Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/rqREECX522O4VjfzCNSqrxMvzVc.roa
File: rqREECX522O4VjfzCNSqrxMvzVc.roa (raw, json)
Hash identifier: /vYQUtIbiBGgd8HN5KXy7IHtRPckV+ItxXcwbH8QloM=
Subject key identifier: AE:A4:44:10:25:F9:DB:63:B8:56:37:F3:08:D4:AA:AF:13:2F:CD:57
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 01856C0A2EFE0BEDDA52D9CC05AD88409A69
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/rqREECX522O4VjfzCNSqrxMvzVc.roa
Signing time: Sun 01 Jan 2023 06:34:44 +0000
ROA not before: Sun 01 Jan 2023 06:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 185.167.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Mar 2023 04:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:2e:fe:0b:ed:da:52:d9:cc:05:ad:88:40:9a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Jan 1 06:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aea4441025f9db63b85637f308d4aaaf132fcd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:73:f1:aa:32:ff:ea:10:ce:d5:b8:90:da:0b:
e1:ac:b0:51:e9:23:f8:59:4e:45:e3:06:47:a3:11:
f7:9a:f6:f9:ee:13:44:b8:28:1f:3b:c4:03:a4:f1:
d8:f6:db:3a:85:49:1f:1a:6b:0b:c3:83:f9:cd:dd:
ce:7d:bf:17:8c:66:5b:ef:3b:5c:0c:56:b7:ac:7b:
ff:2d:28:32:37:88:00:c7:a6:79:4f:72:9f:68:72:
31:27:d6:c2:d9:7d:b1:17:a1:63:93:ce:a8:eb:71:
c9:db:76:3c:24:81:e1:fd:e1:8b:f6:a9:19:93:81:
b2:ce:91:9d:ac:9a:94:a5:2d:35:e2:fb:52:f6:f7:
fd:78:ed:3b:12:c7:50:e8:62:1b:05:07:5b:09:1b:
9e:80:b3:74:d9:7f:67:b4:21:64:c8:49:06:ff:d2:
1f:fd:e0:05:d9:ba:bb:c9:7b:ba:15:fd:a4:4f:c2:
94:ec:9d:62:f9:4a:12:6c:2c:94:3b:c6:3f:b3:2e:
81:d7:ae:74:78:73:1a:8d:71:38:74:31:85:df:51:
ed:8b:65:d3:5b:9e:82:1e:e8:6d:0e:9b:38:4d:ab:
8e:cb:2c:eb:65:9b:01:89:29:72:89:77:c2:24:9e:
b5:2a:8c:4d:2c:fd:e7:a3:90:62:dd:9a:96:56:ce:
a2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A4:44:10:25:F9:DB:63:B8:56:37:F3:08:D4:AA:AF:13:2F:CD:57
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/rqREECX522O4VjfzCNSqrxMvzVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.233.0/24
Signature Algorithm: sha256WithRSAEncryption
20:63:4a:3b:83:9b:8f:5f:d6:1d:f4:bd:fd:3f:ae:ad:af:43:
22:1a:1e:88:5c:61:c2:56:6e:2d:eb:cf:24:b1:a4:dc:c9:b0:
6d:dc:46:ea:e9:92:87:02:9e:b5:05:75:89:98:1c:c9:7a:2c:
ea:26:94:ed:13:bb:95:86:19:1c:66:a0:42:6e:56:0f:66:57:
86:e5:93:14:33:e7:cb:dd:7e:27:3e:ae:33:c1:0f:4d:a3:43:
fd:7a:9b:17:64:80:f5:99:09:1c:3f:45:58:10:55:e7:78:e3:
3b:68:b7:87:61:14:14:80:12:2a:85:3d:32:9a:ec:ce:40:1d:
18:cc:7f:f6:2e:1d:0a:e7:a8:93:20:49:97:0a:92:ed:4c:17:
be:ac:e5:2e:81:5b:de:d6:f1:80:f8:ef:74:d0:e1:82:42:9e:
9b:74:0a:65:c1:9f:e0:30:47:de:59:af:89:c3:0f:61:fb:29:
a8:37:fc:ed:4a:fb:08:00:49:ce:8b:d3:78:87:04:ff:90:1b:
14:74:df:c2:54:f0:79:fa:1f:1d:32:62:bc:3f:2e:6e:46:73:
37:63:70:c7:8f:c2:c2:c6:30:10:35:87:b6:bb:20:71:15:ae:
f7:89:c8:bf:21:02:56:45:8e:26:2f:53:54:f1:af:36:85:af:
55:41:36:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsCi7+C+3aUtnMBa2IQJppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx
MmJiNjAwHhcNMjMwMTAxMDYzNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWE0NDQxMDI1ZjlkYjYzYjg1NjM3ZjMwOGQ0YWFhZjEzMmZjZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXPxqjL/6hDO1biQ2gvhrLBR6SP4
WU5F4wZHoxH3mvb57hNEuCgfO8QDpPHY9ts6hUkfGmsLw4P5zd3Ofb8XjGZb7ztc
DFa3rHv/LSgyN4gAx6Z5T3KfaHIxJ9bC2X2xF6Fjk86o63HJ23Y8JIHh/eGL9qkZ
k4GyzpGdrJqUpS014vtS9vf9eO07EsdQ6GIbBQdbCRuegLN02X9ntCFkyEkG/9If
/eAF2bq7yXu6Ff2kT8KU7J1i+UoSbCyUO8Y/sy6B1650eHMajXE4dDGF31Hti2XT
W56CHuhtDps4TauOyyzrZZsBiSlyiXfCJJ61KoxNLP3no5Bi3ZqWVs6iZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK6kRBAl+dtjuFY38wjUqq8TL81XMB8GA1UdIwQY
MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt
OWNmODQzZjA1NjcwLzEvcnFSRUVDWDUyMk80VmpmekNOU3FyeE12elZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw
LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuafpMA0G
CSqGSIb3DQEBCwUAA4IBAQAgY0o7g5uPX9Yd9L39P66tr0MiGh6IXGHCVm4t688k
saTcybBt3Ebq6ZKHAp61BXWJmBzJeizqJpTtE7uVhhkcZqBCblYPZleG5ZMUM+fL
3X4nPq4zwQ9No0P9epsXZID1mQkcP0VYEFXneOM7aLeHYRQUgBIqhT0ymuzOQB0Y
zH/2Lh0K56iTIEmXCpLtTBe+rOUugVve1vGA+O900OGCQp6bdAplwZ/gMEfeWa+J
ww9h+ymoN/ztSvsIAEnOi9N4hwT/kBsUdN/CVPB5+h8dMmK8Py5uRnM3Y3DHj8LC
xjAQNYe2uyBxFa73ici/IQJWRY4mL1NU8a82ha9VQTYB
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:39 2024 by rpki-client on console-ams.rpki-client.org