Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/qDDqJHW66CDpwOEK__1JOY9MJk8.roa
File: qDDqJHW66CDpwOEK__1JOY9MJk8.roa (raw, json)
Hash identifier: FrsDzYCGDsUs4xEQ3Z0RfRCTIA67ekhSuup+//8+jHk=
Subject key identifier: A8:30:EA:24:75:BA:E8:20:E9:C0:E1:0A:FF:FD:49:39:8F:4C:26:4F
Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Certificate serial: 018CC801B4058D407349D0BB3410221256CD
Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/qDDqJHW66CDpwOEK__1JOY9MJk8.roa
Signing time: Tue 02 Jan 2024 02:30:03 +0000
ROA not before: Tue 02 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210963
IP address blocks: 185.218.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 12:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b4:05:8d:40:73:49:d0:bb:34:10:22:12:56:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Validity
Not Before: Jan 2 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a830ea2475bae820e9c0e10afffd49398f4c264f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:cd:bd:a7:8c:ba:07:80:b3:84:82:f9:9e:
63:7a:62:cf:b4:45:c7:39:af:50:99:0a:1a:ac:e4:
16:66:da:ac:b7:cd:b1:be:a1:08:6f:69:f5:b9:3a:
b9:2c:40:3e:56:24:52:8a:c6:7d:08:92:9c:1b:7d:
35:91:a6:10:b8:d6:71:5b:b3:fc:0f:38:fc:5e:4c:
43:de:58:bb:d9:74:b3:bb:79:1d:05:2d:ed:fd:61:
bf:fb:cd:01:e9:d9:dd:ce:08:bf:e2:2f:0f:ad:e9:
27:bd:7e:aa:f4:81:48:50:97:1e:22:d1:4c:4f:66:
f3:f1:da:b6:cf:58:32:98:17:89:21:62:45:f8:ec:
fb:2e:65:4e:d0:12:4b:48:29:c5:e9:0b:79:29:1c:
59:7f:6f:f6:77:2e:6e:ed:1d:b1:ad:b9:c5:0b:8d:
a0:87:22:0a:ab:aa:9b:29:c3:b9:2e:b0:cb:3c:7a:
c2:a4:ea:5a:0f:d9:c5:52:2a:91:cc:b3:bf:af:80:
ae:b5:c9:2c:07:31:96:c1:16:30:51:3d:f8:b7:65:
41:2a:08:7b:87:23:9e:8b:61:ee:71:c7:1a:75:3f:
93:72:4e:4a:25:a8:cf:66:a5:28:cb:a8:00:ae:ff:
8f:7a:0d:e5:bb:bf:59:92:05:89:c1:ff:11:3e:c6:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:30:EA:24:75:BA:E8:20:E9:C0:E1:0A:FF:FD:49:39:8F:4C:26:4F
X509v3 Authority Key Identifier:
keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/qDDqJHW66CDpwOEK__1JOY9MJk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:aa:54:2b:da:5b:fa:fe:98:1b:6d:a5:fb:09:01:46:3e:44:
8c:1d:de:aa:85:d1:e0:8a:a5:9b:2d:40:03:2b:1d:06:f3:9e:
7e:33:ff:41:0b:f8:02:c5:70:3c:ff:9c:f5:04:17:90:40:d0:
fb:0c:86:ec:dd:a6:1d:91:06:1a:cb:c0:39:fc:2e:2d:3b:bb:
d3:80:bc:f0:7f:74:05:5b:39:a0:db:1b:5c:39:61:c1:23:6b:
59:51:6d:ce:22:d7:a4:c0:e6:af:47:70:9d:c3:d0:58:83:e3:
49:3a:3b:48:08:71:f5:1a:cc:93:0a:fb:5e:53:50:fa:11:b9:
8c:b9:3c:b5:a1:37:d0:50:bb:5a:36:cf:c2:ef:05:68:0d:05:
11:4f:1c:65:d9:fe:15:87:e9:3f:66:27:29:d9:b4:33:05:c8:
2b:6b:38:2a:78:21:36:40:42:66:15:21:41:52:93:9c:89:58:
43:f6:99:cd:5b:48:e0:88:7f:ac:94:8f:ac:e5:88:42:c9:fb:
1d:bf:9b:60:b2:33:ce:6a:9d:ba:32:af:11:90:25:6f:77:86:
c8:9d:46:c3:04:75:de:31:ca:fb:c2:22:1c:59:aa:55:90:6c:
99:4b:54:cf:ae:6f:2c:8c:c3:cf:2f:42:41:99:d6:1f:6e:12:
bb:30:cf:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAbQFjUBzSdC7NBAiElbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5N2Q5ZjNkYmZjMzY1MzMyZTI4MmJkMTc2YTY4MDc1NDQ2
ZDFkMWIwHhcNMjQwMTAyMDIzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODMwZWEyNDc1YmFlODIwZTljMGUxMGFmZmZkNDkzOThmNGMyNjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1nNvaeMugeAs4SC+Z5jemLPtEXH
Oa9QmQoarOQWZtqst82xvqEIb2n1uTq5LEA+ViRSisZ9CJKcG301kaYQuNZxW7P8
Dzj8XkxD3li72XSzu3kdBS3t/WG/+80B6dndzgi/4i8PreknvX6q9IFIUJceItFM
T2bz8dq2z1gymBeJIWJF+Oz7LmVO0BJLSCnF6Qt5KRxZf2/2dy5u7R2xrbnFC42g
hyIKq6qbKcO5LrDLPHrCpOpaD9nFUiqRzLO/r4CutcksBzGWwRYwUT34t2VBKgh7
hyOei2HucccadT+Tck5KJajPZqUoy6gArv+Peg3lu79ZkgWJwf8RPsZDMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKgw6iR1uugg6cDhCv/9STmPTCZPMB8GA1UdIwQY
MBaAFDl9nz2/w2UzLigr0XamgHVEbR0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1gyZlBiX0RaVE11S0N2UmRxYUFkVVJ0SFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hZjJmOGYtMTIxMi00OTQzLWJkMGMt
ZDg2YWIyZmU3NjQ4LzEvcUREcUpIVzY2Q0Rwd09FS19fMUpPWTlNSms4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9hZjJmOGYtMTIxMi00OTQzLWJkMGMtZDg2YWIyZmU3NjQ4
LzEvT1gyZlBiX0RaVE11S0N2UmRxYUFkVVJ0SFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudpoMA0G
CSqGSIb3DQEBCwUAA4IBAQAOqlQr2lv6/pgbbaX7CQFGPkSMHd6qhdHgiqWbLUAD
Kx0G855+M/9BC/gCxXA8/5z1BBeQQND7DIbs3aYdkQYay8A5/C4tO7vTgLzwf3QF
Wzmg2xtcOWHBI2tZUW3OItekwOavR3Cdw9BYg+NJOjtICHH1GsyTCvteU1D6EbmM
uTy1oTfQULtaNs/C7wVoDQURTxxl2f4Vh+k/Zicp2bQzBcgrazgqeCE2QEJmFSFB
UpOciVhD9pnNW0jgiH+slI+s5YhCyfsdv5tgsjPOap26Mq8RkCVvd4bInUbDBHXe
Mcr7wiIcWapVkGyZS1TPrm8sjMPPL0JBmdYfbhK7MM9y
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:09 2025 by rpki-client