Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/Q1uLzsznqIdPiWeUvlOJbEcyiR4.roa
File: Q1uLzsznqIdPiWeUvlOJbEcyiR4.roa (raw, json)
Hash identifier: 7Z2d5DBxiRERrh6VGAiLEBEH7QOCxqlowtcwCTdzE8k=
Subject key identifier: 43:5B:8B:CE:CC:E7:A8:87:4F:89:67:94:BE:53:89:6C:47:32:89:1E
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 0190926BC4CF55969705CE0385AF685F32B6
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/Q1uLzsznqIdPiWeUvlOJbEcyiR4.roa
Signing time: Mon 08 Jul 2024 12:57:34 +0000
ROA not before: Mon 08 Jul 2024 12:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39650
IP address blocks: 185.49.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 09:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:6b:c4:cf:55:96:97:05:ce:03:85:af:68:5f:32:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jul 8 12:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=435b8bcecce7a8874f896794be53896c4732891e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:59:09:e4:7e:a2:86:91:72:6b:88:dd:ac:
19:2f:10:f3:50:04:3c:b8:31:f5:d6:40:59:cb:89:
6a:18:fc:f7:5c:c2:40:84:c4:bf:75:9a:a0:4c:cf:
23:6b:3e:e9:e4:af:6f:ab:60:43:5f:36:d6:ac:e4:
35:6c:26:03:df:5d:f1:a7:2b:e8:54:b8:73:ca:62:
69:8b:e3:68:0e:03:54:6e:65:75:db:f4:00:d5:0b:
c5:f2:db:6b:be:eb:6c:22:9e:55:ea:e9:50:28:54:
df:e1:ed:29:39:79:ad:e0:07:a1:32:66:59:61:cc:
29:72:66:07:c9:ca:96:df:d8:a0:20:1b:f1:b4:3e:
e2:8c:f1:a5:00:03:01:18:aa:05:94:d2:9e:f4:e8:
49:1f:3f:69:8b:93:a4:26:32:92:70:8d:34:4b:c9:
6f:31:c9:13:c5:03:c4:46:22:55:7d:33:61:12:46:
ab:7f:16:32:3a:2e:64:23:a5:5d:44:cb:61:73:50:
55:12:cb:ae:1e:1b:b0:3b:d7:66:2e:cc:41:72:ca:
ba:70:ed:69:9b:4a:e8:f3:72:b3:da:42:55:ee:a7:
6e:8d:c2:e7:26:10:53:29:7d:28:f8:77:38:aa:2b:
25:ec:80:59:58:75:6a:b6:7e:b4:b9:d1:2a:9d:f1:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5B:8B:CE:CC:E7:A8:87:4F:89:67:94:BE:53:89:6C:47:32:89:1E
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/Q1uLzsznqIdPiWeUvlOJbEcyiR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:22:cc:9d:e5:a0:32:6e:db:80:a4:e7:e8:cb:e1:83:a7:8d:
53:d2:23:f0:bc:29:06:71:66:d8:15:26:cf:ab:9e:0d:3f:4b:
e2:f2:d4:05:93:07:c8:1d:0f:45:e2:7c:c0:ca:22:5f:10:89:
a1:17:1f:f0:bc:0d:1b:eb:89:d7:ae:df:61:a5:ca:ca:d3:94:
c9:33:1a:cb:27:3f:ea:2b:9e:0a:0e:75:f6:d2:38:c0:81:b6:
2e:64:96:72:f0:e4:0f:e1:05:af:55:b1:02:ed:41:d8:47:80:
4a:18:f9:1b:03:f7:7f:a4:42:98:e7:4d:2f:dc:75:b1:b8:e1:
24:ae:05:63:09:be:74:b2:a6:e0:1a:54:35:8d:4e:a3:4d:16:
a0:ca:44:57:b2:3f:1d:bb:38:ca:91:43:98:a4:b1:29:d5:9a:
a7:34:bb:83:b5:07:98:54:be:df:5f:77:c7:ce:d4:a7:99:29:
d1:ba:1d:b7:08:26:b9:10:90:82:28:79:68:9b:5c:61:b9:14:
e6:18:db:23:e1:3b:87:5b:4b:2e:bd:e0:b9:2d:3a:e2:38:bd:
96:ac:59:75:2d:95:20:91:e9:76:80:b1:67:00:07:1f:c7:f6:
a7:d5:9f:62:ef:22:6e:0e:d4:e6:13:1a:4a:26:18:a6:b6:34:
71:b5:6f:e9
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZCSa8TPVZaXBc4Dha9oXzK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw
MTljMjQwHhcNMjQwNzA4MTI1NzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzViOGJjZWNjZTdhODg3NGY4OTY3OTRiZTUzODk2YzQ3MzI4OTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyBZCeR+ooaRcmuI3awZLxDzUAQ8
uDH11kBZy4lqGPz3XMJAhMS/dZqgTM8jaz7p5K9vq2BDXzbWrOQ1bCYD313xpyvo
VLhzymJpi+NoDgNUbmV12/QA1QvF8ttrvutsIp5V6ulQKFTf4e0pOXmt4AehMmZZ
YcwpcmYHycqW39igIBvxtD7ijPGlAAMBGKoFlNKe9OhJHz9pi5OkJjKScI00S8lv
MckTxQPERiJVfTNhEkarfxYyOi5kI6VdRMthc1BVEsuuHhuwO9dmLsxBcsq6cO1p
m0ro83Kz2kJV7qdujcLnJhBTKX0o+Hc4qisl7IBZWHVqtn60udEqnfEp8wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFENbi87M56iHT4lnlL5TiWxHMokeMB8GA1UdIwQY
MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1
LWQyMTA3MWVmNzM1Yi8xL1ExdUx6c3pucUlkUGlXZVV2bE9KYkVjeWlSNC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1LWQyMTA3MWVmNzM1
Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5MWgw
DQYJKoZIhvcNAQELBQADggEBAF4izJ3loDJu24Ck5+jL4YOnjVPSI/C8KQZxZtgV
Js+rng0/S+Ly1AWTB8gdD0XifMDKIl8QiaEXH/C8DRvrideu32GlysrTlMkzGssn
P+orngoOdfbSOMCBti5klnLw5A/hBa9VsQLtQdhHgEoY+RsD93+kQpjnTS/cdbG4
4SSuBWMJvnSypuAaVDWNTqNNFqDKRFeyPx27OMqRQ5iksSnVmqc0u4O1B5hUvt9f
d8fO1KeZKdG6HbcIJrkQkIIoeWibXGG5FOYY2yPhO4dbSy694LktOuI4vZasWXUt
lSCR6XaAsWcABx/H9qfVn2LvIm4O1OYTGkomGKa2NHG1b+k=
-----END CERTIFICATE-----
Generated at Wed Jul 10 12:35:04 2024 by rpki-client on console-ams.rpki-client.org