Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/fpWtH8rQPpgqXrpSqJYeRlnB5WY.roa
File: fpWtH8rQPpgqXrpSqJYeRlnB5WY.roa (raw, json)
Hash identifier: 7rgyAviAFzT0pfIZsRxqnOLoOVpQ5qsaaKRwKM4Of6E=
Subject key identifier: 7E:95:AD:1F:CA:D0:3E:98:2A:5E:BA:52:A8:96:1E:46:59:C1:E5:66
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 018BD6ADD1382D14ED136F5EA36422768ADA
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/fpWtH8rQPpgqXrpSqJYeRlnB5WY.roa
Signing time: Thu 16 Nov 2023 05:49:57 +0000
ROA not before: Thu 16 Nov 2023 05:49:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44854
IP address blocks: 185.219.6.0/24 maxlen: 24
93.114.180.0/23 maxlen: 24
2a10:e300:26::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d6:ad:d1:38:2d:14:ed:13:6f:5e:a3:64:22:76:8a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Nov 16 05:49:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e95ad1fcad03e982a5eba52a8961e4659c1e566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:69:57:c2:48:ba:bc:4d:9a:10:47:db:0c:
23:e6:e6:77:dd:8f:cf:b8:69:99:73:92:b0:2f:80:
a0:92:31:e5:b9:13:e1:8a:1f:5b:8f:43:7c:b3:52:
1d:7d:e4:16:2e:ea:19:55:da:60:9b:9f:e4:7f:f8:
81:16:f5:00:13:24:43:66:4d:0d:ef:bd:bb:6c:ec:
fd:64:5c:7a:0a:51:0a:2d:d5:68:b3:c6:10:b6:09:
1c:e6:4d:83:c9:ea:9d:0b:ad:cb:31:ab:98:03:fd:
89:f0:ce:85:8f:3e:1d:9c:8d:7e:16:9c:cb:70:81:
7b:c7:b2:ac:7c:f6:a6:f3:01:5f:0c:74:4e:05:ab:
03:cc:7f:e1:4c:8e:40:25:ac:50:39:cb:e1:ba:2b:
4a:08:52:7d:28:b9:81:a6:c3:80:74:9f:15:d6:ed:
62:04:c0:2c:5f:c4:72:da:d1:dc:a6:be:03:ff:37:
86:61:29:5e:e7:6f:88:5c:fa:8e:f2:e2:29:e3:5a:
78:75:fc:c3:a4:f3:64:7d:27:53:db:3e:b9:2a:a6:
10:15:3b:58:1e:86:87:ff:3f:b7:16:a5:3f:8a:56:
2f:62:e1:ed:cb:6b:ca:fd:1e:af:b2:d7:f6:7b:e0:
26:ff:09:08:02:80:30:be:cc:2f:6c:b4:70:02:4f:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:95:AD:1F:CA:D0:3E:98:2A:5E:BA:52:A8:96:1E:46:59:C1:E5:66
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/fpWtH8rQPpgqXrpSqJYeRlnB5WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.180.0/23
185.219.6.0/24
IPv6:
2a10:e300:26::/48
Signature Algorithm: sha256WithRSAEncryption
b4:63:07:fd:ef:0e:d1:02:13:14:cf:51:b5:69:b2:7f:a1:13:
5b:39:90:36:00:e1:47:7e:65:22:99:ae:5b:f1:6c:aa:06:33:
dd:b0:a0:2c:b8:50:af:30:12:4f:af:23:e3:8a:82:4c:85:db:
05:e6:bf:2e:94:5b:ed:b2:2f:c1:94:d5:5d:96:3f:eb:c0:da:
7e:46:1b:c9:42:15:5b:15:39:b4:89:ec:cb:87:9e:43:5b:8e:
71:30:42:14:3e:48:6f:4a:e2:c7:44:ca:df:88:f9:1b:ef:10:
27:df:ee:30:09:77:d3:22:99:2a:d1:b3:c3:86:32:de:aa:e8:
81:e3:ec:d3:87:76:6a:4d:fb:89:90:74:83:c1:f2:cf:62:01:
41:2b:db:f0:d1:5e:d5:68:e5:8f:76:af:03:21:ef:2c:f0:0a:
46:cd:77:cc:f5:59:d3:d2:d8:d0:d1:ee:e8:18:e0:af:d8:59:
d9:1a:3b:63:ca:83:2a:7d:12:61:f7:f0:59:4a:1d:16:7b:c6:
95:b9:dd:c5:1d:e2:5f:bb:29:46:bb:2a:9c:43:c7:29:c6:a6:
56:2e:1b:af:0f:49:2c:02:be:d9:75:b8:8e:f8:df:6b:97:b9:
39:8f:c2:b7:f5:61:b3:4c:b5:61:a8:d8:23:0a:62:55:9a:12:
3a:1d:bc:9f
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYvWrdE4LRTtE29eo2QidoraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj
YjI4MTEwHhcNMjMxMTE2MDU0OTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTk1YWQxZmNhZDAzZTk4MmE1ZWJhNTJhODk2MWU0NjU5YzFlNTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBdpV8JIurxNmhBH2wwj5uZ33Y/P
uGmZc5KwL4CgkjHluRPhih9bj0N8s1IdfeQWLuoZVdpgm5/kf/iBFvUAEyRDZk0N
7727bOz9ZFx6ClEKLdVos8YQtgkc5k2DyeqdC63LMauYA/2J8M6Fjz4dnI1+FpzL
cIF7x7KsfPam8wFfDHROBasDzH/hTI5AJaxQOcvhuitKCFJ9KLmBpsOAdJ8V1u1i
BMAsX8Ry2tHcpr4D/zeGYSle52+IXPqO8uIp41p4dfzDpPNkfSdT2z65KqYQFTtY
HoaH/z+3FqU/ilYvYuHty2vK/R6vstf2e+Am/wkIAoAwvswvbLRwAk/FZQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFH6VrR/K0D6YKl66UqiWHkZZweVmMB8GA1UdIwQY
MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct
YTA0M2UxYjY3Yjk0LzEvZnBXdEg4clFQcGdxWHJwU3FKWWVSbG5CNVdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0
LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBXXK0AwQA
udsGMA8EAgACMAkDBwAqEOMAACYwDQYJKoZIhvcNAQELBQADggEBALRjB/3vDtEC
ExTPUbVpsn+hE1s5kDYA4Ud+ZSKZrlvxbKoGM92woCy4UK8wEk+vI+OKgkyF2wXm
vy6UW+2yL8GU1V2WP+vA2n5GG8lCFVsVObSJ7MuHnkNbjnEwQhQ+SG9K4sdEyt+I
+RvvECff7jAJd9MimSrRs8OGMt6q6IHj7NOHdmpN+4mQdIPB8s9iAUEr2/DRXtVo
5Y92rwMh7yzwCkbNd8z1WdPS2NDR7ugY4K/YWdkaO2PKgyp9EmH38FlKHRZ7xpW5
3cUd4l+7KUa7KpxDxynGplYuG68PSSwCvtl1uI7432uXuTmPwrf1YbNMtWGo2CMK
YlWaEjodvJ8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:15 2024 by rpki-client on console-ams.rpki-client.org