Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/qsjhtroqSmif70fGWSMKoX71b94.roa
File: qsjhtroqSmif70fGWSMKoX71b94.roa (raw, json)
Hash identifier: 7mF6oJgBCUT0/Rd9rW23KmjazHo6bwfbE7QtAx3lqOc=
Subject key identifier: AA:C8:E1:B6:BA:2A:4A:68:9F:EF:47:C6:59:23:0A:A1:7E:F5:6F:DE
Certificate issuer: /CN=114c56d595de33cb8751739dbdd9b45edb2eff0c
Certificate serial: 01856F30282AE63E179B9EAE0E52507425BE
Authority key identifier: 11:4C:56:D5:95:DE:33:CB:87:51:73:9D:BD:D9:B4:5E:DB:2E:FF:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/qsjhtroqSmif70fGWSMKoX71b94.roa
Signing time: Sun 01 Jan 2023 21:15:05 +0000
ROA not before: Sun 01 Jan 2023 21:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60274
IP address blocks: 185.233.67.0/24 maxlen: 24
2a10:df80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 15 May 2023 14:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:28:2a:e6:3e:17:9b:9e:ae:0e:52:50:74:25:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=114c56d595de33cb8751739dbdd9b45edb2eff0c
Validity
Not Before: Jan 1 21:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aac8e1b6ba2a4a689fef47c659230aa17ef56fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:10:07:41:89:4d:56:2a:f8:62:b7:64:8c:
1b:70:2c:62:ef:6a:2d:2d:cd:15:b9:64:1c:93:3d:
cf:a9:79:b8:40:ed:dc:fb:fe:69:45:81:22:f9:3c:
40:be:67:a6:51:f5:a0:ee:2e:32:b2:73:9b:67:85:
52:4d:21:7a:50:71:79:21:54:db:fa:f2:d2:d5:a9:
30:72:fd:f9:7e:2e:d5:01:04:0a:77:c0:5e:eb:4a:
a8:39:da:68:aa:d0:b6:09:5a:2a:41:95:7f:f5:fc:
94:a0:9c:88:03:f2:a4:52:aa:b6:cc:1e:cd:91:0e:
29:59:e4:22:f9:6a:7e:f1:34:07:30:72:74:ff:7e:
38:49:05:9b:c1:5b:22:fc:9e:4d:72:86:35:4f:37:
a9:0c:fd:20:3e:4c:e1:78:79:d0:f8:5d:96:ab:7d:
9a:93:5e:55:81:32:51:ff:3b:46:ed:70:4a:71:14:
46:54:fd:e2:ca:c7:c4:fb:6d:3f:b0:fb:e4:d6:95:
60:da:32:9d:83:d4:34:0a:43:53:21:fa:45:b5:5b:
ed:de:cf:94:bc:51:23:f4:c4:f2:b7:af:0f:87:fe:
36:62:77:d7:52:f4:d5:22:45:d5:c2:85:cb:37:5a:
fd:cd:eb:5d:24:1e:02:fd:9e:ca:33:c3:b7:7d:3b:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C8:E1:B6:BA:2A:4A:68:9F:EF:47:C6:59:23:0A:A1:7E:F5:6F:DE
X509v3 Authority Key Identifier:
keyid:11:4C:56:D5:95:DE:33:CB:87:51:73:9D:BD:D9:B4:5E:DB:2E:FF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/qsjhtroqSmif70fGWSMKoX71b94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.67.0/24
IPv6:
2a10:df80::/29
Signature Algorithm: sha256WithRSAEncryption
06:ad:32:82:8b:a3:d9:8a:2d:fa:28:82:0f:17:a9:ac:6a:09:
77:a4:77:49:23:01:f9:54:ac:15:c7:bc:58:8a:cc:ad:15:dd:
37:75:05:ec:bb:57:89:2f:a0:18:61:86:fb:86:be:6c:d2:ce:
9d:fd:13:7b:b6:3a:5c:f0:3e:cf:f0:2f:0b:c1:d6:5c:35:13:
cd:ca:3f:56:4b:07:43:0c:03:c9:e2:8c:6f:db:6f:8a:26:d3:
73:1d:ff:63:f0:77:1e:24:16:f9:04:af:a5:c5:f5:1c:45:28:
29:7c:5f:4f:2f:43:7a:6b:ea:fa:55:fa:ff:96:32:50:db:ca:
05:77:5e:bf:3f:4e:0f:d3:d1:ef:e7:6f:e1:77:24:d9:11:62:
48:b2:5b:b7:11:38:7f:5f:00:04:dc:48:14:92:67:d8:3f:0f:
dd:4b:74:e2:62:e1:53:c4:15:5a:9e:89:15:7b:36:36:86:3b:
02:83:08:2e:eb:95:1b:68:21:34:33:64:0e:67:de:7e:c5:a0:
dc:c9:c7:f1:d2:0c:df:c3:ec:1a:77:c0:ed:b3:c6:14:b5:bb:
00:2d:17:aa:5f:28:2d:bf:c9:4b:0a:19:65:3a:0a:42:a5:96:
59:98:f5:ce:d3:d7:a3:3a:c0:5e:28:e9:d6:c8:5f:25:c9:6d:
e5:b9:24:a5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvMCgq5j4Xm56uDlJQdCW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNGM1NmQ1OTVkZTMzY2I4NzUxNzM5ZGJkZDliNDVlZGIy
ZWZmMGMwHhcNMjMwMTAxMjExNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWM4ZTFiNmJhMmE0YTY4OWZlZjQ3YzY1OTIzMGFhMTdlZjU2ZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovkQB0GJTVYq+GK3ZIwbcCxi72ot
Lc0VuWQckz3PqXm4QO3c+/5pRYEi+TxAvmemUfWg7i4ysnObZ4VSTSF6UHF5IVTb
+vLS1akwcv35fi7VAQQKd8Be60qoOdpoqtC2CVoqQZV/9fyUoJyIA/KkUqq2zB7N
kQ4pWeQi+Wp+8TQHMHJ0/344SQWbwVsi/J5NcoY1TzepDP0gPkzheHnQ+F2Wq32a
k15VgTJR/ztG7XBKcRRGVP3iysfE+20/sPvk1pVg2jKdg9Q0CkNTIfpFtVvt3s+U
vFEj9MTyt68Ph/42YnfXUvTVIkXVwoXLN1r9zetdJB4C/Z7KM8O3fTsvhQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKrI4ba6Kkpon+9HxlkjCqF+9W/eMB8GA1UdIwQY
MBaAFBFMVtWV3jPLh1Fznb3ZtF7bLv8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVV4VzFaWGVNOHVIVVhPZHZkbTBYdHN1X3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wZjA4MmMtYjE4Zi00MWM1LTlmZDQt
MzAxMTA2OGVlYjY5LzEvcXNqaHRyb3FTbWlmNzBmR1dTTUtvWDcxYjk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8wZjA4MmMtYjE4Zi00MWM1LTlmZDQtMzAxMTA2OGVlYjY5
LzEvRVV4VzFaWGVNOHVIVVhPZHZkbTBYdHN1X3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuelDMA0E
AgACMAcDBQMqEN+AMA0GCSqGSIb3DQEBCwUAA4IBAQAGrTKCi6PZii36KIIPF6ms
agl3pHdJIwH5VKwVx7xYisytFd03dQXsu1eJL6AYYYb7hr5s0s6d/RN7tjpc8D7P
8C8LwdZcNRPNyj9WSwdDDAPJ4oxv22+KJtNzHf9j8HceJBb5BK+lxfUcRSgpfF9P
L0N6a+r6Vfr/ljJQ28oFd16/P04P09Hv52/hdyTZEWJIslu3ETh/XwAE3EgUkmfY
Pw/dS3TiYuFTxBVanokVezY2hjsCgwgu65UbaCE0M2QOZ95+xaDcycfx0gzfw+wa
d8Dts8YUtbsALReqXygtv8lLChllOgpCpZZZmPXO09ejOsBeKOnWyF8lyW3luSSl
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:16 2024 by rpki-client on console-ams.rpki-client.org