Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/QDKV6GhB3K3LB0k91MXDIuJDe3M.roa
File: QDKV6GhB3K3LB0k91MXDIuJDe3M.roa (raw, json)
Hash identifier: FWkR6YB+hdOjuk2kAfJI033Ck8oALY7WwnTQ6IAsM9k=
Subject key identifier: 40:32:95:E8:68:41:DC:AD:CB:07:49:3D:D4:C5:C3:22:E2:43:7B:73
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 018DC16ADA21C28468D0417279C9D5F0ED39
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/QDKV6GhB3K3LB0k91MXDIuJDe3M.roa
Signing time: Mon 19 Feb 2024 12:50:21 +0000
ROA not before: Mon 19 Feb 2024 12:50:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6724
IP address blocks: 185.122.183.0/24 maxlen: 24
2a03:9160:40::/42 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 Feb 2024 13:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:6a:da:21:c2:84:68:d0:41:72:79:c9:d5:f0:ed:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: Feb 19 12:50:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=403295e86841dcadcb07493dd4c5c322e2437b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:40:2a:1a:0c:d8:7a:63:33:25:9d:a4:48:5a:
33:a6:cc:35:ca:1c:89:be:22:ad:67:63:25:1c:5c:
29:a6:64:d5:b9:1c:7e:87:e7:cf:54:e8:90:e5:b4:
76:5f:ca:7e:89:82:81:a2:06:23:14:c3:b9:c9:7a:
c6:00:ce:f6:ef:74:28:78:f9:91:13:04:3a:b3:d7:
a3:b3:30:f8:6c:38:f0:ca:eb:70:f9:17:91:de:e4:
77:82:4a:bd:e1:e5:ed:2c:ac:3f:b5:6e:51:bd:9a:
70:aa:4c:63:be:07:bc:97:90:11:09:9d:45:e4:1c:
96:7d:a7:f3:9d:e8:ab:4f:91:fb:1a:bd:69:c4:40:
c8:95:be:77:51:4f:e5:41:a2:ee:e3:91:09:ed:64:
98:83:63:b6:b3:c4:9a:ef:d2:00:68:51:1a:51:c1:
69:59:64:01:b5:16:ac:fc:fb:9f:a8:46:8e:c9:39:
44:7e:ad:5c:1f:46:5b:9b:eb:7b:2d:78:98:e8:65:
36:9b:af:8f:3d:1f:07:3d:d3:fe:4b:d1:2c:9b:56:
9c:a1:33:3d:d1:62:54:eb:22:35:eb:19:51:6a:ca:
9d:86:f5:00:cd:71:cd:f5:33:d4:68:1d:8d:2c:c9:
20:32:7c:34:ee:a4:ee:af:4e:64:91:71:ff:db:35:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:32:95:E8:68:41:DC:AD:CB:07:49:3D:D4:C5:C3:22:E2:43:7B:73
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/QDKV6GhB3K3LB0k91MXDIuJDe3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.183.0/24
IPv6:
2a03:9160:40::/42
Signature Algorithm: sha256WithRSAEncryption
55:ce:85:c2:bf:9f:60:97:4c:59:58:16:e0:63:47:ab:3a:79:
91:82:a5:21:5f:4c:5e:71:dd:c1:6b:6f:aa:c0:15:5e:97:d2:
0e:00:8d:30:49:ec:6c:c1:16:93:de:45:f4:29:33:34:b2:8b:
ab:98:e0:4f:8c:c7:09:e3:5b:d7:90:8f:55:fe:75:e4:7b:ce:
85:03:b6:b2:5e:13:46:ae:44:22:c6:4e:9c:b1:71:3a:55:65:
2d:63:40:e4:b4:d4:2a:66:6b:f5:b5:14:14:24:69:01:1c:f9:
6a:da:0a:44:21:bc:ad:bb:d1:d6:d0:5d:66:6c:6e:b3:3b:f2:
e0:f2:11:d2:2e:83:16:6f:f3:4f:1b:45:af:64:22:8a:4c:47:
3b:8a:b3:b3:29:29:47:c3:72:fc:3b:a8:ab:48:44:21:c4:54:
3d:a9:f1:44:fa:79:bd:75:6e:64:6a:23:fa:c2:6f:b5:a1:9a:
36:8a:77:d5:e8:f5:e6:04:4e:dd:25:fa:db:33:db:36:6c:ae:
f2:3f:19:a8:8c:18:be:27:1d:7d:9b:53:75:b7:c8:93:13:da:
a4:dd:eb:16:b4:b6:af:c1:9f:da:43:7e:3f:ad:59:9e:5f:10:
4a:dd:aa:f2:6f:24:17:3c:1a:ab:f6:50:a7:a6:0d:2f:72:4c:
8a:a4:42:3a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3BatohwoRo0EFyecnV8O05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWM2M2M2ZDc1NmJiMmFjZDNmMWFkOTJhYzQxNWRhODU3
ZTZjOTgwHhcNMjQwMjE5MTI1MDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDMyOTVlODY4NDFkY2FkY2IwNzQ5M2RkNGM1YzMyMmUyNDM3YjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkAqGgzYemMzJZ2kSFozpsw1yhyJ
viKtZ2MlHFwppmTVuRx+h+fPVOiQ5bR2X8p+iYKBogYjFMO5yXrGAM7273QoePmR
EwQ6s9ejszD4bDjwyutw+ReR3uR3gkq94eXtLKw/tW5RvZpwqkxjvge8l5ARCZ1F
5ByWfafzneirT5H7Gr1pxEDIlb53UU/lQaLu45EJ7WSYg2O2s8Sa79IAaFEaUcFp
WWQBtRas/PufqEaOyTlEfq1cH0Zbm+t7LXiY6GU2m6+PPR8HPdP+S9Esm1acoTM9
0WJU6yI16xlRasqdhvUAzXHN9TPUaB2NLMkgMnw07qTur05kkXH/2zWW7QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEAylehoQdytywdJPdTFwyLiQ3tzMB8GA1UdIwQY
MBaAFFCcY8bXVrsqzT8a2SrEFdqFfmyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMt
MzhhMzkyNDc3NmU5LzEvUURLVjZHaEIzSzNMQjBrOTFNWERJdUpEZTNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMtMzhhMzkyNDc3NmU5
LzEvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuXq3MA8E
AgACMAkDBwYqA5FgAEAwDQYJKoZIhvcNAQELBQADggEBAFXOhcK/n2CXTFlYFuBj
R6s6eZGCpSFfTF5x3cFrb6rAFV6X0g4AjTBJ7GzBFpPeRfQpMzSyi6uY4E+Mxwnj
W9eQj1X+deR7zoUDtrJeE0auRCLGTpyxcTpVZS1jQOS01Cpma/W1FBQkaQEc+Wra
CkQhvK270dbQXWZsbrM78uDyEdIugxZv808bRa9kIopMRzuKs7MpKUfDcvw7qKtI
RCHEVD2p8UT6eb11bmRqI/rCb7WhmjaKd9Xo9eYETt0l+tsz2zZsrvI/GaiMGL4n
HX2bU3W3yJMT2qTd6xa0tq/Bn9pDfj+tWZ5fEErdqvJvJBc8Gqv2UKemDS9yTIqk
Qjo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:28 2024 by rpki-client on console-fra.rpki-client.org