Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/qWQ_q8LF7lYHNoipT-iO1tV8j6Q.roa
File: qWQ_q8LF7lYHNoipT-iO1tV8j6Q.roa (raw, json)
Hash identifier: GuYTDYsAasTNnzvnVbrW8uv+Q9FsEGSSGl62EB6Smes=
Subject key identifier: A9:64:3F:AB:C2:C5:EE:56:07:36:88:A9:4F:E8:8E:D6:D5:7C:8F:A4
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 018CC3B6ADF60010399CB15FF5AA76985083
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/qWQ_q8LF7lYHNoipT-iO1tV8j6Q.roa
Signing time: Mon 01 Jan 2024 06:29:38 +0000
ROA not before: Mon 01 Jan 2024 06:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32931
IP address blocks: 185.183.244.0/22 maxlen: 24
2a0b:2280::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 May 2024 11:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ad:f6:00:10:39:9c:b1:5f:f5:aa:76:98:50:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Jan 1 06:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9643fabc2c5ee56073688a94fe88ed6d57c8fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:80:b8:4a:ae:c5:41:7d:48:d4:09:85:c1:13:
f5:3e:d7:a4:0d:70:31:f2:6a:f5:c5:78:fe:c0:3f:
ff:5d:cf:85:f6:09:34:d6:7d:85:37:fd:7c:ca:44:
8c:bb:07:30:3c:28:e7:a1:ff:a5:e8:c6:08:e8:c2:
d1:ae:27:bd:34:c8:10:5a:ea:d0:f3:d3:e8:0d:e8:
b9:13:5d:6b:15:4e:ff:80:ab:97:bc:48:5f:ac:03:
bf:56:c3:c2:02:62:19:de:c6:b7:be:d5:ae:be:7d:
31:da:42:d3:01:f7:79:2d:45:bb:78:74:14:d5:d0:
87:f4:c2:9a:db:36:0e:13:88:69:11:5d:5b:2c:75:
9d:22:bf:97:63:e5:98:90:0e:86:fd:fd:53:3d:49:
3a:3e:1b:78:11:55:ad:ac:29:9f:be:b1:8d:c8:46:
b7:c9:5f:10:b3:fd:42:f5:aa:f4:21:5d:ff:94:49:
ee:72:59:9e:bc:f4:b4:dd:33:ba:d6:73:a1:7c:a0:
98:05:8c:3b:79:1e:87:36:e9:76:15:11:d4:ff:ca:
3f:d1:f1:62:95:7d:0f:c5:e0:86:8b:e6:3f:c9:d8:
e9:0c:a6:98:04:98:45:32:19:6e:14:46:db:d1:03:
0e:cf:b5:ac:8b:e5:8e:d7:7c:b2:a7:04:f5:e3:c1:
19:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:64:3F:AB:C2:C5:EE:56:07:36:88:A9:4F:E8:8E:D6:D5:7C:8F:A4
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/qWQ_q8LF7lYHNoipT-iO1tV8j6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.244.0/22
IPv6:
2a0b:2280::/29
Signature Algorithm: sha256WithRSAEncryption
89:37:cc:f8:1d:36:18:c0:6f:5b:71:3e:be:3d:fa:90:ea:01:
08:61:b5:6b:d4:be:dc:53:fe:15:c8:e4:e0:ea:b0:d0:f0:44:
0f:e5:54:d3:5c:4a:e8:6f:8d:f8:4b:d2:8c:10:76:86:3f:ca:
f5:02:42:da:ca:13:10:97:a7:0b:4f:f2:ee:94:ba:a4:67:28:
b3:75:67:e5:f7:a3:90:d1:9b:4f:cf:5b:be:85:3b:7d:63:2e:
3a:15:c0:26:d6:71:3e:86:48:a9:72:32:9c:5b:c7:fb:e6:9b:
76:df:4b:fd:b5:66:7a:4e:0f:b9:08:f7:7b:65:3d:a1:ba:00:
94:c7:f4:69:48:9e:95:46:0d:46:27:2e:dc:a2:9f:9e:01:d0:
33:93:64:01:6c:19:8a:6a:5e:21:82:70:cb:c3:f9:eb:4c:cf:
ca:06:53:cd:e7:8e:59:dc:35:b3:90:33:0b:a3:c6:fd:cd:cb:
52:41:25:6f:9f:c2:0a:1a:b6:f4:1d:57:3e:4b:fb:78:46:8f:
70:2c:51:cf:25:b5:e0:0d:c7:27:d2:4d:8e:dc:36:7c:ff:23:
ec:16:69:94:58:1d:5e:10:c3:91:8b:cc:dd:6c:29:d4:37:d8:
36:52:7f:f9:e0:1f:0c:db:2e:3c:f5:31:c2:43:66:26:e4:08:
7f:54:70:4d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzDtq32ABA5nLFf9ap2mFCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiM2E3MzVkMDlhYWE3OTcwZGVmMTJjNGFjNjBlODI3ZmRi
M2Y4MjUwHhcNMjQwMTAxMDYyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTY0M2ZhYmMyYzVlZTU2MDczNjg4YTk0ZmU4OGVkNmQ1N2M4ZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIC4Sq7FQX1I1AmFwRP1PtekDXAx
8mr1xXj+wD//Xc+F9gk01n2FN/18ykSMuwcwPCjnof+l6MYI6MLRrie9NMgQWurQ
89PoDei5E11rFU7/gKuXvEhfrAO/VsPCAmIZ3sa3vtWuvn0x2kLTAfd5LUW7eHQU
1dCH9MKa2zYOE4hpEV1bLHWdIr+XY+WYkA6G/f1TPUk6Pht4EVWtrCmfvrGNyEa3
yV8Qs/1C9ar0IV3/lEnuclmevPS03TO61nOhfKCYBYw7eR6HNul2FRHU/8o/0fFi
lX0PxeCGi+Y/ydjpDKaYBJhFMhluFEbb0QMOz7Wsi+WO13yypwT148EZkQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKlkP6vCxe5WBzaIqU/ojtbVfI+kMB8GA1UdIwQY
MBaAFGs6c10JqqeXDe8SxKxg6Cf9s/glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAt
MDUxMDc2NzQ0YTY1LzEvcVdRX3E4TEY3bFlITm9pcFQtaU8xdFY4ajZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAtMDUxMDc2NzQ0YTY1
LzEvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubf0MA0E
AgACMAcDBQMqCyKAMA0GCSqGSIb3DQEBCwUAA4IBAQCJN8z4HTYYwG9bcT6+PfqQ
6gEIYbVr1L7cU/4VyOTg6rDQ8EQP5VTTXErob434S9KMEHaGP8r1AkLayhMQl6cL
T/LulLqkZyizdWfl96OQ0ZtPz1u+hTt9Yy46FcAm1nE+hkipcjKcW8f75pt230v9
tWZ6Tg+5CPd7ZT2hugCUx/RpSJ6VRg1GJy7cop+eAdAzk2QBbBmKal4hgnDLw/nr
TM/KBlPN545Z3DWzkDMLo8b9zctSQSVvn8IKGrb0HVc+S/t4Ro9wLFHPJbXgDccn
0k2O3DZ8/yPsFmmUWB1eEMORi8zdbCnUN9g2Un/54B8M2y489THCQ2Ym5Ah/VHBN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:15 2024 by rpki-client on console-fra.rpki-client.org