Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/QDiT4XUHUzKMae820AjwlRWjhX4.roa
File: QDiT4XUHUzKMae820AjwlRWjhX4.roa (raw, json)
Hash identifier: cfY/IOgq00HynRiMUoYB2z56F14sCRkV4VtDxhkqruA=
Subject key identifier: 40:38:93:E1:75:07:53:32:8C:69:EF:36:D0:08:F0:95:15:A3:85:7E
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 01898CC598CBA7125588AE4CCA0204775B60
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/QDiT4XUHUzKMae820AjwlRWjhX4.roa
Signing time: Tue 25 Jul 2023 11:18:27 +0000
ROA not before: Tue 25 Jul 2023 11:18:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5484
IP address blocks: 185.219.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:c5:98:cb:a7:12:55:88:ae:4c:ca:02:04:77:5b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Jul 25 11:18:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=403893e1750753328c69ef36d008f09515a3857e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:2a:8f:c6:76:79:79:f8:f5:19:95:f0:67:
3c:ed:03:65:90:74:fb:20:cd:28:2a:62:66:bd:84:
8f:a4:3b:c0:6b:cd:e3:78:6c:a9:89:1b:55:c9:53:
1a:c7:74:e7:fa:df:5f:3a:ef:80:a5:f3:c0:b1:9c:
8c:78:c1:4f:56:fd:52:cf:47:db:0a:d0:a7:a8:28:
3b:0e:d5:02:69:48:df:b4:e0:cf:c6:52:78:21:57:
fb:1f:02:fa:40:12:56:bb:66:80:f6:3d:29:c6:92:
19:eb:84:77:19:13:e5:d6:f7:39:90:5c:11:e5:34:
11:93:63:18:1b:4f:5c:19:8b:e1:a1:62:b6:08:e0:
10:87:e7:c0:52:00:2f:d9:c8:58:93:f5:c6:99:23:
f0:4b:42:6e:58:dd:65:1a:4a:b1:9f:29:03:ba:c0:
62:0d:a9:bc:e7:20:54:41:73:69:ea:aa:1e:de:5b:
cd:52:21:15:ed:1f:15:02:f7:3e:b0:d0:b1:11:dc:
87:7f:e2:db:5c:a5:4c:a4:ad:d8:23:f7:89:e2:45:
6a:ab:c5:23:8f:19:2d:e1:67:b7:d0:01:8d:25:03:
d5:ee:2c:96:17:1f:5b:06:ec:35:63:56:c0:a3:1b:
0d:4d:00:43:d7:40:5d:79:bf:95:e0:2b:c0:cd:37:
c8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:38:93:E1:75:07:53:32:8C:69:EF:36:D0:08:F0:95:15:A3:85:7E
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/QDiT4XUHUzKMae820AjwlRWjhX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.114.0/24
Signature Algorithm: sha256WithRSAEncryption
51:90:b6:8b:ba:b1:db:bd:b3:df:46:7d:1f:d2:ef:d5:13:ec:
05:e4:6b:b3:e2:1b:4c:6b:b6:47:1b:35:88:91:c7:5b:54:94:
84:a3:88:9f:fd:c5:da:68:2b:c9:16:63:1a:e7:d7:b6:0d:0f:
a4:78:21:f5:a3:13:ed:a3:b7:70:ac:61:b6:1f:11:0f:1d:8a:
4c:95:94:9e:6a:e2:8d:ca:ee:93:8c:b7:6a:33:0a:b1:ef:c4:
78:50:23:6b:a7:7d:93:2a:6f:3b:23:af:63:8b:89:9d:7c:88:
7d:6c:a0:1a:0a:bd:f8:c9:3e:2d:a8:24:e7:29:4f:88:19:4c:
3a:03:e2:5e:ea:60:6f:55:02:ee:01:bc:2a:2e:21:d3:28:be:
1e:19:b5:05:21:75:2c:00:0a:9d:80:61:ca:64:67:c4:d3:88:
52:00:e7:11:3b:36:2c:38:ef:dd:4f:ec:ab:52:96:b7:e2:74:
93:78:f5:7f:e1:36:89:cf:b7:3e:9b:eb:62:3e:2c:87:8f:12:
16:59:ca:68:1c:fd:da:91:6f:0d:fd:c8:51:9a:00:74:7b:ab:
b2:fa:4d:db:e1:9b:0c:4f:1f:65:fc:a5:9f:9e:6a:1b:03:50:
0c:85:4b:66:8a:01:54:7d:53:f5:12:bc:9c:50:e4:15:bb:e0:
d8:9f:8a:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmMxZjLpxJViK5MygIEd1tgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZWI5OTc0ODk5OWFiOGUwMjE4ZjdjOGRiZGNjNTY5OGQ2
NjlkMzkwHhcNMjMwNzI1MTExODI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDM4OTNlMTc1MDc1MzMyOGM2OWVmMzZkMDA4ZjA5NTE1YTM4NTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVcqj8Z2eXn49RmV8Gc87QNlkHT7
IM0oKmJmvYSPpDvAa83jeGypiRtVyVMax3Tn+t9fOu+ApfPAsZyMeMFPVv1Sz0fb
CtCnqCg7DtUCaUjftODPxlJ4IVf7HwL6QBJWu2aA9j0pxpIZ64R3GRPl1vc5kFwR
5TQRk2MYG09cGYvhoWK2COAQh+fAUgAv2chYk/XGmSPwS0JuWN1lGkqxnykDusBi
Dam85yBUQXNp6qoe3lvNUiEV7R8VAvc+sNCxEdyHf+LbXKVMpK3YI/eJ4kVqq8Uj
jxkt4We30AGNJQPV7iyWFx9bBuw1Y1bAoxsNTQBD10Bdeb+V4CvAzTfI5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEA4k+F1B1MyjGnvNtAI8JUVo4V+MB8GA1UdIwQY
MBaAFKzrmXSJmauOAhj3yNvcxWmNZp05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mNjAxMzQtNmQ2ZC00ZGMxLTkyYTkt
NjU5YWU4MjE5OTFjLzEvUURpVDRYVUhVektNYWU4MjBBandsUldqaFg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mNjAxMzQtNmQ2ZC00ZGMxLTkyYTktNjU5YWU4MjE5OTFj
LzEvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudtyMA0G
CSqGSIb3DQEBCwUAA4IBAQBRkLaLurHbvbPfRn0f0u/VE+wF5Guz4htMa7ZHGzWI
kcdbVJSEo4if/cXaaCvJFmMa59e2DQ+keCH1oxPto7dwrGG2HxEPHYpMlZSeauKN
yu6TjLdqMwqx78R4UCNrp32TKm87I69ji4mdfIh9bKAaCr34yT4tqCTnKU+IGUw6
A+Je6mBvVQLuAbwqLiHTKL4eGbUFIXUsAAqdgGHKZGfE04hSAOcROzYsOO/dT+yr
Upa34nSTePV/4TaJz7c+m+tiPiyHjxIWWcpoHP3akW8N/chRmgB0e6uy+k3b4ZsM
Tx9l/KWfnmobA1AMhUtmigFUfVP1ErycUOQVu+DYn4rh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:17 2024 by rpki-client on console-ams.rpki-client.org