQNW5mUGRxZERrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODktMDE1NzdhOTI3ZmE5
LzEvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuy4MA0G
CSqGSIb3DQEBCwUAA4IBAQCIeweaImMA6WqrN8olnWcWBTRDXNbRFccOf9J1X4CP
N58O/OJk2S7L5LvBa72BVp39PkBQkLQvexOaq9JGlc9UYTCYZJyVCJMpjarujgJh
rCWm2s8JXYwBmy59j7oj/kBqKyx5AeBKDsCXR2c+nQwskEEA+EQq/b2FYsNL5gkP
hRjvUW4Dmp6ULtY2qrmcOvBnDhI2CeYtOFUSedIBDi5Q96AuJJFjYttkass+EHdA
DC081lWSJSKoOv7s6nbk7yuOYtsvJgLRSjHANRedSxNffldzJj911CT9de0rIa6a
8IIiMYZ0Z6O0oGnqMEBuddT1ufF9ax5NMXyyqaCec4Jw
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:46 2024 by rpki-client on console-ams.rpki-client.org