Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/QItROazVUG60qi3Q5bWI8nAgPMk.roa
File: QItROazVUG60qi3Q5bWI8nAgPMk.roa (raw, json)
Hash identifier: cNCJcYfdO4z7j3+74aKANwce7slon1SkDEY9DpptY8o=
Subject key identifier: 40:8B:51:39:AC:D5:50:6E:B4:AA:2D:D0:E5:B5:88:F2:70:20:3C:C9
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018FC45DF366EBA2A4ADDB72F737BF9F135C
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/QItROazVUG60qi3Q5bWI8nAgPMk.roa
Signing time: Wed 29 May 2024 12:40:42 +0000
ROA not before: Wed 29 May 2024 12:40:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 185.215.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 09:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c4:5d:f3:66:eb:a2:a4:ad:db:72:f7:37:bf:9f:13:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 29 12:40:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=408b5139acd5506eb4aa2dd0e5b588f270203cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:73:88:d2:aa:05:97:06:1f:3b:24:25:6b:
ad:50:8f:22:62:5e:bd:1a:c8:b9:e8:82:d6:ae:5c:
f5:d1:8a:b9:6f:f3:05:76:8c:1e:3d:00:18:d5:0a:
fe:ae:57:57:2d:fd:7d:7a:34:53:59:63:9b:03:bc:
8d:d1:6e:44:bc:08:71:8a:f4:3f:3d:ed:e1:10:41:
95:16:98:75:41:13:93:ef:c2:e6:51:59:82:6f:20:
2e:9f:2c:fc:53:be:1d:ba:03:c6:bd:43:f0:4b:e0:
c4:f3:df:38:1c:ad:f7:97:26:c0:b3:21:7f:a4:bd:
a8:8e:1d:9b:d0:5a:a1:df:66:7d:48:bf:b8:2b:61:
85:b6:11:26:ac:0f:7e:74:c3:ac:54:04:8d:d1:1e:
5b:7a:1c:d3:b2:cb:e1:d7:85:15:61:89:e1:66:54:
0e:0a:39:0b:c6:ca:55:d7:46:c1:0a:84:db:eb:30:
2e:49:b3:ed:1b:e9:44:57:f0:57:6a:fd:bd:a3:c9:
a7:db:e7:ec:46:7c:8e:f9:9c:52:ad:ee:33:e3:fd:
f0:41:b6:10:f7:61:cd:53:3e:7f:00:0f:1c:da:74:
80:2a:9d:12:d6:3d:33:ea:00:ff:1c:33:f0:78:54:
2d:18:1f:48:b6:30:83:15:c2:21:5c:2e:08:45:f0:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8B:51:39:AC:D5:50:6E:B4:AA:2D:D0:E5:B5:88:F2:70:20:3C:C9
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/QItROazVUG60qi3Q5bWI8nAgPMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.228.0/24
Signature Algorithm: sha256WithRSAEncryption
14:db:7c:86:cd:d6:68:6d:83:fd:c3:6c:9d:0e:0d:bd:74:bd:
38:9f:45:b3:b4:30:ae:bb:77:f6:12:e2:d0:9d:1c:5a:7a:37:
9b:85:2b:49:95:a5:a8:21:51:60:1e:96:40:08:f6:1e:b7:52:
1e:7a:99:f4:33:9f:e8:b4:b7:0d:8a:60:53:49:01:f8:3a:65:
a5:27:60:b7:9a:c6:37:8b:74:c2:0e:89:57:b3:59:74:58:15:
01:a9:4c:cb:1a:72:0b:d9:a9:e4:3a:c4:5f:c9:9d:e2:02:14:
3d:13:7e:1b:cd:d4:14:6c:8b:11:d8:9d:8b:69:70:9e:81:af:
8e:7f:04:a4:3c:d9:92:f3:bf:8d:9c:a9:1f:c3:9d:86:15:83:
6b:aa:6e:25:b0:dd:59:6e:78:da:4a:95:71:9c:e9:fa:92:0f:
ed:63:f4:38:3e:84:b8:ab:42:17:02:4a:ad:71:68:0c:ee:87:
55:1d:f5:f4:30:3f:e1:96:01:89:37:79:0c:80:19:9d:ac:76:
ae:ab:54:fa:dd:ec:62:b8:09:a0:1d:c0:4a:f1:a4:e2:bc:a5:
e5:88:c8:d3:ac:0c:6d:7f:ce:fb:4d:dd:b6:6e:39:53:37:b9:
17:1c:05:83:98:34:65:3e:f4:e2:d2:0e:5f:c4:f5:07:b0:49:
07:07:43:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/EXfNm66Kkrdty9ze/nxNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjQwNTI5MTI0MDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDhiNTEzOWFjZDU1MDZlYjRhYTJkZDBlNWI1ODhmMjcwMjAzY2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG5ziNKqBZcGHzskJWutUI8iYl69
Gsi56ILWrlz10Yq5b/MFdowePQAY1Qr+rldXLf19ejRTWWObA7yN0W5EvAhxivQ/
Pe3hEEGVFph1QROT78LmUVmCbyAunyz8U74dugPGvUPwS+DE8984HK33lybAsyF/
pL2ojh2b0Fqh32Z9SL+4K2GFthEmrA9+dMOsVASN0R5behzTssvh14UVYYnhZlQO
CjkLxspV10bBCoTb6zAuSbPtG+lEV/BXav29o8mn2+fsRnyO+ZxSre4z4/3wQbYQ
92HNUz5/AA8c2nSAKp0S1j0z6gD/HDPweFQtGB9ItjCDFcIhXC4IRfCXQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFECLUTms1VButKot0OW1iPJwIDzJMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvUUl0Uk9helZVRzYwcWkzUTViV0k4bkFnUE1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudfkMA0G
CSqGSIb3DQEBCwUAA4IBAQAU23yGzdZobYP9w2ydDg29dL04n0WztDCuu3f2EuLQ
nRxaejebhStJlaWoIVFgHpZACPYet1Ieepn0M5/otLcNimBTSQH4OmWlJ2C3msY3
i3TCDolXs1l0WBUBqUzLGnIL2ankOsRfyZ3iAhQ9E34bzdQUbIsR2J2LaXCega+O
fwSkPNmS87+NnKkfw52GFYNrqm4lsN1ZbnjaSpVxnOn6kg/tY/Q4PoS4q0IXAkqt
cWgM7odVHfX0MD/hlgGJN3kMgBmdrHauq1T63exiuAmgHcBK8aTivKXliMjTrAxt
f877Td22bjlTN7kXHAWDmDRlPvTi0g5fxPUHsEkHB0MD
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:54 2025 by rpki-client