Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/QR6KfwQ0Hv7L43aXT9_kENWUAgc.roa
File: QR6KfwQ0Hv7L43aXT9_kENWUAgc.roa (raw, json)
Hash identifier: oCpr8schqC7csNhHCI7cDAOUzs90YiRqqHdkP2UJloo=
Subject key identifier: 41:1E:8A:7F:04:34:1E:FE:CB:E3:76:97:4F:DF:E4:10:D5:94:02:07
Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial: 01856DC19F456F52057012E626B98FEC919E
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/QR6KfwQ0Hv7L43aXT9_kENWUAgc.roa
Signing time: Sun 01 Jan 2023 14:34:43 +0000
ROA not before: Sun 01 Jan 2023 14:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59723
IP address blocks: 185.191.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:9f:45:6f:52:05:70:12:e6:26:b9:8f:ec:91:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Validity
Not Before: Jan 1 14:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=411e8a7f04341efecbe376974fdfe410d5940207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:6b:36:70:6e:92:ed:dc:af:82:7b:ff:89:
44:49:86:1f:70:c6:53:c1:d5:22:16:d5:82:c3:05:
4f:04:01:5a:b2:e0:5f:0a:b2:e2:b6:65:f3:c0:1b:
60:ad:5d:f8:bd:e9:3e:b3:08:c0:a9:ef:f7:7f:c2:
91:d1:0c:97:18:5f:81:22:10:12:0b:b8:cd:77:70:
86:ba:79:16:b9:3a:10:67:6b:78:ce:a4:59:c6:00:
27:cb:e1:8a:69:60:16:40:e1:13:16:66:65:1c:21:
95:6c:02:0d:06:e4:45:ab:c8:b5:25:4a:60:b3:0f:
0d:25:c6:d5:26:f8:56:b1:7c:89:bf:64:c6:e9:47:
b3:2a:48:e6:66:6a:53:2e:ac:e6:1c:ab:fe:b6:72:
59:9f:0c:55:f9:36:53:a3:af:6c:a0:3d:f1:7e:d5:
2d:7e:8a:32:4d:4b:2a:1d:68:cc:44:21:2c:cf:cb:
a8:5a:72:62:af:d9:9f:99:ed:ab:ab:5a:5a:5e:42:
23:b5:c5:dc:56:fe:4e:6b:ea:87:58:17:5d:da:2b:
ba:5b:cd:16:2a:d7:30:cc:89:eb:a7:48:d6:56:46:
7d:ca:5f:30:b2:e6:36:f2:6f:b2:88:2c:f4:79:b0:
b2:00:19:e5:e1:70:e6:82:10:f3:1e:99:94:c3:89:
6f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1E:8A:7F:04:34:1E:FE:CB:E3:76:97:4F:DF:E4:10:D5:94:02:07
X509v3 Authority Key Identifier:
keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/QR6KfwQ0Hv7L43aXT9_kENWUAgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.88.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:70:4d:68:7c:a9:50:9c:78:b5:5f:b8:fa:00:fb:3d:98:43:
35:a2:d2:a3:ba:cc:b9:44:f9:f2:15:48:ec:58:73:7b:56:cb:
81:aa:9a:3a:49:70:72:c3:b8:30:a9:bc:cf:3e:26:5d:70:40:
58:fc:e1:a7:f5:d7:4a:bc:de:bd:58:f8:66:cd:12:a8:a4:65:
f3:92:11:f2:1b:17:f8:fd:70:94:be:a6:32:19:42:f0:79:2a:
62:73:3d:3d:db:a2:96:b2:12:a0:60:ba:d0:cd:a1:d4:22:cc:
8f:f4:f5:6b:e8:85:30:d3:e4:02:4d:ca:8c:d1:34:9b:fd:6b:
f1:61:f2:8e:d5:02:ee:55:24:9b:77:ec:12:4a:7c:7c:5e:3e:
22:fd:35:af:f3:78:c8:21:ac:c2:b3:9e:77:8b:16:2a:bc:d7:
60:61:9d:c5:a1:bf:51:3a:f1:ea:e1:a2:c3:8e:57:36:2e:bc:
cb:75:f6:62:7f:92:3a:bd:35:19:81:d1:ee:39:e8:d1:5c:7d:
d9:33:71:20:db:00:ae:04:ce:e1:ac:d4:5a:b8:8d:e9:a2:d7:
80:57:0e:63:a9:f9:52:fe:ec:aa:e4:a6:90:8b:39:f2:ce:cb:
3c:42:f8:27:c9:fc:a1:e2:ee:86:ee:ec:fc:1d:b2:b3:7b:05:
a7:29:8b:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtwZ9Fb1IFcBLmJrmP7JGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIzNjZhMTM2ZjhmY2M1ZGY1MjNjOGQ0NmY3OTA3OTFj
MWIzYmIwHhcNMjMwMTAxMTQzNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTFlOGE3ZjA0MzQxZWZlY2JlMzc2OTc0ZmRmZTQxMGQ1OTQwMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIxrNnBuku3cr4J7/4lESYYfcMZT
wdUiFtWCwwVPBAFasuBfCrLitmXzwBtgrV34vek+swjAqe/3f8KR0QyXGF+BIhAS
C7jNd3CGunkWuToQZ2t4zqRZxgAny+GKaWAWQOETFmZlHCGVbAINBuRFq8i1JUpg
sw8NJcbVJvhWsXyJv2TG6UezKkjmZmpTLqzmHKv+tnJZnwxV+TZTo69soD3xftUt
fooyTUsqHWjMRCEsz8uoWnJir9mfme2rq1paXkIjtcXcVv5Oa+qHWBdd2iu6W80W
KtcwzInrp0jWVkZ9yl8wsuY28m+yiCz0ebCyABnl4XDmghDzHpmUw4lvEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEEein8ENB7+y+N2l0/f5BDVlAIHMB8GA1UdIwQY
MBaAFG8LNmoTb4/MXfUjyNRveQeRwbO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kMjNkZGUtZTI0Zi00MjU4LWE3Y2Ut
ZWVmNmMyZjQ1MTc2LzEvUVI2S2Z3UTBIdjdMNDNhWFQ5X2tFTldVQWdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kMjNkZGUtZTI0Zi00MjU4LWE3Y2UtZWVmNmMyZjQ1MTc2
LzEvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCub9YMA0G
CSqGSIb3DQEBCwUAA4IBAQC2cE1ofKlQnHi1X7j6APs9mEM1otKjusy5RPnyFUjs
WHN7VsuBqpo6SXByw7gwqbzPPiZdcEBY/OGn9ddKvN69WPhmzRKopGXzkhHyGxf4
/XCUvqYyGULweSpicz0926KWshKgYLrQzaHUIsyP9PVr6IUw0+QCTcqM0TSb/Wvx
YfKO1QLuVSSbd+wSSnx8Xj4i/TWv83jIIazCs553ixYqvNdgYZ3Fob9ROvHq4aLD
jlc2LrzLdfZif5I6vTUZgdHuOejRXH3ZM3Eg2wCuBM7hrNRauI3poteAVw5jqflS
/uyq5KaQiznyzss8Qvgnyfyh4u6G7uz8HbKzewWnKYtd
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:48 2024 by rpki-client on console-ams.rpki-client.org