Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/jQrATi-5t8E5kBegfhgBpZ79veA.roa
File: jQrATi-5t8E5kBegfhgBpZ79veA.roa (raw, json)
Hash identifier: Fy7g7CUZ0Dpv0XripUBVmBgna12u8V0wt0V++QfTTec=
Subject key identifier: 8D:0A:C0:4E:2F:B9:B7:C1:39:90:17:A0:7E:18:01:A5:9E:FD:BD:E0
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 0187C8CC8D5F52108B375CF2BDE1C69287DA
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/jQrATi-5t8E5kBegfhgBpZ79veA.roa
Signing time: Fri 28 Apr 2023 16:57:41 +0000
ROA not before: Fri 28 Apr 2023 16:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210477
IP address blocks: 185.216.191.0/24 maxlen: 24
185.18.151.0/24 maxlen: 24
146.19.17.0/24 maxlen: 24
2a12:b500::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c8:cc:8d:5f:52:10:8b:37:5c:f2:bd:e1:c6:92:87:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Apr 28 16:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d0ac04e2fb9b7c1399017a07e1801a59efdbde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:27:01:1b:1c:6e:e6:53:46:7b:b8:85:0e:01:
42:7f:5f:9b:43:16:19:f4:d7:ff:49:10:90:9a:a0:
0e:e1:82:3f:cd:c1:e0:af:cb:c2:f5:d1:2d:78:29:
fd:fd:28:c8:b5:36:cc:2a:91:0b:24:b5:c0:40:1a:
8a:9b:01:a4:60:b9:83:51:ee:6e:82:e9:aa:54:7b:
c2:0b:7c:cf:6f:ac:d2:1b:d9:d3:d0:24:6f:b5:bd:
5e:91:4e:05:ad:1d:3d:27:ae:9f:61:25:df:90:70:
42:c3:ff:05:18:4d:d0:cf:34:3f:d7:5c:c1:06:03:
38:e9:26:46:67:b6:80:b8:e6:4b:4f:44:2b:07:71:
28:44:9a:f1:2b:51:8c:0a:75:b0:34:29:1b:7d:fc:
a2:70:e1:66:d9:69:a2:0e:a4:7c:d1:ac:5f:82:45:
91:aa:3d:46:3c:7b:d4:51:67:47:e5:13:67:88:74:
c2:60:23:10:a0:5d:42:6d:45:e1:59:64:cd:92:23:
46:8b:b7:91:21:35:d6:9f:48:2b:3a:0c:bf:cb:fa:
3c:cb:86:16:fa:2f:18:66:eb:0f:55:02:bb:3f:f0:
e0:fd:53:03:c7:26:5b:d1:ae:0c:a2:73:a5:9e:6d:
9f:a2:68:e1:f8:11:c2:d7:19:dd:a4:8b:c1:a8:3e:
11:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0A:C0:4E:2F:B9:B7:C1:39:90:17:A0:7E:18:01:A5:9E:FD:BD:E0
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/jQrATi-5t8E5kBegfhgBpZ79veA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.17.0/24
185.18.151.0/24
185.216.191.0/24
IPv6:
2a12:b500::/32
Signature Algorithm: sha256WithRSAEncryption
8c:a4:7d:c8:d8:57:42:84:0b:a4:ab:cf:16:59:ea:2e:de:12:
36:a1:b2:42:c8:ad:ba:b4:11:a6:75:2c:05:e1:dc:78:59:3f:
9e:93:78:b9:ac:c5:a5:1a:aa:5a:a1:dd:92:10:ad:33:ec:89:
7e:f8:0d:ea:69:72:52:74:ea:41:91:10:a3:f9:45:d9:8d:3b:
26:a4:d0:f9:59:b0:bb:cd:da:29:8b:38:d1:e7:b5:ac:77:ab:
21:b8:a7:e8:24:f4:32:b6:6b:70:c2:fa:ff:cb:fb:b6:09:bf:
df:c9:a1:17:06:aa:f1:48:70:01:75:1c:1b:7c:cf:3c:74:8e:
fb:f7:4d:92:db:81:94:b4:2a:9d:64:cc:4f:f6:4a:ce:fd:91:
71:c3:e4:bb:7e:88:f1:ea:56:a9:85:61:9f:20:7e:5c:ee:0b:
13:4e:4c:2c:68:16:2c:5b:1e:a9:83:6d:26:74:bd:0b:6d:4d:
ff:ef:90:ab:37:43:95:62:4d:36:3b:d4:ed:14:33:30:63:58:
2a:eb:a9:3a:62:13:e3:7c:cb:f7:a4:21:dc:90:c3:b7:d5:72:
9e:cf:d5:fb:ed:f5:49:ec:8e:dd:f5:65:0f:85:fd:fd:5b:a4:
4d:cb:c5:32:51:6c:b2:2e:78:1d:67:fc:55:67:20:cc:cd:cc:
09:4d:a7:f9
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYfIzI1fUhCLN1zyveHGkofaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTE4OTBjMzA1YjBmMmRhNDIwYjAxNjk3ZTNiZjIzZDQ4
NWFiNjQwHhcNMjMwNDI4MTY1NzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDBhYzA0ZTJmYjliN2MxMzk5MDE3YTA3ZTE4MDFhNTllZmRiZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCcBGxxu5lNGe7iFDgFCf1+bQxYZ
9Nf/SRCQmqAO4YI/zcHgr8vC9dEteCn9/SjItTbMKpELJLXAQBqKmwGkYLmDUe5u
gumqVHvCC3zPb6zSG9nT0CRvtb1ekU4FrR09J66fYSXfkHBCw/8FGE3QzzQ/11zB
BgM46SZGZ7aAuOZLT0QrB3EoRJrxK1GMCnWwNCkbffyicOFm2WmiDqR80axfgkWR
qj1GPHvUUWdH5RNniHTCYCMQoF1CbUXhWWTNkiNGi7eRITXWn0grOgy/y/o8y4YW
+i8YZusPVQK7P/Dg/VMDxyZb0a4MonOlnm2fomjh+BHC1xndpIvBqD4RBQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFI0KwE4vubfBOZAXoH4YAaWe/b3gMB8GA1UdIwQY
MBaAFL6hiQwwWw8tpCCwFpfjvyPUhatkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUt
MzE3NmYwOTk5ZGRhLzEvalFyQVRpLTV0OEU1a0JlZ2ZoZ0JwWjc5dmVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUtMzE3NmYwOTk5ZGRh
LzEvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAkhMRAwQA
uRKXAwQAudi/MA0EAgACMAcDBQAqErUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMpH3I
2FdChAukq88WWeou3hI2obJCyK26tBGmdSwF4dx4WT+ek3i5rMWlGqpaod2SEK0z
7Il++A3qaXJSdOpBkRCj+UXZjTsmpND5WbC7zdopizjR57Wsd6shuKfoJPQytmtw
wvr/y/u2Cb/fyaEXBqrxSHABdRwbfM88dI77902S24GUtCqdZMxP9krO/ZFxw+S7
fojx6laphWGfIH5c7gsTTkwsaBYsWx6pg20mdL0LbU3/75CrN0OVYk02O9TtFDMw
Y1gq66k6YhPjfMv3pCHckMO31XKez9X77fVJ7I7d9WUPhf39W6RNy8UyUWyyLngd
Z/xVZyDMzcwJTaf5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:04 2024 by rpki-client on console-fra.rpki-client.org