Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f6a0c1-480a-4232-9fb7-8fd384b42c9e/1/q1-fpKWllKQQPPqeNQnYIDuCvpY.roa
File: q1-fpKWllKQQPPqeNQnYIDuCvpY.roa (raw, json)
Hash identifier: BCXlPT00TX1RryH4m6EYohzX8BP3t0426CzucwWtDZE=
Subject key identifier: AB:5F:9F:A4:A5:A5:94:A4:10:3C:FA:9E:35:09:D8:20:3B:82:BE:96
Certificate issuer: /CN=f9ff7b68633cec51a181067b831826637df98d6e
Certificate serial: 01856BC12E08833E3DDCB83F9B62B681E762
Authority key identifier: F9:FF:7B:68:63:3C:EC:51:A1:81:06:7B:83:18:26:63:7D:F9:8D:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-f97aGM87FGhgQZ7gxgmY335jW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f6a0c1-480a-4232-9fb7-8fd384b42c9e/1/q1-fpKWllKQQPPqeNQnYIDuCvpY.roa
Signing time: Sun 01 Jan 2023 05:15:00 +0000
ROA not before: Sun 01 Jan 2023 05:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24904
IP address blocks: 185.251.160.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:2e:08:83:3e:3d:dc:b8:3f:9b:62:b6:81:e7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9ff7b68633cec51a181067b831826637df98d6e
Validity
Not Before: Jan 1 05:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab5f9fa4a5a594a4103cfa9e3509d8203b82be96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:6f:67:97:6c:b8:1e:cf:b0:7d:b3:0b:b5:
74:ef:a3:a7:ca:af:38:b1:5c:6d:e3:d0:b8:85:54:
e1:37:e1:f6:d3:ac:72:7d:11:12:c5:59:2c:fa:a3:
ac:81:1b:10:f9:68:e2:dc:91:d7:78:33:af:1d:31:
b9:cb:1e:c5:28:43:30:4c:aa:75:91:d3:ca:55:6a:
ee:5c:c7:e7:90:8c:9b:73:a5:8d:df:a7:3a:94:c1:
bd:30:76:84:1e:f3:ee:17:6f:8a:b3:d5:fe:31:1e:
6b:1b:5d:a2:d3:9b:3b:47:34:e2:b6:ab:56:70:76:
e0:1e:91:c4:ab:84:86:79:cb:06:96:4c:96:4c:94:
bf:dc:a2:24:95:0f:21:13:55:ca:32:95:84:31:f1:
ea:f2:ad:2b:a3:e8:60:cb:92:ab:9a:78:c7:43:7c:
e2:ba:a6:79:15:42:b7:fd:57:6b:fe:02:b8:f2:19:
55:40:8b:22:01:ea:8c:fe:a5:3e:53:33:3b:fb:97:
29:ac:b7:d2:9e:05:46:cc:8b:63:e9:87:df:a4:8b:
1b:e3:e3:f3:dc:5a:32:f1:41:a5:85:63:dd:b2:3d:
42:4e:0f:56:eb:7f:9d:71:62:84:15:48:20:6e:e6:
30:ea:5e:ae:9c:78:0e:9a:45:b8:dd:2b:13:97:d4:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5F:9F:A4:A5:A5:94:A4:10:3C:FA:9E:35:09:D8:20:3B:82:BE:96
X509v3 Authority Key Identifier:
keyid:F9:FF:7B:68:63:3C:EC:51:A1:81:06:7B:83:18:26:63:7D:F9:8D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-f97aGM87FGhgQZ7gxgmY335jW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f6a0c1-480a-4232-9fb7-8fd384b42c9e/1/q1-fpKWllKQQPPqeNQnYIDuCvpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f6a0c1-480a-4232-9fb7-8fd384b42c9e/1/1-f97aGM87FGhgQZ7gxgmY335jW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.160.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:19:ca:72:4e:6a:47:34:1c:c3:74:77:40:93:24:2c:f5:89:
be:5f:da:7c:5d:57:6f:2c:1c:5a:53:d0:ff:d3:5d:24:c4:26:
c7:e8:de:d7:7b:8f:0d:eb:fa:fb:be:61:28:f2:54:a9:2a:0b:
8a:7a:05:ea:d2:b4:ae:43:12:f7:43:51:38:49:68:21:8a:8c:
1d:f2:32:d9:cc:a8:62:a4:01:c2:27:35:cb:b9:5f:33:a1:40:
a9:3c:0d:e2:ff:e7:6d:31:31:7a:a5:05:2d:3e:05:5c:b6:19:
a2:f6:2c:29:dc:e2:a7:1f:e1:f7:96:79:4d:88:6d:4a:79:3b:
49:4e:7c:04:15:9f:74:6e:53:86:5c:51:df:0e:42:a4:27:fc:
fc:8d:16:a4:e2:3b:c4:62:2f:e6:2a:99:8b:6f:cf:46:31:f7:
cb:f8:19:55:e7:ab:4b:e4:72:e6:39:3a:3f:a8:64:45:8a:b4:
c7:ab:a8:95:b2:e8:99:d2:33:97:bc:e8:bc:fc:b3:ff:b2:3b:
e9:dc:7c:62:3f:6b:75:61:f8:b2:91:98:8e:af:d5:7f:9c:4b:
7f:43:75:a0:11:11:81:41:6b:e5:c1:77:61:d0:5d:66:35:15:
e9:e2:84:b5:fb:31:c6:1d:ca:59:6a:e3:b7:e4:1d:57:a1:4b:
3d:d7:0e:35
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVrwS4Igz493Lg/m2K2gediMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZmY3YjY4NjMzY2VjNTFhMTgxMDY3YjgzMTgyNjYzN2Rm
OThkNmUwHhcNMjMwMTAxMDUxNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjVmOWZhNGE1YTU5NGE0MTAzY2ZhOWUzNTA5ZDgyMDNiODJiZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTlvZ5dsuB7PsH2zC7V076Onyq84
sVxt49C4hVThN+H206xyfRESxVks+qOsgRsQ+Wji3JHXeDOvHTG5yx7FKEMwTKp1
kdPKVWruXMfnkIybc6WN36c6lMG9MHaEHvPuF2+Ks9X+MR5rG12i05s7RzTitqtW
cHbgHpHEq4SGecsGlkyWTJS/3KIklQ8hE1XKMpWEMfHq8q0ro+hgy5KrmnjHQ3zi
uqZ5FUK3/Vdr/gK48hlVQIsiAeqM/qU+UzM7+5cprLfSngVGzItj6YffpIsb4+Pz
3Foy8UGlhWPdsj1CTg9W63+dcWKEFUggbuYw6l6unHgOmkW43SsTl9SA2wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKtfn6SlpZSkEDz6njUJ2CA7gr6WMB8GA1UdIwQY
MBaAFPn/e2hjPOxRoYEGe4MYJmN9+Y1uMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1mOTdhR004N0ZHaGdRWjdneGdtWTMzNWpXNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvZjZhMGMxLTQ4MGEtNDIzMi05ZmI3
LThmZDM4NGI0MmM5ZS8xL3ExLWZwS1dsbEtRUVBQcWVOUW5ZSUR1Q3ZwWS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzcvZjZhMGMxLTQ4MGEtNDIzMi05ZmI3LThmZDM4NGI0MmM5
ZS8xLzEtZjk3YUdNODdGR2hnUVo3Z3hnbVkzMzVqVzQuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK5+6Aw
DQYJKoZIhvcNAQELBQADggEBALQZynJOakc0HMN0d0CTJCz1ib5f2nxdV28sHFpT
0P/TXSTEJsfo3td7jw3r+vu+YSjyVKkqC4p6BerStK5DEvdDUThJaCGKjB3yMtnM
qGKkAcInNcu5XzOhQKk8DeL/520xMXqlBS0+BVy2GaL2LCnc4qcf4feWeU2IbUp5
O0lOfAQVn3RuU4ZcUd8OQqQn/PyNFqTiO8RiL+YqmYtvz0Yx98v4GVXnq0vkcuY5
Oj+oZEWKtMerqJWy6JnSM5e86Lz8s/+yO+ncfGI/a3Vh+LKRmI6v1X+cS39DdaAR
EYFBa+XBd2HQXWY1FenihLX7McYdyllq47fkHVehSz3XDjU=
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:06 2024 by rpki-client on console-ams.rpki-client.org