Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/G-qaTR0j5bEOs3tzrHEHlDaMTCU.roa
File: G-qaTR0j5bEOs3tzrHEHlDaMTCU.roa (raw, json)
Hash identifier: NZ/b95l9DUs00TvpJObNiXzvyJDTP23wvLOEjGI0Q6Q=
Subject key identifier: 1B:EA:9A:4D:1D:23:E5:B1:0E:B3:7B:73:AC:71:07:94:36:8C:4C:25
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 01858CFFA43534A1441F82D17F53BB7B75CC
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/G-qaTR0j5bEOs3tzrHEHlDaMTCU.roa
Signing time: Sat 07 Jan 2023 16:10:42 +0000
ROA not before: Sat 07 Jan 2023 16:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47366
IP address blocks: 185.62.9.0/24 maxlen: 24
185.62.11.0/24 maxlen: 24
185.62.8.0/22 maxlen: 24
185.62.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8c:ff:a4:35:34:a1:44:1f:82:d1:7f:53:bb:7b:75:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Jan 7 16:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bea9a4d1d23e5b10eb37b73ac710794368c4c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:c8:fa:1d:fc:5b:62:8d:74:e4:2b:ed:0b:
ab:80:44:9b:e2:4b:9a:ff:31:ce:d5:c4:27:27:04:
24:df:76:f7:4c:74:7c:2e:23:bd:83:51:e2:c7:cb:
16:3c:9b:51:d8:a4:1c:50:dc:e0:05:98:eb:d8:b7:
80:78:6a:2d:e6:e7:b3:07:10:30:8d:ac:54:96:89:
75:18:f4:17:9a:24:bb:3a:0f:8b:af:af:60:55:b0:
e8:62:6d:1c:a5:c1:69:cf:b5:13:6c:c3:ae:b1:2c:
6c:49:d8:bd:75:68:f9:6c:ed:2c:03:57:28:ba:e9:
3a:23:d0:03:17:2d:83:e7:10:3d:dd:68:00:28:d9:
5a:f0:ba:bf:f9:38:61:08:9e:45:07:b1:7d:dc:1a:
68:a2:cf:05:db:52:21:6a:a4:10:b6:e8:b4:cd:9d:
6a:02:e7:f0:8e:b7:5f:ee:70:f1:7d:d3:96:ff:a5:
b5:62:44:6b:5f:bd:5b:db:64:3c:ff:74:85:15:82:
2d:53:6f:fe:36:2f:5b:9c:1b:8d:74:16:a5:a5:c0:
e1:95:6e:7d:29:81:f8:d7:80:6d:bf:69:e3:23:11:
5e:d2:45:bf:eb:c3:df:0d:ca:67:a4:f4:d9:e1:57:
69:fa:16:92:36:da:94:a1:10:f9:48:62:a5:34:bf:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EA:9A:4D:1D:23:E5:B1:0E:B3:7B:73:AC:71:07:94:36:8C:4C:25
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/G-qaTR0j5bEOs3tzrHEHlDaMTCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.8.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:9f:07:b6:64:ce:03:42:16:12:d3:a5:21:d9:fb:41:36:31:
f6:a8:9d:cb:6b:81:af:6a:7d:2a:ba:bd:3b:0c:3e:c7:4f:f6:
b5:dc:33:89:b0:21:d8:a4:68:e2:af:43:ff:82:17:67:f6:1e:
fa:32:5f:46:9c:a0:5b:e2:13:98:db:47:a6:83:c6:d6:aa:0f:
66:c7:35:7d:aa:81:09:c3:c4:7e:82:e9:a8:89:e0:86:e9:f8:
94:f1:49:27:17:cb:ea:b0:32:b8:cd:73:99:a6:c3:aa:76:59:
92:61:5c:40:36:f7:07:bf:85:43:b5:c2:a9:b8:31:6c:b8:dd:
73:6b:29:81:49:89:e6:20:1e:88:41:6d:9e:55:7c:ab:0f:fc:
6c:7c:a4:77:fa:bc:f5:4a:a3:ce:52:3e:23:91:77:1c:36:ef:
fd:a3:8f:08:cd:3b:99:8c:d1:c0:41:57:9c:e6:ea:dd:97:cf:
54:91:1f:c8:83:09:92:d9:2b:54:1f:a3:b4:7e:6e:dc:cc:49:
2a:02:4b:f0:bf:a3:a3:0a:5f:a7:ec:67:c9:cc:45:13:f1:36:
4a:71:47:59:7d:19:87:ae:16:15:c7:18:20:a3:87:c0:53:9e:
48:fd:05:f6:99:33:1d:d5:01:a6:e9:56:30:37:45:66:b0:63:
30:9c:2f:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWM/6Q1NKFEH4LRf1O7e3XMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMmNhN2E1ODNiMjQ5N2MzNjdlOWU4NmRlYjc5Y2I3YTcz
NzVhNDcwHhcNMjMwMTA3MTYxMDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmVhOWE0ZDFkMjNlNWIxMGViMzdiNzNhYzcxMDc5NDM2OGM0YzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7rI+h38W2KNdOQr7QurgESb4kua
/zHO1cQnJwQk33b3THR8LiO9g1Hix8sWPJtR2KQcUNzgBZjr2LeAeGot5uezBxAw
jaxUlol1GPQXmiS7Og+Lr69gVbDoYm0cpcFpz7UTbMOusSxsSdi9dWj5bO0sA1co
uuk6I9ADFy2D5xA93WgAKNla8Lq/+ThhCJ5FB7F93Bpoos8F21IhaqQQtui0zZ1q
Aufwjrdf7nDxfdOW/6W1YkRrX71b22Q8/3SFFYItU2/+Ni9bnBuNdBalpcDhlW59
KYH414Btv2njIxFe0kW/68PfDcpnpPTZ4Vdp+haSNtqUoRD5SGKlNL8x+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBvqmk0dI+WxDrN7c6xxB5Q2jEwlMB8GA1UdIwQY
MBaAFBosp6WDskl8Nn6eht63nLenN1pHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2l5bnBZT3lTWHcyZnA2RzNyZWN0NmMzV2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jY2M4YzktY2MxMC00ZmY5LWFjYzAt
ODRjNjViMTkzNzU4LzEvRy1xYVRSMGo1YkVPczN0enJIRUhsRGFNVENVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9jY2M4YzktY2MxMC00ZmY5LWFjYzAtODRjNjViMTkzNzU4
LzEvR2l5bnBZT3lTWHcyZnA2RzNyZWN0NmMzV2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuT4IMA0G
CSqGSIb3DQEBCwUAA4IBAQC3nwe2ZM4DQhYS06Uh2ftBNjH2qJ3La4Gvan0qur07
DD7HT/a13DOJsCHYpGjir0P/ghdn9h76Ml9GnKBb4hOY20emg8bWqg9mxzV9qoEJ
w8R+gumoieCG6fiU8UknF8vqsDK4zXOZpsOqdlmSYVxANvcHv4VDtcKpuDFsuN1z
aymBSYnmIB6IQW2eVXyrD/xsfKR3+rz1SqPOUj4jkXccNu/9o48IzTuZjNHAQVec
5urdl89UkR/IgwmS2StUH6O0fm7czEkqAkvwv6OjCl+n7GfJzEUT8TZKcUdZfRmH
rhYVxxggo4fAU55I/QX2mTMd1QGm6VYwN0VmsGMwnC94
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:29 2024 by rpki-client on console-fra.rpki-client.org