Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/BQqNd4U58d2zAvrGOwf_MCaL-iw.roa
File: BQqNd4U58d2zAvrGOwf_MCaL-iw.roa (raw, json)
Hash identifier: TxE2CQBvCG9uEIoLbZS5xc3Rt2Tsr1vVgWkx+TC2ZnE=
Subject key identifier: 05:0A:8D:77:85:39:F1:DD:B3:02:FA:C6:3B:07:FF:30:26:8B:FA:2C
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 018CC8DF0B7558DE73EF7783CF4EEECBFF13
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/BQqNd4U58d2zAvrGOwf_MCaL-iw.roa
Signing time: Tue 02 Jan 2024 06:31:49 +0000
ROA not before: Tue 02 Jan 2024 06:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44854
IP address blocks: 185.219.6.0/24 maxlen: 24
93.114.180.0/23 maxlen: 24
2a10:e300:26::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 12 Jan 2024 06:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:0b:75:58:de:73:ef:77:83:cf:4e:ee:cb:ff:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jan 2 06:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=050a8d778539f1ddb302fac63b07ff30268bfa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:64:fa:ad:91:e3:5e:7d:59:c2:f3:2d:8a:94:
4a:45:22:e2:ec:29:7f:aa:52:98:51:95:c4:b3:d1:
be:89:5b:a0:94:05:2e:e1:03:34:b6:00:8b:7f:66:
43:3c:75:2c:a7:90:e6:3a:38:3c:87:76:c7:ad:98:
e6:ec:fb:dd:85:25:b4:1b:bf:eb:ab:4e:13:1b:7f:
81:fb:e7:16:ee:63:a6:f9:08:9d:b6:55:b0:b1:36:
b3:56:e4:23:e8:4a:d2:6c:14:20:16:b9:61:74:80:
b6:0a:be:62:fd:79:9b:a0:dd:45:49:dc:ca:aa:95:
bd:86:38:1d:98:69:da:e2:24:af:0f:77:96:a2:34:
1a:f5:91:64:c6:13:46:2c:24:de:03:24:b7:a6:be:
73:64:b9:9d:c8:f6:c5:be:5c:75:d9:80:a7:85:e1:
07:4b:7e:26:51:6c:56:6c:61:f5:5d:b3:6b:a6:84:
64:e6:26:a3:a5:dc:81:65:90:f2:41:84:9d:f5:30:
6b:8a:22:db:13:27:38:45:40:30:ae:68:81:2a:88:
33:88:cc:67:16:c6:66:b7:f2:0e:d7:c6:1f:1f:cd:
20:50:0a:d2:af:28:7a:31:72:aa:f5:aa:f4:5d:17:
63:95:10:c0:6c:75:05:2a:a2:ff:b0:24:b2:e1:c9:
3e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0A:8D:77:85:39:F1:DD:B3:02:FA:C6:3B:07:FF:30:26:8B:FA:2C
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/BQqNd4U58d2zAvrGOwf_MCaL-iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.180.0/23
185.219.6.0/24
IPv6:
2a10:e300:26::/48
Signature Algorithm: sha256WithRSAEncryption
13:68:c2:69:7b:b9:c1:0d:c7:09:19:44:96:ca:5f:4f:dd:0e:
61:3d:9b:d7:1d:32:fc:c7:ac:01:db:3d:67:ba:90:84:96:88:
14:8c:fd:c9:ad:24:81:8d:c3:a1:77:18:b0:57:ad:c3:f7:dd:
73:1b:5b:1f:99:3c:90:78:64:e0:8d:99:7a:62:19:54:92:0b:
cf:74:54:db:92:16:26:20:19:66:da:f4:df:39:e0:ce:a2:68:
80:36:69:43:51:01:db:c6:05:e1:b6:bc:68:48:59:df:6a:4c:
6e:39:ff:a1:33:30:73:7c:d3:8f:19:91:87:62:9a:ab:8a:b4:
99:49:08:ed:cf:39:e9:d4:64:09:59:de:e7:39:59:e9:a5:66:
bc:4c:ec:30:e9:b7:08:37:d2:3f:c9:78:3e:51:87:39:8a:4b:
52:86:7c:98:20:4d:ba:50:67:42:57:83:ca:ff:db:1c:74:27:
93:41:a4:8d:f5:77:af:0e:62:53:9e:a2:ff:4e:1a:49:80:15:
4d:47:2a:ac:b8:dc:7b:a0:83:92:34:4e:5a:f3:cd:68:83:59:
fc:ea:7b:81:99:b9:e1:de:89:cc:20:53:98:9f:10:11:3d:37:
2b:b8:78:0b:5c:bd:4d:69:2d:e9:bf:cf:a6:ad:c4:17:09:9f:
5a:56:f2:b7
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYzI3wt1WN5z73eDz07uy/8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj
YjI4MTEwHhcNMjQwMTAyMDYzMTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTBhOGQ3Nzg1MzlmMWRkYjMwMmZhYzYzYjA3ZmYzMDI2OGJmYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGT6rZHjXn1ZwvMtipRKRSLi7Cl/
qlKYUZXEs9G+iVuglAUu4QM0tgCLf2ZDPHUsp5DmOjg8h3bHrZjm7PvdhSW0G7/r
q04TG3+B++cW7mOm+QidtlWwsTazVuQj6ErSbBQgFrlhdIC2Cr5i/XmboN1FSdzK
qpW9hjgdmGna4iSvD3eWojQa9ZFkxhNGLCTeAyS3pr5zZLmdyPbFvlx12YCnheEH
S34mUWxWbGH1XbNrpoRk5iajpdyBZZDyQYSd9TBriiLbEyc4RUAwrmiBKogziMxn
FsZmt/IO18YfH80gUArSryh6MXKq9ar0XRdjlRDAbHUFKqL/sCSy4ck+VwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFAUKjXeFOfHdswL6xjsH/zAmi/osMB8GA1UdIwQY
MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct
YTA0M2UxYjY3Yjk0LzEvQlFxTmQ0VTU4ZDJ6QXZyR093Zl9NQ2FMLWl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0
LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBXXK0AwQA
udsGMA8EAgACMAkDBwAqEOMAACYwDQYJKoZIhvcNAQELBQADggEBABNowml7ucEN
xwkZRJbKX0/dDmE9m9cdMvzHrAHbPWe6kISWiBSM/cmtJIGNw6F3GLBXrcP33XMb
Wx+ZPJB4ZOCNmXpiGVSSC890VNuSFiYgGWba9N854M6iaIA2aUNRAdvGBeG2vGhI
Wd9qTG45/6EzMHN8048ZkYdimquKtJlJCO3POenUZAlZ3uc5WemlZrxM7DDptwg3
0j/JeD5RhzmKS1KGfJggTbpQZ0JXg8r/2xx0J5NBpI31d68OYlOeov9OGkmAFU1H
Kqy43Hugg5I0TlrzzWiDWfzqe4GZueHeicwgU5ifEBE9Nyu4eAtcvU1pLem/z6at
xBcJn1pW8rc=
-----END CERTIFICATE-----
Generated at Fri Jan 12 08:02:23 2024 by rpki-client on console-ams.rpki-client.org