Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/qZgvR4KOh27X-y5DoXvFP4ebO0M.roa
File: qZgvR4KOh27X-y5DoXvFP4ebO0M.roa (raw, json)
Hash identifier: f23V/Ta8vJacc9BqHuujR+u23UqAgovrQ+MHhF+yRxQ=
Subject key identifier: A9:98:2F:47:82:8E:87:6E:D7:FB:2E:43:A1:7B:C5:3F:87:9B:3B:43
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 018EDD3477BC7B6C69FD59BD4715662E5AAE
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/qZgvR4KOh27X-y5DoXvFP4ebO0M.roa
Signing time: Sun 14 Apr 2024 15:23:06 +0000
ROA not before: Sun 14 Apr 2024 15:23:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59704
IP address blocks: 185.40.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 06:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:dd:34:77:bc:7b:6c:69:fd:59:bd:47:15:66:2e:5a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Apr 14 15:23:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9982f47828e876ed7fb2e43a17bc53f879b3b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:28:63:7c:40:ee:7b:35:e0:40:b1:e2:75:
f5:c8:d5:c0:6c:04:f0:4a:de:94:f0:cc:a8:a0:18:
c3:f9:35:2a:42:60:8f:2e:b7:83:1d:93:85:9f:da:
e3:5c:5f:a4:96:49:6c:e8:1d:cf:e9:fb:d9:73:9f:
91:2a:ea:e9:34:b2:00:c2:d3:f2:93:81:7a:f6:d9:
d0:9b:9e:8d:ac:b1:63:80:0e:88:03:74:a6:20:a6:
f1:7a:46:6e:7f:10:c9:e8:2b:3c:c7:e6:67:7e:e4:
2a:bb:84:5d:75:d1:83:e6:71:18:3b:33:8e:43:8b:
10:c4:66:82:1d:ad:e2:b4:c8:fb:89:52:54:d6:d8:
8c:25:0a:a6:ab:b2:2b:56:7c:92:c9:68:80:93:aa:
c8:07:02:9e:32:87:b5:03:3c:80:1b:97:a8:ed:82:
a8:ef:94:5a:45:de:c4:30:2c:1c:04:62:d8:07:45:
f4:31:06:c8:22:8e:47:2d:ac:43:25:25:ba:51:ac:
ad:9e:16:bd:d5:87:39:71:2d:43:b8:fc:92:bc:5d:
c3:c3:54:1c:80:2a:a9:71:f1:4f:69:82:a0:b5:95:
a1:9d:a9:74:a2:16:90:a2:58:45:24:f3:27:2e:70:
89:fa:55:a2:62:bc:11:9c:7e:51:d0:ac:aa:45:74:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:98:2F:47:82:8E:87:6E:D7:FB:2E:43:A1:7B:C5:3F:87:9B:3B:43
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/qZgvR4KOh27X-y5DoXvFP4ebO0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.32.0/24
Signature Algorithm: sha256WithRSAEncryption
80:83:ea:9e:74:98:5a:06:79:41:ce:2f:b5:c3:30:6d:52:5b:
42:ae:0f:85:a1:f0:da:2d:b0:4c:ad:34:0f:0e:26:90:60:a3:
12:0c:05:e1:6f:d3:53:52:53:fd:8b:bd:65:6c:ed:15:96:51:
28:07:54:5a:5f:26:aa:bf:41:6c:7a:30:41:40:f3:59:ea:38:
ee:62:d3:00:c5:77:18:cd:7d:52:7c:23:b2:fd:93:d8:01:5d:
84:de:1c:69:e9:ae:b4:11:7c:35:18:23:13:65:3c:90:cc:cb:
33:0e:c2:1c:d4:72:9e:b1:58:c3:c1:8c:5b:fd:62:e8:d6:d4:
60:34:f4:3e:cd:76:b2:35:a9:32:d8:2b:9b:06:ab:13:7f:77:
1a:0a:2a:fb:74:de:5a:31:fd:0f:7c:f9:ec:68:40:d8:64:4a:
fc:70:27:9a:39:af:6c:c1:35:f1:74:59:fe:90:65:68:57:53:
d1:b0:b1:67:c4:21:63:4c:1e:9d:cc:2f:94:dd:a1:6b:01:a2:
84:21:b3:76:94:c3:f2:05:cf:80:84:83:8e:cc:48:d6:bf:4f:
0a:7b:5b:b0:9d:62:0f:cb:ed:3b:e0:fb:e2:7e:5f:11:9f:da:
74:2e:0d:32:83:8b:13:39:10:88:dd:70:1f:c7:6b:8f:85:bc:
e9:6c:9b:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7dNHe8e2xp/Vm9RxVmLlquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYjMzMDk0MjI5OGY3NTgyM2NiYjk4MGM4ZWIyYWNmMGI3
YzBjMWIwHhcNMjQwNDE0MTUyMzA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTk4MmY0NzgyOGU4NzZlZDdmYjJlNDNhMTdiYzUzZjg3OWIzYjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/MoY3xA7ns14ECx4nX1yNXAbATw
St6U8MyooBjD+TUqQmCPLreDHZOFn9rjXF+klkls6B3P6fvZc5+RKurpNLIAwtPy
k4F69tnQm56NrLFjgA6IA3SmIKbxekZufxDJ6Cs8x+ZnfuQqu4RdddGD5nEYOzOO
Q4sQxGaCHa3itMj7iVJU1tiMJQqmq7IrVnySyWiAk6rIBwKeMoe1AzyAG5eo7YKo
75RaRd7EMCwcBGLYB0X0MQbIIo5HLaxDJSW6Uaytnha91Yc5cS1DuPySvF3Dw1Qc
gCqpcfFPaYKgtZWhnal0ohaQolhFJPMnLnCJ+lWiYrwRnH5R0KyqRXTv5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKmYL0eCjodu1/suQ6F7xT+HmztDMB8GA1UdIwQY
MBaAFCuzMJQimPdYI8u5gMjrKs8LfAwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYt
NmIzYTQ3NjY3Y2E4LzEvcVpndlI0S09oMjdYLXk1RG9YdkZQNGViTzBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYtNmIzYTQ3NjY3Y2E4
LzEvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSggMA0G
CSqGSIb3DQEBCwUAA4IBAQCAg+qedJhaBnlBzi+1wzBtUltCrg+FofDaLbBMrTQP
DiaQYKMSDAXhb9NTUlP9i71lbO0VllEoB1RaXyaqv0FsejBBQPNZ6jjuYtMAxXcY
zX1SfCOy/ZPYAV2E3hxp6a60EXw1GCMTZTyQzMszDsIc1HKesVjDwYxb/WLo1tRg
NPQ+zXayNaky2CubBqsTf3caCir7dN5aMf0PfPnsaEDYZEr8cCeaOa9swTXxdFn+
kGVoV1PRsLFnxCFjTB6dzC+U3aFrAaKEIbN2lMPyBc+AhIOOzEjWv08Ke1uwnWIP
y+074Pvifl8Rn9p0Lg0yg4sTORCI3XAfx2uPhbzpbJvv
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:04:47 2025 by rpki-client