Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/qKQYtEUpmvh0rVbd6BKZsMAJ3Sk.roa
File: qKQYtEUpmvh0rVbd6BKZsMAJ3Sk.roa (raw, json)
Hash identifier: ENtvUwPMDngGXPvypwl1ACqAJV0VTqR/ICYuK/Lx1wQ=
Subject key identifier: A8:A4:18:B4:45:29:9A:F8:74:AD:56:DD:E8:12:99:B0:C0:09:DD:29
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 018571955C7B34EDA6BC12228220AB43A30F
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/qKQYtEUpmvh0rVbd6BKZsMAJ3Sk.roa
Signing time: Mon 02 Jan 2023 08:24:51 +0000
ROA not before: Mon 02 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.232.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:5c:7b:34:ed:a6:bc:12:22:82:20:ab:43:a3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Jan 2 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8a418b445299af874ad56dde81299b0c009dd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:44:88:51:73:c4:7e:e7:39:4b:c1:f8:2c:
b6:bd:f2:ac:bf:f3:42:23:52:fb:ab:77:c4:d4:4c:
73:1c:95:f3:60:a8:2f:c3:98:4f:bd:5b:e0:d8:7d:
51:18:64:fe:9b:bf:0f:04:98:01:71:75:c7:33:21:
72:d9:86:1c:5f:73:5e:3f:d3:48:6f:17:29:ad:ce:
19:e6:e7:99:88:bc:e7:99:90:8d:9d:db:48:d1:4f:
ea:33:a6:7e:41:82:9f:3c:2d:45:49:74:7a:aa:5e:
65:e1:18:fd:9d:24:ea:ac:8a:5b:0e:1c:f8:ce:ee:
df:15:24:38:09:dd:f6:54:cb:7d:4e:27:7b:ee:68:
a7:8c:7e:1e:8d:cf:7a:ae:9d:be:0e:d9:3d:cd:37:
32:d7:f4:92:73:c3:4f:4d:9b:84:ee:64:5c:f7:6a:
f4:c0:7c:6c:22:86:b3:83:16:22:85:41:33:17:04:
fe:08:62:2f:a7:0e:10:76:b8:d3:ca:d8:aa:ae:49:
cc:62:8e:e6:1f:79:15:38:13:fa:5e:ea:53:a0:1e:
a0:85:ef:3e:a9:70:4c:5b:c3:9c:c8:00:95:db:fc:
56:3c:30:a1:52:5b:8a:a9:b9:af:01:7d:bf:2b:11:
b7:ec:6c:0e:f3:48:ba:01:01:9c:3d:86:45:5b:a3:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A4:18:B4:45:29:9A:F8:74:AD:56:DD:E8:12:99:B0:C0:09:DD:29
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/qKQYtEUpmvh0rVbd6BKZsMAJ3Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.99.0/24
Signature Algorithm: sha256WithRSAEncryption
00:02:ef:4d:8b:eb:60:2d:8e:57:d8:98:63:3c:fa:8c:44:bb:
51:5b:78:44:1b:da:64:12:e0:97:d0:8a:d5:e1:96:b9:a7:b4:
86:0e:2c:89:c6:1e:fd:84:a9:6b:57:29:9d:ad:68:f9:58:79:
18:4c:ce:9f:6d:b4:c0:be:df:b8:9a:57:30:43:8d:97:16:54:
84:9f:ed:bb:35:0d:7f:2f:8c:51:8b:24:d6:d6:12:27:c3:5a:
2c:65:ef:94:63:48:8b:79:a9:0d:a6:1b:71:c0:20:33:93:ed:
c7:db:94:be:dd:5b:a7:be:22:5c:c0:c6:c3:e9:e3:8b:f6:ac:
4a:1d:9e:c8:57:ce:49:e5:61:3c:1f:b8:60:23:8f:6f:8a:20:
ed:e4:af:6e:04:6f:97:35:25:0c:dd:23:d7:7b:c0:d6:b3:90:
35:5f:26:c4:26:43:69:68:cf:9e:0f:e8:75:35:1c:2d:1f:df:
05:4e:31:e3:3d:0f:3a:06:97:8d:38:f3:0d:0b:1d:c8:8e:89:
65:2b:1e:8f:3a:20:85:65:dc:5b:cb:1a:0d:6c:9b:f1:42:d5:
ae:3b:47:c5:3e:cb:73:f2:90:8e:82:a4:c0:42:11:99:02:79:
4a:96:95:05:fa:ae:eb:82:8f:ca:0e:0a:23:78:e2:19:b9:33:
7c:9c:0c:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxlVx7NO2mvBIigiCrQ6MPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmM5M2QyNjY4NTI3ODhlNDk5ODJkOWY3YTYyMGRiNmQ5
ZjU4OGQwHhcNMjMwMTAyMDgyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGE0MThiNDQ1Mjk5YWY4NzRhZDU2ZGRlODEyOTliMGMwMDlkZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgpEiFFzxH7nOUvB+Cy2vfKsv/NC
I1L7q3fE1ExzHJXzYKgvw5hPvVvg2H1RGGT+m78PBJgBcXXHMyFy2YYcX3NeP9NI
bxcprc4Z5ueZiLznmZCNndtI0U/qM6Z+QYKfPC1FSXR6ql5l4Rj9nSTqrIpbDhz4
zu7fFSQ4Cd32VMt9Tid77minjH4ejc96rp2+Dtk9zTcy1/SSc8NPTZuE7mRc92r0
wHxsIoazgxYihUEzFwT+CGIvpw4QdrjTytiqrknMYo7mH3kVOBP6XupToB6ghe8+
qXBMW8OcyACV2/xWPDChUluKqbmvAX2/KxG37GwO80i6AQGcPYZFW6OXLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKikGLRFKZr4dK1W3egSmbDACd0pMB8GA1UdIwQY
MBaAFCgsk9JmhSeI5JmC2femINttn1iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAt
OTZhZGZmZTJlODZhLzEvcUtRWXRFVXBtdmgwclZiZDZCS1pzTUFKM1NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAtOTZhZGZmZTJlODZh
LzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuehjMA0G
CSqGSIb3DQEBCwUAA4IBAQAAAu9Ni+tgLY5X2JhjPPqMRLtRW3hEG9pkEuCX0IrV
4Za5p7SGDiyJxh79hKlrVymdrWj5WHkYTM6fbbTAvt+4mlcwQ42XFlSEn+27NQ1/
L4xRiyTW1hInw1osZe+UY0iLeakNphtxwCAzk+3H25S+3VunviJcwMbD6eOL9qxK
HZ7IV85J5WE8H7hgI49viiDt5K9uBG+XNSUM3SPXe8DWs5A1XybEJkNpaM+eD+h1
NRwtH98FTjHjPQ86BpeNOPMNCx3IjollKx6POiCFZdxbyxoNbJvxQtWuO0fFPstz
8pCOgqTAQhGZAnlKlpUF+q7rgo/KDgojeOIZuTN8nAwa
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:43 2024 by rpki-client on console-ams.rpki-client.org