Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/Q6Fuxnol2JyqdQm84ShkJrs2a0g.roa
File: Q6Fuxnol2JyqdQm84ShkJrs2a0g.roa (raw, json)
Hash identifier: dnmJ/u0M3kMyKtwPw9fZ9niYSuRBE0SrcSYSQZJj/O0=
Subject key identifier: 43:A1:6E:C6:7A:25:D8:9C:AA:75:09:BC:E1:28:64:26:BB:36:6B:48
Certificate issuer: /CN=eb2490a8a133afc4939a882db7526c15f892e8c8
Certificate serial: 01857328408914D841C6A126C1CC09908483
Authority key identifier: EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/Q6Fuxnol2JyqdQm84ShkJrs2a0g.roa
Signing time: Mon 02 Jan 2023 15:44:55 +0000
ROA not before: Mon 02 Jan 2023 15:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206672
IP address blocks: 185.179.63.0/24 maxlen: 24
185.179.62.0/24 maxlen: 24
185.179.61.0/24 maxlen: 24
185.179.60.0/22 maxlen: 22
185.179.60.0/24 maxlen: 24
2a0a:7c80:fc00::/38 maxlen: 38
2a0a:7c80:f400::/38 maxlen: 38
2a0a:7c80:1c00::/38 maxlen: 38
2a0a:7c80:bc00::/38 maxlen: 38
2a0a:7c80:3c00::/38 maxlen: 38
2a0a:7c80:a800::/38 maxlen: 38
2a0a:7c80:1400::/38 maxlen: 38
2a0a:7c80::/32 maxlen: 32
2a0a:7c80:9400::/38 maxlen: 38
2a0a:7c80::/38 maxlen: 38
2a0a:7c80:8000::/38 maxlen: 38
2a0a:7c80:2800::/38 maxlen: 38
2a0a:7c80:5000::/38 maxlen: 38
2a0a:7c80:d000::/38 maxlen: 38
2a0a:7c80:ec00::/38 maxlen: 38
2a0a:7c80:6c00::/38 maxlen: 38
2a0a:7c80:5800::/38 maxlen: 38
2a0a:7c80:d800::/38 maxlen: 38
2a0a:7c80:c00::/38 maxlen: 38
2a0a:7c80:2000::/38 maxlen: 38
2a0a:7c80:a000::/38 maxlen: 38
2a0a:7c80:3400::/38 maxlen: 38
2a0a:7c80:b400::/38 maxlen: 38
2a0a:7c80:4800::/38 maxlen: 38
2a0a:7c80:c800::/38 maxlen: 38
2a0a:7c80:f000::/38 maxlen: 38
2a0a:7c80:400::/38 maxlen: 38
2a0a:7c80:8400::/38 maxlen: 38
2a0a:7c80:7000::/38 maxlen: 38
2a0a:7c80:dc00::/38 maxlen: 38
2a0a:7c80:5c00::/38 maxlen: 38
2a0a:7c80:8c00::/38 maxlen: 38
2a0a:7c80:6400::/38 maxlen: 38
2a0a:7c80:f800::/38 maxlen: 38
2a0a:7c80:7800::/38 maxlen: 38
2a0a:7c80:1800::/38 maxlen: 38
2a0a:7c80:9800::/38 maxlen: 38
2a0a:7c80:ac00::/38 maxlen: 38
2a0a:7c80:2c00::/38 maxlen: 38
2a0a:7c80:c000::/38 maxlen: 38
2a0a:7c80:4000::/38 maxlen: 38
2a0a:7c80:5400::/38 maxlen: 38
2a0a:7c80:d400::/38 maxlen: 38
2a0a:7c80:e800::/38 maxlen: 38
2a0a:7c80:7c00::/38 maxlen: 38
2a0a:7c80:6800::/38 maxlen: 38
2a0a:7c80:1000::/38 maxlen: 38
2a0a:7c80:9000::/38 maxlen: 38
2a0a:7c80:3800::/38 maxlen: 38
2a0a:7c80:2400::/38 maxlen: 38
2a0a:7c80:b800::/38 maxlen: 38
2a0a:7c80:a400::/38 maxlen: 38
2a0a:7c80:cc00::/38 maxlen: 38
2a0a:7c80:4c00::/38 maxlen: 38
2a0a:7c80:6000::/38 maxlen: 38
2a0a:7c80:e000::/38 maxlen: 38
2a0a:7c80:7400::/38 maxlen: 38
2a0a:7c80:e400::/38 maxlen: 38
2a0a:7c80:3000::/38 maxlen: 38
2a0a:7c80:4400::/38 maxlen: 38
2a0a:7c80:c400::/38 maxlen: 38
2a0a:7c80:b000::/38 maxlen: 38
2a0a:7c80:9c00::/38 maxlen: 38
2a0a:7c80:8800::/38 maxlen: 38
2a0a:7c80:800::/38 maxlen: 38
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:40:89:14:d8:41:c6:a1:26:c1:cc:09:90:84:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2490a8a133afc4939a882db7526c15f892e8c8
Validity
Not Before: Jan 2 15:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43a16ec67a25d89caa7509bce1286426bb366b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:28:e4:b8:20:c6:d4:6d:92:1e:f8:24:82:2d:
bf:46:93:d5:89:b8:f4:d6:48:49:43:df:54:8d:04:
93:28:c5:0d:02:b2:cb:51:33:23:fe:1b:0c:3f:6a:
17:3e:82:04:0b:63:e7:87:4c:1d:dc:2a:cc:f8:56:
b0:c4:f8:6e:a2:0d:73:b0:01:f1:e6:ce:d6:97:ad:
49:7a:99:57:dc:15:55:fa:28:b9:3a:c0:a7:32:94:
de:0b:9f:f8:de:2d:fd:ee:ea:eb:5e:f8:86:10:4e:
10:40:39:94:40:84:4d:50:fb:15:3f:b1:6a:be:ab:
2c:36:b5:77:2f:9d:ba:0f:dc:84:bc:21:a2:6f:a3:
fd:08:8a:34:56:51:f4:c5:da:17:42:6e:69:bf:ad:
18:1c:a8:29:04:01:f0:b2:22:68:4c:cc:a5:92:bc:
96:98:1d:ed:1b:65:7b:2e:4b:be:b1:5e:fd:dc:62:
94:4b:a3:a1:04:a2:a1:3c:84:98:5c:59:04:87:61:
2b:da:c8:52:66:82:b0:da:9b:0b:01:37:93:f0:86:
7f:36:84:01:49:4e:53:2e:30:de:c7:1a:79:90:f1:
20:b0:a6:41:76:9c:ea:aa:f4:a6:8f:20:24:9b:ce:
98:42:86:c8:48:8d:18:c9:19:38:3f:ed:e3:8a:60:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A1:6E:C6:7A:25:D8:9C:AA:75:09:BC:E1:28:64:26:BB:36:6B:48
X509v3 Authority Key Identifier:
keyid:EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/Q6Fuxnol2JyqdQm84ShkJrs2a0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.60.0/22
IPv6:
2a0a:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
65:42:db:83:90:7c:65:43:07:79:2d:a1:84:36:a7:50:8f:07:
e5:b4:0f:57:e9:88:47:b5:00:28:0c:54:bc:95:bc:68:73:03:
98:11:95:9d:86:6d:1b:40:e9:78:04:65:7c:0f:c7:98:67:a8:
85:0d:21:60:2f:59:4f:57:b7:16:67:92:dd:23:09:fc:e8:8c:
61:88:c5:1d:77:0b:3a:0d:88:46:a9:f3:f2:35:50:a7:90:2d:
83:95:d2:cf:5e:b6:4d:55:0e:9a:dd:be:cd:06:af:da:34:29:
cf:9d:ec:df:c8:15:e3:bc:54:11:31:a4:30:a1:d2:3b:18:f5:
af:86:4e:eb:d0:c7:af:aa:2b:01:e9:df:b3:8d:9d:b9:49:40:
c2:7c:24:81:90:20:b2:23:8d:6e:20:22:ac:a7:fa:b9:6e:ac:
a2:98:3e:4b:fa:a8:a0:00:a0:a4:3f:3e:82:0c:13:fe:5e:73:
09:41:7a:48:7a:9a:7d:17:55:59:f2:b0:7a:8d:59:9a:36:bc:
44:de:42:53:40:57:1a:bd:46:81:9d:04:08:b4:2d:0d:7c:9d:
fc:66:73:8c:42:64:26:73:bb:b0:4c:62:23:29:77:4c:94:5b:
67:ce:07:b2:27:b7:77:dc:3c:2e:b8:1d:20:bf:cd:3c:82:50:
14:3c:93:4e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVzKECJFNhBxqEmwcwJkISDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMjQ5MGE4YTEzM2FmYzQ5MzlhODgyZGI3NTI2YzE1Zjg5
MmU4YzgwHhcNMjMwMTAyMTU0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2ExNmVjNjdhMjVkODljYWE3NTA5YmNlMTI4NjQyNmJiMzY2YjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkijkuCDG1G2SHvgkgi2/RpPVibj0
1khJQ99UjQSTKMUNArLLUTMj/hsMP2oXPoIEC2Pnh0wd3CrM+FawxPhuog1zsAHx
5s7Wl61JeplX3BVV+ii5OsCnMpTeC5/43i397urrXviGEE4QQDmUQIRNUPsVP7Fq
vqssNrV3L526D9yEvCGib6P9CIo0VlH0xdoXQm5pv60YHKgpBAHwsiJoTMylkryW
mB3tG2V7Lku+sV793GKUS6OhBKKhPISYXFkEh2Er2shSZoKw2psLATeT8IZ/NoQB
SU5TLjDexxp5kPEgsKZBdpzqqvSmjyAkm86YQobISI0YyRk4P+3jimCTywIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEOhbsZ6JdicqnUJvOEoZCa7NmtIMB8GA1UdIwQY
MBaAFOskkKihM6/Ek5qILbdSbBX4kujIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnlTUXFLRXpyOFNUbW9ndHQxSnNGZmlTNk1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83NDU5MmUtYWE4MC00MDBiLWI0Nzkt
MzljNTUwZjBhNGU0LzEvUTZGdXhub2wySnlxZFFtODRTaGtKcnMyYTBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83NDU5MmUtYWE4MC00MDBiLWI0NzktMzljNTUwZjBhNGU0
LzEvNnlTUXFLRXpyOFNUbW9ndHQxSnNGZmlTNk1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubM8MA0E
AgACMAcDBQAqCnyAMA0GCSqGSIb3DQEBCwUAA4IBAQBlQtuDkHxlQwd5LaGENqdQ
jwfltA9X6YhHtQAoDFS8lbxocwOYEZWdhm0bQOl4BGV8D8eYZ6iFDSFgL1lPV7cW
Z5LdIwn86IxhiMUddws6DYhGqfPyNVCnkC2DldLPXrZNVQ6a3b7NBq/aNCnPnezf
yBXjvFQRMaQwodI7GPWvhk7r0MevqisB6d+zjZ25SUDCfCSBkCCyI41uICKsp/q5
bqyimD5L+qigAKCkPz6CDBP+XnMJQXpIepp9F1VZ8rB6jVmaNrxE3kJTQFcavUaB
nQQItC0NfJ38ZnOMQmQmc7uwTGIjKXdMlFtnzgeyJ7d33DwuuB0gv808glAUPJNO
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:02 2024 by rpki-client on console-fra.rpki-client.org