Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/qcGaSAg_yHs-pJmOPC-Fyq2W7BU.roa
File: qcGaSAg_yHs-pJmOPC-Fyq2W7BU.roa (raw, json)
Hash identifier: EI7rrVHUd//zkbbclXDdJkamZlr+W8WbgVjQkfvtGcs=
Subject key identifier: A9:C1:9A:48:08:3F:C8:7B:3E:A4:99:8E:3C:2F:85:CA:AD:96:EC:15
Certificate issuer: /CN=6676dff61a8305675977e86f52eee6745d6428f4
Certificate serial: 01856D93D43C3AB797FFE8D28976C56AD012
Authority key identifier: 66:76:DF:F6:1A:83:05:67:59:77:E8:6F:52:EE:E6:74:5D:64:28:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/qcGaSAg_yHs-pJmOPC-Fyq2W7BU.roa
Signing time: Sun 01 Jan 2023 13:44:42 +0000
ROA not before: Sun 01 Jan 2023 13:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199952
IP address blocks: 185.88.52.0/22 maxlen: 24
185.29.68.0/22 maxlen: 24
185.223.240.0/22 maxlen: 24
185.110.76.0/22 maxlen: 24
185.69.8.0/22 maxlen: 24
185.227.8.0/22 maxlen: 24
45.66.64.0/22 maxlen: 22
152.89.100.0/22 maxlen: 22
2a04:41c0::/29 maxlen: 56
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:d4:3c:3a:b7:97:ff:e8:d2:89:76:c5:6a:d0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6676dff61a8305675977e86f52eee6745d6428f4
Validity
Not Before: Jan 1 13:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9c19a48083fc87b3ea4998e3c2f85caad96ec15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:66:ac:c6:83:b1:1d:7f:20:e9:f8:5d:0a:
06:d0:0f:d6:0c:8f:63:8f:28:0d:a8:72:df:03:c6:
0c:67:0b:db:5e:37:41:e0:82:56:97:7c:2c:01:fe:
49:e2:34:d2:ce:80:ec:7e:ab:3d:b6:6c:0a:44:7c:
0d:84:c9:72:a6:80:49:52:0e:43:ed:18:8e:5b:62:
a2:bb:62:48:cd:f9:f6:20:8f:08:47:2c:17:bc:47:
f9:1f:9f:cd:62:7b:3e:3a:79:8d:a8:3e:c7:a1:03:
34:10:92:7c:ab:e8:5b:dd:b2:c5:8b:f3:18:6c:43:
39:a1:da:f2:d5:79:24:57:1d:37:b4:6b:f0:81:1e:
9c:b2:2b:d5:17:62:38:63:20:a8:59:f3:ea:8c:a5:
05:ec:9a:47:fa:2f:db:af:58:68:d7:16:01:2d:ec:
ad:97:77:a2:00:21:27:2b:6f:3d:c3:ea:34:26:a4:
1f:1f:ba:a5:7e:d2:7f:12:03:7c:1c:81:2c:6f:e9:
5d:97:09:0e:fa:5e:60:59:fd:95:e2:84:0c:d2:b5:
25:38:5a:50:9e:55:77:8f:f2:82:f8:d7:ef:87:b2:
41:de:72:08:8a:8a:31:97:15:0a:b4:e0:d0:6e:ba:
23:fe:c8:49:89:bf:5e:4f:05:0d:fe:0a:62:e6:fa:
ee:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C1:9A:48:08:3F:C8:7B:3E:A4:99:8E:3C:2F:85:CA:AD:96:EC:15
X509v3 Authority Key Identifier:
keyid:66:76:DF:F6:1A:83:05:67:59:77:E8:6F:52:EE:E6:74:5D:64:28:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/qcGaSAg_yHs-pJmOPC-Fyq2W7BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.64.0/22
152.89.100.0/22
185.29.68.0/22
185.69.8.0/22
185.88.52.0/22
185.110.76.0/22
185.223.240.0/22
185.227.8.0/22
IPv6:
2a04:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
07:9e:2b:cc:70:86:9a:df:bc:89:41:9f:6b:52:42:10:0f:f9:
a4:8b:e4:9b:7d:c8:fb:05:08:84:cc:e2:bb:bd:da:39:e1:95:
1f:d9:fb:da:89:0e:51:6b:36:ed:9c:35:f1:f0:b3:f1:50:6e:
fd:5d:37:04:e1:b9:aa:a9:04:e0:06:78:35:01:56:ae:5d:97:
35:ac:89:8c:d0:b7:50:2c:c7:c6:30:ef:50:e5:8d:d4:78:d6:
93:71:c6:d4:0f:94:ce:43:5c:c5:8a:af:66:5f:7d:e3:a4:b4:
b7:8d:ca:da:15:2b:13:13:fc:5b:8f:87:83:e0:00:92:d5:9f:
88:cb:95:7b:a0:6f:b9:33:40:6a:b0:5a:52:53:73:6a:e8:df:
9a:da:2e:6b:17:a3:eb:8e:b4:d1:16:9f:4a:6c:06:50:2b:64:
c0:94:ba:32:7b:ab:98:88:af:ce:cf:fd:24:33:4f:a7:56:2f:
11:25:81:05:13:54:27:32:d5:21:71:23:9d:86:64:32:ee:98:
e5:24:99:fa:8a:55:5f:5f:76:fa:44:ed:bf:e2:b9:60:08:1d:
43:4c:46:a6:58:80:90:85:53:71:95:04:db:ff:40:bc:a7:1e:
c6:74:4a:c2:9c:db:67:d3:1e:1c:1f:c1:64:7e:b3:26:91:3d:
d6:e4:36:d8
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAYVtk9Q8OreX/+jSiXbFatASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NzZkZmY2MWE4MzA1Njc1OTc3ZTg2ZjUyZWVlNjc0NWQ2
NDI4ZjQwHhcNMjMwMTAxMTM0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWMxOWE0ODA4M2ZjODdiM2VhNDk5OGUzYzJmODVjYWFkOTZlYzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzVmrMaDsR1/IOn4XQoG0A/WDI9j
jygNqHLfA8YMZwvbXjdB4IJWl3wsAf5J4jTSzoDsfqs9tmwKRHwNhMlypoBJUg5D
7RiOW2Kiu2JIzfn2II8IRywXvEf5H5/NYns+OnmNqD7HoQM0EJJ8q+hb3bLFi/MY
bEM5odry1XkkVx03tGvwgR6csivVF2I4YyCoWfPqjKUF7JpH+i/br1ho1xYBLeyt
l3eiACEnK289w+o0JqQfH7qlftJ/EgN8HIEsb+ldlwkO+l5gWf2V4oQM0rUlOFpQ
nlV3j/KC+Nfvh7JB3nIIiooxlxUKtODQbroj/shJib9eTwUN/gpi5vrumwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFKnBmkgIP8h7PqSZjjwvhcqtluwVMB8GA1UdIwQY
MBaAFGZ23/YagwVnWXfob1Lu5nRdZCj0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5iZjlocURCV2RaZC1odlV1N21kRjFrS1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82Y2IyM2UtN2M2NS00NmIzLTliNmQt
N2M2NjM1ZGE4OTJkLzEvcWNHYVNBZ195SHMtcEptT1BDLUZ5cTJXN0JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82Y2IyM2UtN2M2NS00NmIzLTliNmQtN2M2NjM1ZGE4OTJk
LzEvWm5iZjlocURCV2RaZC1odlV1N21kRjFrS1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCLUJAAwQC
mFlkAwQCuR1EAwQCuUUIAwQCuVg0AwQCuW5MAwQCud/wAwQCueMIMA0EAgACMAcD
BQMqBEHAMA0GCSqGSIb3DQEBCwUAA4IBAQAHnivMcIaa37yJQZ9rUkIQD/mki+Sb
fcj7BQiEzOK7vdo54ZUf2fvaiQ5RazbtnDXx8LPxUG79XTcE4bmqqQTgBng1AVau
XZc1rImM0LdQLMfGMO9Q5Y3UeNaTccbUD5TOQ1zFiq9mX33jpLS3jcraFSsTE/xb
j4eD4ACS1Z+Iy5V7oG+5M0BqsFpSU3Nq6N+a2i5rF6PrjrTRFp9KbAZQK2TAlLoy
e6uYiK/Oz/0kM0+nVi8RJYEFE1QnMtUhcSOdhmQy7pjlJJn6ilVfX3b6RO2/4rlg
CB1DTEamWICQhVNxlQTb/0C8px7GdErCnNtn0x4cH8FkfrMmkT3W5DbY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:50 2024 by rpki-client on console-fra.rpki-client.org