Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/QGj1zhGYxkkh9ed8DwHc7fRDteI.roa
File: QGj1zhGYxkkh9ed8DwHc7fRDteI.roa (raw, json)
Hash identifier: EPd08s9RKNBOMaqH25sxPOJ39I0JoGSOIxMqieH1l/k=
Subject key identifier: 40:68:F5:CE:11:98:C6:49:21:F5:E7:7C:0F:01:DC:ED:F4:43:B5:E2
Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial: 018CF2E1C6F4E3E43DF08D4B9AA9914C3F8C
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/QGj1zhGYxkkh9ed8DwHc7fRDteI.roa
Signing time: Wed 10 Jan 2024 10:18:51 +0000
ROA not before: Wed 10 Jan 2024 10:18:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.128.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 09:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:e1:c6:f4:e3:e4:3d:f0:8d:4b:9a:a9:91:4c:3f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
Validity
Not Before: Jan 10 10:18:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4068f5ce1198c64921f5e77c0f01dcedf443b5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:61:0a:78:c2:31:43:73:93:83:6c:39:df:
89:b9:e9:e9:89:40:9c:29:80:5e:72:e1:d8:cf:e6:
18:75:56:69:42:8d:e5:65:d8:82:55:06:89:f2:bb:
ac:d4:d5:2e:b7:0f:65:0a:03:a4:9a:95:b0:30:a1:
99:1a:3f:6a:39:ba:ed:73:f7:f5:fd:15:9b:5a:c5:
12:94:72:97:a9:76:c4:fc:d1:37:63:4f:34:54:ae:
e6:ca:d9:44:21:5c:c2:42:02:b2:ab:9b:41:01:84:
da:70:8e:81:a8:60:6a:1a:51:bb:b7:0b:d0:c9:59:
9a:83:bb:92:9f:b4:04:f6:c7:a5:a5:29:bd:76:4a:
5c:37:d8:39:01:f9:c4:87:2a:2e:69:9c:0e:34:9c:
0f:24:2c:b0:b9:0d:b8:e7:b7:b4:ed:a5:25:a9:5a:
7f:a9:b4:e0:30:ed:aa:bd:02:5d:e5:c1:05:73:ff:
f7:6c:e6:3b:38:fc:dd:1c:f5:b5:34:81:74:8a:54:
35:fa:b5:06:6f:f2:1f:5a:cc:2c:c4:0b:44:b6:ab:
9e:98:24:70:1e:b8:dd:26:cd:ba:ea:88:e7:32:a4:
e2:2c:43:0a:63:f3:c0:87:7b:79:96:09:33:77:b6:
e1:6a:0a:8b:22:c0:d3:51:7d:6b:57:1c:88:5c:8b:
7c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:68:F5:CE:11:98:C6:49:21:F5:E7:7C:0F:01:DC:ED:F4:43:B5:E2
X509v3 Authority Key Identifier:
keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/QGj1zhGYxkkh9ed8DwHc7fRDteI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.36.0/24
Signature Algorithm: sha256WithRSAEncryption
19:85:78:8f:84:20:e5:63:34:4f:ad:a0:4e:88:2b:fc:b6:a8:
49:00:b4:97:1a:41:ed:1b:09:8e:da:f9:39:ec:48:02:c7:6e:
32:e5:23:64:f3:f8:b2:06:22:88:dd:d5:44:6e:b8:13:b2:7f:
f4:28:89:fe:31:c3:03:58:78:c7:e0:cd:50:8a:66:a1:19:71:
9f:54:00:e2:d1:ee:84:1c:12:fb:6c:93:b7:25:11:1e:1f:ab:
d0:94:10:0b:ce:2a:65:88:76:17:d4:ed:3d:2e:ad:29:8e:55:
99:c4:76:22:c7:21:dd:2e:f7:b1:50:47:bb:29:56:7e:e1:c6:
12:f3:8c:1a:ce:52:74:32:f6:93:d0:a4:fb:0e:b7:09:f2:b2:
40:23:21:0e:f4:c0:f7:c2:91:46:47:c5:a5:b6:81:d3:25:1b:
1d:13:19:88:1d:21:8a:3c:f3:5a:51:89:49:26:d7:4d:67:34:
11:0f:46:ed:28:b9:f5:4c:c4:40:da:b3:a7:7e:6e:35:b1:89:
ec:dd:c4:5f:f1:96:78:26:bd:5b:25:bf:60:4a:25:97:92:12:
c4:73:77:9f:16:50:01:14:73:6e:39:f0:69:9d:ac:bf:50:17:
18:49:21:96:07:e1:de:e5:3d:81:c9:ca:70:7a:f4:d7:b3:82:
93:2f:bb:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzy4cb04+Q98I1LmqmRTD+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzQ0YjgyMWFiNWRiNTQyY2M1MzZjMWY4OGI4NGJhZjA2
MjE2NTQwHhcNMjQwMTEwMTAxODUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDY4ZjVjZTExOThjNjQ5MjFmNWU3N2MwZjAxZGNlZGY0NDNiNWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTZhCnjCMUNzk4NsOd+JuenpiUCc
KYBecuHYz+YYdVZpQo3lZdiCVQaJ8rus1NUutw9lCgOkmpWwMKGZGj9qObrtc/f1
/RWbWsUSlHKXqXbE/NE3Y080VK7mytlEIVzCQgKyq5tBAYTacI6BqGBqGlG7twvQ
yVmag7uSn7QE9selpSm9dkpcN9g5AfnEhyouaZwONJwPJCywuQ2457e07aUlqVp/
qbTgMO2qvQJd5cEFc//3bOY7OPzdHPW1NIF0ilQ1+rUGb/IfWswsxAtEtquemCRw
HrjdJs266ojnMqTiLEMKY/PAh3t5lgkzd7bhagqLIsDTUX1rVxyIXIt8TQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEBo9c4RmMZJIfXnfA8B3O30Q7XiMB8GA1UdIwQY
MBaAFAbES4IatdtULMU2wfiLhLrwYhZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYt
ZGM5ODQyNjU1NjdkLzEvUUdqMXpoR1l4a2toOWVkOER3SGM3ZlJEdGVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYtZGM5ODQyNjU1Njdk
LzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYAkMA0G
CSqGSIb3DQEBCwUAA4IBAQAZhXiPhCDlYzRPraBOiCv8tqhJALSXGkHtGwmO2vk5
7EgCx24y5SNk8/iyBiKI3dVEbrgTsn/0KIn+McMDWHjH4M1QimahGXGfVADi0e6E
HBL7bJO3JREeH6vQlBALzipliHYX1O09Lq0pjlWZxHYixyHdLvexUEe7KVZ+4cYS
84wazlJ0MvaT0KT7DrcJ8rJAIyEO9MD3wpFGR8WltoHTJRsdExmIHSGKPPNaUYlJ
JtdNZzQRD0btKLn1TMRA2rOnfm41sYns3cRf8ZZ4Jr1bJb9gSiWXkhLEc3efFlAB
FHNuOfBpnay/UBcYSSGWB+He5T2BycpwevTXs4KTL7vv
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:44 2025 by rpki-client