Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qKdv6Nk-qrRJKv7LUQfkpiVNliE.roa
File: qKdv6Nk-qrRJKv7LUQfkpiVNliE.roa (raw, json)
Hash identifier: StWh43GFAU6+Mstw+Ti352VLx6HrK2IjG/6lKLRe+h8=
Subject key identifier: A8:A7:6F:E8:D9:3E:AA:B4:49:2A:FE:CB:51:07:E4:A6:25:4D:96:21
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01863F27F6A086FA08A2144678E01A8A8E5D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qKdv6Nk-qrRJKv7LUQfkpiVNliE.roa
Signing time: Sat 11 Feb 2023 06:27:08 +0000
ROA not before: Sat 11 Feb 2023 06:27:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 178.239.203.0/24 maxlen: 24
193.42.52.0/24 maxlen: 24
185.103.74.0/24 maxlen: 24
185.103.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:27:f6:a0:86:fa:08:a2:14:46:78:e0:1a:8a:8e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 11 06:27:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8a76fe8d93eaab4492afecb5107e4a6254d9621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b4:5e:3f:c8:41:e3:09:5c:09:8e:dc:d3:8d:
58:5e:41:0f:be:aa:72:20:7e:28:9b:fe:3d:5b:1a:
6e:f4:be:e4:08:d0:12:b0:51:af:38:a2:ca:c3:36:
a5:3f:33:0e:d3:73:91:26:10:70:0d:39:11:2f:ef:
db:e4:d3:e1:95:6c:2c:ee:de:70:4b:93:51:da:50:
2f:c9:f8:bf:5d:e6:1d:ce:6d:db:74:31:b2:74:46:
4f:c3:84:94:37:1b:3a:44:a6:f8:3a:a9:5c:8e:74:
fe:6a:a3:bf:0c:81:69:5a:90:22:6a:80:cd:28:32:
74:ee:1a:36:48:3f:ef:57:11:55:9f:a0:92:14:61:
f0:8c:b9:ab:f6:bc:18:25:48:91:20:ee:b6:66:4d:
e7:ba:04:d2:24:03:df:ee:ca:69:56:b3:f1:40:af:
f3:b6:79:f5:54:da:17:b5:65:f6:f6:57:1c:31:6e:
70:31:7c:6a:7a:9e:5d:2b:52:86:33:55:60:a6:f4:
da:53:b3:95:93:c7:ec:72:b4:bd:8d:47:1b:a2:5e:
fa:66:6a:96:73:fb:95:67:8d:e0:60:93:42:46:be:
bc:b9:f0:a2:3e:b7:11:90:b2:be:3f:38:44:f4:67:
75:6f:ba:73:b8:5d:7a:ff:3c:88:9b:6b:ed:61:03:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A7:6F:E8:D9:3E:AA:B4:49:2A:FE:CB:51:07:E4:A6:25:4D:96:21
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qKdv6Nk-qrRJKv7LUQfkpiVNliE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.203.0/24
185.103.73.0-185.103.74.255
193.42.52.0/24
Signature Algorithm: sha256WithRSAEncryption
35:41:4f:e1:33:67:de:a0:b5:cf:f3:6f:5a:73:1f:32:93:06:
87:b5:e9:55:df:81:18:d8:53:9d:cd:a6:35:cc:a6:48:26:76:
20:13:e0:92:f5:b8:ec:08:6b:84:f3:de:5e:a2:4a:b0:9e:e9:
72:a1:2a:15:f9:96:d8:61:5c:12:7a:9d:d9:ec:d6:e4:68:f4:
61:e9:93:f0:c2:06:7d:23:a0:2e:6c:07:da:9d:57:87:20:a2:
f5:a6:69:4d:0d:ac:bf:54:9b:0d:1d:56:cc:3d:51:ce:8a:4c:
3b:ea:f1:87:e5:54:88:8e:f2:f0:ec:ce:a7:84:ba:18:f6:d5:
95:72:ef:7f:4e:58:7f:3e:a8:a2:d8:5c:9e:68:87:17:76:7d:
80:71:9b:32:8d:14:de:ca:c2:a3:06:ae:02:47:79:85:bd:48:
73:9e:8a:74:f2:34:16:6a:45:9b:b9:82:f9:6a:98:c9:11:84:
a1:b6:19:72:89:00:88:45:8a:b7:ab:a3:9a:e5:55:62:72:f8:
b4:ec:cc:ff:8f:eb:f7:75:70:68:d0:1e:ee:5a:d1:0f:1d:17:
07:18:d6:dd:13:d5:24:4a:da:fb:28:cb:e1:cd:61:af:45:32:
85:bb:0a:03:ad:82:df:8b:6b:ba:d9:df:e7:c4:47:a3:70:b5:
33:ec:ab:e5
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYY/J/aghvoIohRGeOAaio5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMjExMDYyNzA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGE3NmZlOGQ5M2VhYWI0NDkyYWZlY2I1MTA3ZTRhNjI1NGQ5NjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrReP8hB4wlcCY7c041YXkEPvqpy
IH4om/49Wxpu9L7kCNASsFGvOKLKwzalPzMO03ORJhBwDTkRL+/b5NPhlWws7t5w
S5NR2lAvyfi/XeYdzm3bdDGydEZPw4SUNxs6RKb4OqlcjnT+aqO/DIFpWpAiaoDN
KDJ07ho2SD/vVxFVn6CSFGHwjLmr9rwYJUiRIO62Zk3nugTSJAPf7sppVrPxQK/z
tnn1VNoXtWX29lccMW5wMXxqep5dK1KGM1VgpvTaU7OVk8fscrS9jUcbol76ZmqW
c/uVZ43gYJNCRr68ufCiPrcRkLK+PzhE9Gd1b7pzuF16/zyIm2vtYQPkyQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKinb+jZPqq0SSr+y1EH5KYlTZYhMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvcUtkdjZOay1xclJKS3Y3TFVRZmtwaVZObGlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAsu/LMAwD
BAC5Z0kDBAC5Z0oDBADBKjQwDQYJKoZIhvcNAQELBQADggEBADVBT+EzZ96gtc/z
b1pzHzKTBoe16VXfgRjYU53NpjXMpkgmdiAT4JL1uOwIa4Tz3l6iSrCe6XKhKhX5
lthhXBJ6ndns1uRo9GHpk/DCBn0joC5sB9qdV4cgovWmaU0NrL9Umw0dVsw9Uc6K
TDvq8YflVIiO8vDszqeEuhj21ZVy739OWH8+qKLYXJ5ohxd2fYBxmzKNFN7KwqMG
rgJHeYW9SHOeinTyNBZqRZu5gvlqmMkRhKG2GXKJAIhFirero5rlVWJy+LTszP+P
6/d1cGjQHu5a0Q8dFwcY1t0T1SRK2vsoy+HNYa9FMoW7CgOtgt+La7rZ3+fER6Nw
tTPsq+U=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org