Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/QJc7q7iYR67OXjeWFOQS4g30oA4.roa
File: QJc7q7iYR67OXjeWFOQS4g30oA4.roa (raw, json)
Hash identifier: +Myi5WFfzPJZUi3WMU098IRG3YuLEjbUskvAZN6JZXs=
Subject key identifier: 40:97:3B:AB:B8:98:47:AE:CE:5E:37:96:14:E4:12:E2:0D:F4:A0:0E
Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial: 01867D097505376939115CD294BDDEDF17DF
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/QJc7q7iYR67OXjeWFOQS4g30oA4.roa
Signing time: Thu 23 Feb 2023 06:50:17 +0000
ROA not before: Thu 23 Feb 2023 06:50:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34323
IP address blocks: 185.93.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:09:75:05:37:69:39:11:5c:d2:94:bd:de:df:17:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Validity
Not Before: Feb 23 06:50:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40973babb89847aece5e379614e412e20df4a00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:10:c4:63:10:c0:8d:1c:78:22:8d:92:36:
62:6b:4f:f1:24:b1:d2:54:35:bb:38:64:f9:9c:e1:
ea:c9:41:58:2e:e8:f8:af:14:79:9c:ab:e1:77:20:
b8:81:3d:76:fd:d4:b5:a5:91:cf:33:e0:2f:66:ca:
6a:db:5b:1b:f9:30:b8:1c:9b:9e:83:49:d4:c9:66:
f2:f8:ce:58:0a:87:c3:aa:03:31:7a:13:fa:69:82:
6d:a4:b8:8a:88:0e:ac:ff:9e:62:67:39:40:2d:a4:
cf:c1:a9:f3:a6:d3:e2:c5:97:c2:b6:4b:5c:26:c8:
4b:3a:1b:39:ec:15:0b:b9:fd:db:01:d1:20:95:14:
54:08:a3:a8:38:2b:fa:c0:09:f7:d4:11:96:8d:ec:
b8:e1:d0:cc:99:62:12:c0:0f:ea:62:b5:7b:e7:5d:
5c:c3:95:18:26:bc:54:ae:c8:95:7c:8b:33:5f:51:
fc:1e:8e:62:dd:17:60:83:db:10:63:c6:02:06:e9:
be:09:fe:d1:0e:e0:e2:f4:d4:f8:ae:c0:f3:fb:6a:
48:37:4d:cc:25:e2:7b:b6:1d:d7:8d:71:63:27:19:
02:11:07:6b:f5:9d:02:68:61:13:4f:98:30:e6:40:
1b:bc:23:84:34:a6:c9:73:3d:1b:84:20:cd:0d:2d:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:97:3B:AB:B8:98:47:AE:CE:5E:37:96:14:E4:12:E2:0D:F4:A0:0E
X509v3 Authority Key Identifier:
keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/QJc7q7iYR67OXjeWFOQS4g30oA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.187.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b1:0e:9f:e0:46:8b:88:6e:1d:d3:07:50:22:f6:a7:34:46:
5e:04:c3:71:d5:7d:38:ad:f6:fb:1a:9c:ea:cb:a1:e6:a5:b0:
35:6b:a2:df:3f:c0:95:c9:ee:a1:3b:0d:17:ee:91:8f:f6:a4:
e5:6e:cc:88:10:f6:3b:80:44:84:55:09:92:ff:6c:bc:52:82:
c0:3d:50:89:ba:47:84:dc:de:ee:b9:e8:6c:68:68:66:6f:98:
c5:8e:7e:92:df:81:93:32:f2:ae:04:92:06:98:83:54:0d:60:
f2:1f:c9:b0:aa:23:7b:a9:a6:7d:86:9c:d9:f7:20:a4:cd:c2:
f5:99:bc:46:85:cf:68:94:df:44:c6:4e:16:83:87:38:0c:d5:
dc:f6:f1:36:82:bf:68:04:3c:8f:92:b1:fd:81:e0:2e:4c:61:
3a:a4:9b:54:15:dc:75:f5:48:10:81:1c:c7:ed:18:4e:a1:fb:
b2:75:98:f3:48:52:02:0f:08:18:29:42:aa:cd:05:61:17:44:
5d:0a:bb:82:1b:6e:16:9e:47:8f:98:23:19:f9:20:ca:8a:7a:
05:cc:7a:8f:03:b0:58:49:ca:52:3f:7e:ec:9e:f0:9e:44:2e:
22:50:74:11:53:7d:4f:42:6f:8a:20:3c:58:78:0c:da:a3:ec:
31:2f:c8:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ9CXUFN2k5EVzSlL3e3xffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOWFjNmZlMjAzMWFkZGUwMzY2ODI0MGUzYzVkOTFlYzY3
MTFlMWUwHhcNMjMwMjIzMDY1MDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDk3M2JhYmI4OTg0N2FlY2U1ZTM3OTYxNGU0MTJlMjBkZjRhMDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnAQxGMQwI0ceCKNkjZia0/xJLHS
VDW7OGT5nOHqyUFYLuj4rxR5nKvhdyC4gT12/dS1pZHPM+AvZspq21sb+TC4HJue
g0nUyWby+M5YCofDqgMxehP6aYJtpLiKiA6s/55iZzlALaTPwanzptPixZfCtktc
JshLOhs57BULuf3bAdEglRRUCKOoOCv6wAn31BGWjey44dDMmWISwA/qYrV7511c
w5UYJrxUrsiVfIszX1H8Ho5i3Rdgg9sQY8YCBum+Cf7RDuDi9NT4rsDz+2pIN03M
JeJ7th3XjXFjJxkCEQdr9Z0CaGETT5gw5kAbvCOENKbJcz0bhCDNDS0NGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFECXO6u4mEeuzl43lhTkEuIN9KAOMB8GA1UdIwQY
MBaAFE+axv4gMa3eA2aCQOPF2R7GcR4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTct
NTI4YTYzYmU0Yzg3LzEvUUpjN3E3aVlSNjdPWGplV0ZPUVM0ZzMwb0E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTctNTI4YTYzYmU0Yzg3
LzEvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV27MA0G
CSqGSIb3DQEBCwUAA4IBAQAusQ6f4EaLiG4d0wdQIvanNEZeBMNx1X04rfb7Gpzq
y6HmpbA1a6LfP8CVye6hOw0X7pGP9qTlbsyIEPY7gESEVQmS/2y8UoLAPVCJukeE
3N7uuehsaGhmb5jFjn6S34GTMvKuBJIGmINUDWDyH8mwqiN7qaZ9hpzZ9yCkzcL1
mbxGhc9olN9Exk4Wg4c4DNXc9vE2gr9oBDyPkrH9geAuTGE6pJtUFdx19UgQgRzH
7RhOofuydZjzSFICDwgYKUKqzQVhF0RdCruCG24WnkePmCMZ+SDKinoFzHqPA7BY
ScpSP37snvCeRC4iUHQRU31PQm+KIDxYeAzao+wxL8jQ
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:07 2024 by rpki-client on console-ams.rpki-client.org