Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/qGhE9SJcJj1yyF4QnmjxFxT1MKM.roa
File: qGhE9SJcJj1yyF4QnmjxFxT1MKM.roa (raw, json)
Hash identifier: RcGQXD/ZSZ16ehaPUf7FCEB+rCmJ0XG3MqZ20HKz7F8=
Subject key identifier: A8:68:44:F5:22:5C:26:3D:72:C8:5E:10:9E:68:F1:17:14:F5:30:A3
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 018CC86F18544729F6A435B8F08E7248C257
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/qGhE9SJcJj1yyF4QnmjxFxT1MKM.roa
Signing time: Tue 02 Jan 2024 04:29:33 +0000
ROA not before: Tue 02 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8560
IP address blocks: 185.122.180.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 19 Feb 2024 13:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:18:54:47:29:f6:a4:35:b8:f0:8e:72:48:c2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: Jan 2 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a86844f5225c263d72c85e109e68f11714f530a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:90:88:23:2d:43:df:05:2b:d9:60:06:9b:f1:
8c:b9:e5:98:45:e7:9a:c3:69:a2:81:5c:bc:a0:90:
ab:b2:45:8d:9a:6b:95:73:99:ef:5c:73:d8:12:ea:
fe:00:7b:20:e7:48:ca:d5:1b:2d:43:b9:b7:9d:23:
77:29:68:b5:82:09:0c:c4:f8:8b:46:fb:59:c7:28:
f5:1d:da:ef:9f:a1:1a:ca:3c:cd:73:2b:6e:81:2e:
1f:14:a1:2e:a0:9b:c8:7a:5b:17:e4:6a:81:55:c7:
42:9a:c9:76:cc:2d:e3:d7:4a:cc:fa:f9:84:5d:b0:
fe:6c:e4:28:88:b1:01:fb:85:f4:01:ee:0a:68:81:
a1:2d:5a:69:ba:0a:7d:09:d0:59:0a:f5:57:d4:77:
cd:8e:7a:ee:7e:9c:ab:e9:02:ee:05:d2:ea:94:f1:
a0:a8:56:e0:c5:27:bd:8d:7b:35:05:d5:47:3f:c8:
96:83:5b:7a:5e:6c:51:b0:c8:69:ab:20:95:fd:0d:
dc:f5:7f:f6:40:ae:f0:87:20:e6:8e:e7:8c:05:07:
5a:33:7d:ec:34:a1:ec:7c:0f:fe:b5:bd:46:30:98:
4a:ab:3e:ca:1e:d7:37:f8:12:ea:ce:83:85:89:33:
69:78:eb:05:b4:9b:8a:29:e6:6f:72:e5:3a:cc:ab:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:68:44:F5:22:5C:26:3D:72:C8:5E:10:9E:68:F1:17:14:F5:30:A3
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/qGhE9SJcJj1yyF4QnmjxFxT1MKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.180.0/22
Signature Algorithm: sha256WithRSAEncryption
49:3e:24:d1:95:15:58:90:b1:01:9f:6b:f4:e7:0f:58:b3:af:
1e:02:7f:5a:2d:18:45:46:84:58:50:f3:25:98:2e:b6:17:c5:
d5:36:6a:52:e7:cd:2e:98:08:4b:ea:c7:78:9b:09:40:68:bb:
dd:f4:28:fc:59:fe:85:2f:55:b7:bf:e7:2d:39:60:70:7a:fb:
16:99:eb:da:84:9e:32:5d:f4:d0:5f:e3:21:0e:52:5c:71:a0:
64:96:9a:9e:30:e2:e9:a0:28:b2:cb:79:d1:60:ca:a6:78:09:
fd:e2:02:84:28:d2:4e:b4:bc:5f:d4:ea:3c:47:86:4e:b6:26:
8a:bb:49:7a:1d:0e:5f:96:af:45:ec:00:34:78:7b:f1:1c:aa:
86:ed:7c:2a:82:52:86:d7:b1:1f:22:47:64:2e:b8:a9:04:5d:
57:d4:98:c2:27:e7:82:68:8b:e8:22:d4:34:46:13:32:3b:a4:
60:58:3e:f9:5b:16:81:8e:9a:d2:e7:1a:e0:c6:62:d7:39:66:
a0:8d:94:c5:e6:33:75:44:74:b7:79:49:c4:5e:ee:89:07:5e:
2d:3d:0f:81:29:64:df:9c:62:73:f1:83:d4:9e:33:08:da:df:
f7:e6:a6:5e:50:b7:30:dd:8b:97:47:d8:e3:25:dd:d3:c2:96:
72:90:63:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIbxhURyn2pDW48I5ySMJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWM2M2M2ZDc1NmJiMmFjZDNmMWFkOTJhYzQxNWRhODU3
ZTZjOTgwHhcNMjQwMTAyMDQyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODY4NDRmNTIyNWMyNjNkNzJjODVlMTA5ZTY4ZjExNzE0ZjUzMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpCIIy1D3wUr2WAGm/GMueWYReea
w2migVy8oJCrskWNmmuVc5nvXHPYEur+AHsg50jK1RstQ7m3nSN3KWi1ggkMxPiL
RvtZxyj1Hdrvn6EayjzNcytugS4fFKEuoJvIelsX5GqBVcdCmsl2zC3j10rM+vmE
XbD+bOQoiLEB+4X0Ae4KaIGhLVppugp9CdBZCvVX1HfNjnrufpyr6QLuBdLqlPGg
qFbgxSe9jXs1BdVHP8iWg1t6XmxRsMhpqyCV/Q3c9X/2QK7whyDmjueMBQdaM33s
NKHsfA/+tb1GMJhKqz7KHtc3+BLqzoOFiTNpeOsFtJuKKeZvcuU6zKvB5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKhoRPUiXCY9csheEJ5o8RcU9TCjMB8GA1UdIwQY
MBaAFFCcY8bXVrsqzT8a2SrEFdqFfmyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMt
MzhhMzkyNDc3NmU5LzEvcUdoRTlTSmNKajF5eUY0UW5tanhGeFQxTUtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMtMzhhMzkyNDc3NmU5
LzEvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXq0MA0G
CSqGSIb3DQEBCwUAA4IBAQBJPiTRlRVYkLEBn2v05w9Ys68eAn9aLRhFRoRYUPMl
mC62F8XVNmpS580umAhL6sd4mwlAaLvd9Cj8Wf6FL1W3v+ctOWBwevsWmevahJ4y
XfTQX+MhDlJccaBklpqeMOLpoCiyy3nRYMqmeAn94gKEKNJOtLxf1Oo8R4ZOtiaK
u0l6HQ5flq9F7AA0eHvxHKqG7XwqglKG17EfIkdkLripBF1X1JjCJ+eCaIvoItQ0
RhMyO6RgWD75WxaBjprS5xrgxmLXOWagjZTF5jN1RHS3eUnEXu6JB14tPQ+BKWTf
nGJz8YPUnjMI2t/35qZeULcw3YuXR9jjJd3TwpZykGOr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:28 2024 by rpki-client on console-fra.rpki-client.org