Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/qE2ufTMALxFSe7xAPkQLjvsufc4.roa
File: qE2ufTMALxFSe7xAPkQLjvsufc4.roa (raw, json)
Hash identifier: FBHzMzHQFgk9XvfUdTMGc5uVl8DqR8QMScFd8NWzclY=
Subject key identifier: A8:4D:AE:7D:33:00:2F:11:52:7B:BC:40:3E:44:0B:8E:FB:2E:7D:CE
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01893429EDE06523F2CEB607F06A4BF36E55
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/qE2ufTMALxFSe7xAPkQLjvsufc4.roa
Signing time: Sat 08 Jul 2023 06:21:50 +0000
ROA not before: Sat 08 Jul 2023 06:21:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.170.68.0/22 maxlen: 24
185.171.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Sep 2023 15:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:34:29:ed:e0:65:23:f2:ce:b6:07:f0:6a:4b:f3:6e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jul 8 06:21:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a84dae7d33002f11527bbc403e440b8efb2e7dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a6:70:bd:f1:9b:89:43:07:23:d1:49:b1:f6:
39:06:29:dc:16:3d:c3:da:82:04:a9:1e:a5:48:86:
45:39:af:01:7d:51:27:67:e8:99:a5:1a:b6:b8:8f:
f7:0d:1c:ae:92:ea:bb:ff:95:c6:8a:9a:70:11:5e:
63:d7:8a:1f:df:49:8e:b6:82:e5:08:41:b0:a7:7f:
c2:6f:72:5a:18:95:a4:15:05:d0:01:81:48:52:23:
56:f9:70:3b:f6:f3:48:f9:83:d5:ec:fc:a8:25:04:
99:f5:26:72:26:b8:8b:d8:99:2b:9d:94:e6:8e:0a:
eb:cc:d0:3c:b4:c9:42:0b:3e:b0:c4:da:f6:fc:0e:
1d:20:09:aa:99:14:2f:b9:c7:6b:c2:90:f8:1f:e0:
f5:0f:81:4d:91:df:69:01:d1:49:bf:85:5f:b2:26:
73:79:1d:ca:44:3a:ca:d0:01:f1:d9:ad:5d:b4:3d:
fb:e4:7f:bd:4e:93:d7:3a:24:10:49:34:27:52:e2:
44:44:19:ca:4b:6f:a2:8b:a4:7e:04:8a:29:75:7f:
d9:24:dd:f1:e9:06:bd:c9:7b:54:d8:c7:9e:e6:76:
a3:cb:9d:70:bf:95:c2:ec:0d:c2:ea:11:e0:46:ea:
92:3d:b4:6d:54:56:1e:0b:24:68:19:fe:aa:4d:52:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4D:AE:7D:33:00:2F:11:52:7B:BC:40:3E:44:0B:8E:FB:2E:7D:CE
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/qE2ufTMALxFSe7xAPkQLjvsufc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.68.0/22
185.171.252.0/22
Signature Algorithm: sha256WithRSAEncryption
60:93:05:fa:72:26:6a:16:7d:21:0f:45:2f:05:78:52:86:9d:
93:78:1b:ea:ce:74:30:5f:b3:1b:45:bb:de:4a:30:b6:fb:eb:
48:5d:f5:a2:fa:76:b6:4f:af:b4:9a:57:ed:50:88:59:79:38:
4d:c2:6c:09:7c:08:92:66:07:c2:8f:0a:99:dc:19:d0:ab:b0:
12:cc:87:88:46:60:95:18:99:a4:db:1a:ee:b9:6b:37:f7:15:
ec:a3:17:72:b7:e3:dd:6a:b3:5d:9e:bf:bc:d9:e9:8a:f4:dd:
f2:42:3a:01:82:13:40:eb:de:51:25:b7:5d:05:5c:df:f8:08:
59:aa:3b:c8:5e:12:ec:15:5c:40:6c:2d:13:a3:a0:ff:44:8a:
a3:7d:23:0f:bd:9b:3e:03:0e:59:59:88:78:07:d3:1c:9a:3a:
e8:02:8d:44:97:d6:44:dc:da:3f:97:01:92:b4:a8:b5:89:40:
2b:33:b5:1f:21:4b:3c:b0:e8:9c:79:6d:fc:f4:3b:a3:02:4e:
a8:f3:81:7d:1d:f6:49:34:31:7b:fe:95:60:52:b1:14:d3:ab:
ed:23:83:1c:93:8b:a7:9d:53:31:17:64:0f:e5:aa:fb:bf:4f:
e8:e4:d1:6e:af:77:bd:3c:df:d3:a4:bd:30:f8:14:c8:b5:9d:
e3:b8:d2:c7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYk0Ke3gZSPyzrYH8GpL825VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjMwNzA4MDYyMTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODRkYWU3ZDMzMDAyZjExNTI3YmJjNDAzZTQ0MGI4ZWZiMmU3ZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaZwvfGbiUMHI9FJsfY5BincFj3D
2oIEqR6lSIZFOa8BfVEnZ+iZpRq2uI/3DRyukuq7/5XGippwEV5j14of30mOtoLl
CEGwp3/Cb3JaGJWkFQXQAYFIUiNW+XA79vNI+YPV7PyoJQSZ9SZyJriL2JkrnZTm
jgrrzNA8tMlCCz6wxNr2/A4dIAmqmRQvucdrwpD4H+D1D4FNkd9pAdFJv4VfsiZz
eR3KRDrK0AHx2a1dtD375H+9TpPXOiQQSTQnUuJERBnKS2+ii6R+BIopdX/ZJN3x
6Qa9yXtU2Mee5najy51wv5XC7A3C6hHgRuqSPbRtVFYeCyRoGf6qTVLr+QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKhNrn0zAC8RUnu8QD5EC477Ln3OMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvcUUydWZUTUFMeEZTZTd4QVBrUUxqdnN1ZmM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuapEAwQC
uav8MA0GCSqGSIb3DQEBCwUAA4IBAQBgkwX6ciZqFn0hD0UvBXhShp2TeBvqznQw
X7MbRbveSjC2++tIXfWi+na2T6+0mlftUIhZeThNwmwJfAiSZgfCjwqZ3BnQq7AS
zIeIRmCVGJmk2xruuWs39xXsoxdyt+PdarNdnr+82emK9N3yQjoBghNA695RJbdd
BVzf+AhZqjvIXhLsFVxAbC0To6D/RIqjfSMPvZs+Aw5ZWYh4B9McmjroAo1El9ZE
3No/lwGStKi1iUArM7UfIUs8sOiceW389DujAk6o84F9HfZJNDF7/pVgUrEU06vt
I4Mck4unnVMxF2QP5ar7v0/o5NFur3e9PN/TpL0w+BTItZ3juNLH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:50 2024 by rpki-client on console-ams.rpki-client.org