Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/qMSwGmImKf3bqVbWBEHc4a2D_Kg.roa
File: qMSwGmImKf3bqVbWBEHc4a2D_Kg.roa (raw, json)
Hash identifier: 5aNGfg5qKBeq+4VlnB4MBSSC/SFqn43Uzkawr8bDGlQ=
Subject key identifier: A8:C4:B0:1A:62:26:29:FD:DB:A9:56:D6:04:41:DC:E1:AD:83:FC:A8
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01856F66F2180F49CD36C7928BB197A605A8
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/qMSwGmImKf3bqVbWBEHc4a2D_Kg.roa
Signing time: Sun 01 Jan 2023 22:14:55 +0000
ROA not before: Sun 01 Jan 2023 22:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54252
IP address blocks: 185.114.144.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 05:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f2:18:0f:49:cd:36:c7:92:8b:b1:97:a6:05:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 22:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8c4b01a622629fddba956d60441dce1ad83fca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:26:48:de:af:ac:fe:96:2a:34:78:63:22:
67:db:2b:0b:3a:64:51:e5:64:32:3d:51:95:3a:8f:
ca:e7:21:0e:14:17:df:00:90:c6:49:a2:c7:41:f5:
38:03:31:ad:c3:84:2d:6b:51:dd:fb:32:a1:ea:5d:
cc:37:ce:b0:5f:54:13:64:92:8b:05:c3:34:b1:8a:
61:d9:bc:1c:32:d4:15:e1:47:dd:8a:a0:6c:35:cc:
69:43:f1:72:d3:4d:c3:fa:1c:b0:3a:83:2f:d3:77:
0f:ee:c4:66:84:cd:2e:aa:7f:33:e3:39:08:fb:70:
ba:90:a8:cb:59:67:b9:b3:1e:9f:1d:e4:9e:17:da:
a0:f5:12:a4:0a:da:e3:ab:a3:a0:e8:6b:ff:ee:0d:
cc:f4:88:df:64:70:f2:84:a3:9b:08:77:be:8f:59:
21:01:da:4e:ef:e8:8b:18:30:b2:8c:d3:ef:4c:76:
5f:7f:53:1b:a1:89:24:f1:f0:69:60:40:42:ba:f1:
fb:cc:01:97:3d:1e:4a:21:61:49:68:a6:7a:dd:54:
e8:0f:0c:8f:03:0e:df:b0:ae:48:b6:9c:21:27:28:
fd:50:80:d8:ea:37:2d:1a:6b:99:39:8f:8a:08:6a:
95:08:47:5e:ce:23:9d:fa:17:89:d6:65:10:7d:66:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C4:B0:1A:62:26:29:FD:DB:A9:56:D6:04:41:DC:E1:AD:83:FC:A8
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/qMSwGmImKf3bqVbWBEHc4a2D_Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.144.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:9c:1d:9e:6e:df:03:7b:2c:af:bc:55:c1:a3:53:b1:7c:3f:
36:a7:68:53:8e:c4:50:25:6d:b6:3e:04:cf:cb:a0:57:aa:10:
d2:56:0a:9c:df:c0:af:32:b1:e7:1d:85:ed:2c:e0:97:74:04:
fa:83:a9:86:15:0c:ac:79:a9:f2:d8:c2:ec:f4:37:66:6b:47:
cb:46:60:77:e0:1f:3f:87:35:9d:be:05:9f:2f:2b:50:49:ae:
1c:30:ed:61:a7:d1:52:bb:77:cb:e4:10:3c:f6:86:33:b8:b3:
13:38:12:44:c7:1e:c5:61:55:e1:42:b0:0c:37:52:f1:75:c3:
93:83:c9:2a:55:34:77:72:70:09:f9:96:82:72:29:a2:fa:65:
52:0c:57:fd:1f:1a:32:5b:1b:62:ce:d5:cc:5e:3d:22:bf:01:
03:07:a6:2d:b9:96:d5:b8:4b:64:30:4a:97:8c:f4:a8:00:2e:
63:01:ee:7b:dc:87:a9:9e:23:69:bc:99:b5:a5:14:b3:79:31:
e8:3e:5c:03:f5:39:18:4a:ad:1f:28:4f:6a:34:bb:d1:8e:06:
82:2d:1b:fd:21:a1:1b:37:8d:9d:12:ad:5f:22:95:8d:4d:d2:
4c:6b:6c:95:c8:9a:09:f9:a0:4c:45:31:3c:e3:18:ee:2c:96:
9c:3c:06:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvZvIYD0nNNseSi7GXpgWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjMwMTAxMjIxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGM0YjAxYTYyMjYyOWZkZGJhOTU2ZDYwNDQxZGNlMWFkODNmY2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjEmSN6vrP6WKjR4YyJn2ysLOmRR
5WQyPVGVOo/K5yEOFBffAJDGSaLHQfU4AzGtw4Qta1Hd+zKh6l3MN86wX1QTZJKL
BcM0sYph2bwcMtQV4UfdiqBsNcxpQ/Fy003D+hywOoMv03cP7sRmhM0uqn8z4zkI
+3C6kKjLWWe5sx6fHeSeF9qg9RKkCtrjq6Og6Gv/7g3M9IjfZHDyhKObCHe+j1kh
AdpO7+iLGDCyjNPvTHZff1MboYkk8fBpYEBCuvH7zAGXPR5KIWFJaKZ63VToDwyP
Aw7fsK5ItpwhJyj9UIDY6jctGmuZOY+KCGqVCEdeziOd+heJ1mUQfWZ8JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKjEsBpiJin926lW1gRB3OGtg/yoMB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvcU1Td0dtSW1LZjNicVZiV0JFSGM0YTJEX0tnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXKQMA0G
CSqGSIb3DQEBCwUAA4IBAQCPnB2ebt8DeyyvvFXBo1OxfD82p2hTjsRQJW22PgTP
y6BXqhDSVgqc38CvMrHnHYXtLOCXdAT6g6mGFQyseany2MLs9Ddma0fLRmB34B8/
hzWdvgWfLytQSa4cMO1hp9FSu3fL5BA89oYzuLMTOBJExx7FYVXhQrAMN1LxdcOT
g8kqVTR3cnAJ+ZaCcimi+mVSDFf9HxoyWxtiztXMXj0ivwEDB6YtuZbVuEtkMEqX
jPSoAC5jAe573IepniNpvJm1pRSzeTHoPlwD9TkYSq0fKE9qNLvRjgaCLRv9IaEb
N42dEq1fIpWNTdJMa2yVyJoJ+aBMRTE84xjuLJacPAZ0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org