Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/fqkPON7yqrzLdzA2jZyzZ8u44IU.roa
File: fqkPON7yqrzLdzA2jZyzZ8u44IU.roa (raw, json)
Hash identifier: jkV9GeiR2Ah/zixLjcfx2B2iCi7qADd3GnUn9f9Yfw0=
Subject key identifier: 7E:A9:0F:38:DE:F2:AA:BC:CB:77:30:36:8D:9C:B3:67:CB:B8:E0:85
Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial: 0186EA2E975ADB08502CF6516C006BF2E13B
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/fqkPON7yqrzLdzA2jZyzZ8u44IU.roa
Signing time: Thu 16 Mar 2023 11:29:27 +0000
ROA not before: Thu 16 Mar 2023 11:29:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8245
IP address blocks: 185.202.192.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:2e:97:5a:db:08:50:2c:f6:51:6c:00:6b:f2:e1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
Validity
Not Before: Mar 16 11:29:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ea90f38def2aabccb7730368d9cb367cbb8e085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:46:41:9c:f3:f0:cc:0b:e6:af:91:7b:6f:29:
a6:2f:0c:7b:ef:fe:41:7f:3f:06:05:9c:18:8a:28:
5c:63:4a:3f:67:ba:b3:c1:ed:d1:06:6b:77:0d:8a:
9a:68:bc:98:79:a5:70:64:3c:8d:ee:02:56:74:f1:
65:25:2e:e1:f4:fc:76:07:bc:f4:51:78:58:ca:18:
61:22:87:23:0c:ac:54:16:cf:23:80:0f:a5:d0:c1:
ff:0d:0d:53:d3:5c:fd:aa:a9:f1:4f:66:b1:b2:1f:
9b:c6:e3:30:6c:2b:d5:b5:57:44:23:17:5b:9b:1d:
f8:e0:c8:60:62:13:4a:11:87:dd:55:d2:83:47:e2:
f0:55:cc:88:31:ae:62:7a:2c:7f:6d:59:70:d1:8f:
08:d6:b2:79:a1:53:29:fc:1d:75:b5:c9:e4:c1:09:
35:ab:82:ba:6a:20:69:43:13:17:f4:d3:ea:8b:3b:
d3:02:72:c5:9b:d5:5f:a9:bf:27:88:30:c3:d2:8b:
95:cc:16:04:8d:95:f8:3f:5c:34:a9:1a:b3:74:92:
43:1e:a1:48:7e:5a:0e:04:67:3a:74:e7:08:db:33:
2e:d0:1f:2b:b4:93:b5:e0:30:a3:e5:37:36:9c:09:
25:a5:a7:f3:3e:f3:60:f3:95:cf:b7:7d:94:33:90:
fd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A9:0F:38:DE:F2:AA:BC:CB:77:30:36:8D:9C:B3:67:CB:B8:E0:85
X509v3 Authority Key Identifier:
keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/fqkPON7yqrzLdzA2jZyzZ8u44IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.192.0/22
Signature Algorithm: sha256WithRSAEncryption
82:b2:10:40:7c:1a:38:6f:7f:ff:49:73:b5:c5:a5:b7:05:b7:
ff:97:d5:3e:55:63:c4:e0:4a:20:e4:07:94:fa:a7:e5:95:f3:
44:a3:19:e5:32:40:ea:69:f9:3e:73:e2:18:e8:60:1f:21:a6:
82:82:9a:e5:45:88:f1:7d:fe:ad:da:47:ec:cb:c8:27:a8:7d:
c5:9b:14:98:23:65:12:1d:31:7d:41:63:0a:42:d8:bf:2a:d1:
1e:c1:1d:6c:a4:5d:19:a7:d0:ef:dd:5c:3c:fb:e3:6f:27:56:
bd:8d:54:39:05:26:27:6b:2c:04:2b:7f:8b:15:50:cb:02:d0:
91:2b:0c:78:ed:d3:41:d5:83:bd:82:25:24:91:72:4f:38:ae:
b2:be:da:59:d7:9b:83:15:ad:49:d4:1f:c2:a2:98:33:96:b8:
42:b4:c5:c3:1a:0f:69:61:3b:51:bb:6e:bc:62:4b:aa:9c:3b:
c7:68:6c:4c:e5:9e:4f:38:60:8a:95:1c:4b:f9:af:07:02:3a:
75:97:6b:a9:86:21:28:12:26:84:af:9c:a6:24:80:1f:fb:ea:
42:e1:26:b1:cd:18:da:fc:cb:22:25:62:a7:58:f1:55:d8:fd:
b5:34:a0:ff:29:a0:90:58:dc:e1:0a:54:5c:be:d1:73:73:1f:
e2:87:dc:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbqLpda2whQLPZRbABr8uE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODA5NjQ0MDdjNWRhYTQ0MDg4YWNmZTk1ZTY0ODhiODAw
ZmFkZTUwHhcNMjMwMzE2MTEyOTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWE5MGYzOGRlZjJhYWJjY2I3NzMwMzY4ZDljYjM2N2NiYjhlMDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikZBnPPwzAvmr5F7bymmLwx77/5B
fz8GBZwYiihcY0o/Z7qzwe3RBmt3DYqaaLyYeaVwZDyN7gJWdPFlJS7h9Px2B7z0
UXhYyhhhIocjDKxUFs8jgA+l0MH/DQ1T01z9qqnxT2axsh+bxuMwbCvVtVdEIxdb
mx344MhgYhNKEYfdVdKDR+LwVcyIMa5ieix/bVlw0Y8I1rJ5oVMp/B11tcnkwQk1
q4K6aiBpQxMX9NPqizvTAnLFm9Vfqb8niDDD0ouVzBYEjZX4P1w0qRqzdJJDHqFI
floOBGc6dOcI2zMu0B8rtJO14DCj5Tc2nAklpafzPvNg85XPt32UM5D9QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH6pDzje8qq8y3cwNo2cs2fLuOCFMB8GA1UdIwQY
MBaAFG+AlkQHxdqkQIis/pXmSIuAD63lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iOTA2YzktMmIzZC00MzdjLWEzY2Qt
NWQ5MmNlZjIzYzVhLzEvZnFrUE9ON3lxcnpMZHpBMmpaeXpaOHU0NElVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9iOTA2YzktMmIzZC00MzdjLWEzY2QtNWQ5MmNlZjIzYzVh
LzEvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucrAMA0G
CSqGSIb3DQEBCwUAA4IBAQCCshBAfBo4b3//SXO1xaW3Bbf/l9U+VWPE4Eog5AeU
+qfllfNEoxnlMkDqafk+c+IY6GAfIaaCgprlRYjxff6t2kfsy8gnqH3FmxSYI2US
HTF9QWMKQti/KtEewR1spF0Zp9Dv3Vw8++NvJ1a9jVQ5BSYnaywEK3+LFVDLAtCR
Kwx47dNB1YO9giUkkXJPOK6yvtpZ15uDFa1J1B/CopgzlrhCtMXDGg9pYTtRu268
YkuqnDvHaGxM5Z5POGCKlRxL+a8HAjp1l2uphiEoEiaEr5ymJIAf++pC4SaxzRja
/MsiJWKnWPFV2P21NKD/KaCQWNzhClRcvtFzcx/ih9wL
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:34 2024 by rpki-client on console-fra.rpki-client.org