Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/qIKdd1nrHfZs4Ng3ySwxCWE0hXk.roa
File: qIKdd1nrHfZs4Ng3ySwxCWE0hXk.roa (raw, json)
Hash identifier: bK8Z/wwG8tL2dJUfBURSbM8z3tEuTCa5gBH/Vi58BXk=
Subject key identifier: A8:82:9D:77:59:EB:1D:F6:6C:E0:D8:37:C9:2C:31:09:61:34:85:79
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 01866061580ADB56A7ECE58B981A374AC057
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/qIKdd1nrHfZs4Ng3ySwxCWE0hXk.roa
Signing time: Fri 17 Feb 2023 17:17:17 +0000
ROA not before: Fri 17 Feb 2023 17:17:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209500
IP address blocks: 83.229.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Feb 2023 15:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:60:61:58:0a:db:56:a7:ec:e5:8b:98:1a:37:4a:c0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Feb 17 17:17:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8829d7759eb1df66ce0d837c92c310961348579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a9:fc:8d:5b:44:56:4b:84:f2:08:fb:75:aa:
96:b4:7f:57:7e:f9:b7:10:28:ab:dd:ef:8f:a3:a3:
8d:33:4c:0b:76:34:15:db:fb:76:d5:a1:87:9b:3b:
89:87:e3:5c:87:d4:7b:67:09:70:da:da:26:aa:54:
8e:47:24:a0:38:bc:71:91:5d:c6:49:ab:ce:ac:47:
c5:64:4f:76:bb:75:13:ad:88:d2:02:81:4a:09:d8:
cb:c8:50:2e:2f:5d:ce:60:e6:ab:b3:6e:29:f8:7e:
06:78:60:39:9e:69:35:b0:d1:18:a3:98:51:d1:87:
d8:07:28:b3:2a:cb:a7:56:98:61:62:9c:bd:7a:da:
52:65:00:33:2c:ce:6e:f5:ab:4a:5c:be:57:3b:c0:
e9:3b:29:86:33:d7:bb:38:e4:29:0a:2a:55:9b:a9:
39:13:9d:87:00:c8:98:5e:16:4d:a6:1d:40:0d:42:
f7:2d:4d:e2:6a:eb:fb:48:9a:f5:95:79:e8:aa:c8:
bd:6a:d9:5a:e6:77:95:1c:52:36:17:2a:da:37:17:
a0:66:71:78:20:1b:02:9e:97:d7:83:59:9b:dd:3f:
54:c6:a1:4f:63:e4:bf:f2:db:bf:b6:0a:78:98:bd:
e8:16:31:9d:9e:2e:1a:35:0c:53:85:12:2b:24:51:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:82:9D:77:59:EB:1D:F6:6C:E0:D8:37:C9:2C:31:09:61:34:85:79
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/qIKdd1nrHfZs4Ng3ySwxCWE0hXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.62.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a9:43:0c:ae:b3:38:4a:22:c2:b2:e2:e0:30:2f:5e:6c:23:
38:fc:81:9f:53:56:9d:1a:54:c6:45:ab:f1:48:ae:07:f0:bc:
b4:1c:37:96:e3:40:dd:2b:f9:62:11:6e:33:81:af:c4:8e:f8:
69:1a:3d:cf:ff:24:47:a9:78:73:86:13:6a:69:ff:65:37:8f:
cd:8a:8b:06:a6:a4:46:8d:22:c8:77:0e:a6:5c:d0:5d:f2:1b:
54:19:2f:09:85:e0:8c:c4:59:33:39:1c:0e:25:ac:8c:c7:6c:
25:98:91:9d:80:dd:6b:96:b2:32:61:3c:93:57:be:08:45:f7:
2d:c7:99:7d:9d:ec:6c:da:8c:6e:74:64:40:37:55:03:9d:a5:
76:7b:97:d0:17:84:9c:ea:65:34:11:3f:a1:c9:ab:99:0f:37:
8d:cc:23:0d:f0:a9:8d:8f:9a:98:fb:bc:54:55:be:62:cb:f2:
be:17:2d:5c:6f:f0:24:2a:97:29:f3:a3:6b:23:e8:20:55:bc:
d0:b6:03:58:a6:ff:9a:b3:2b:b6:5a:db:a8:cd:1e:81:98:70:
47:e0:15:71:3a:86:05:43:fc:43:89:a6:e2:41:2e:46:3e:38:
7e:ac:1e:7d:87:bf:ca:17:fc:7d:2c:2c:bb:21:09:7d:19:c3:
bc:4f:05:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZgYVgK21an7OWLmBo3SsBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2
NWRhNDUwHhcNMjMwMjE3MTcxNzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODgyOWQ3NzU5ZWIxZGY2NmNlMGQ4MzdjOTJjMzEwOTYxMzQ4NTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhan8jVtEVkuE8gj7daqWtH9Xfvm3
ECir3e+Po6ONM0wLdjQV2/t21aGHmzuJh+Nch9R7Zwlw2tomqlSORySgOLxxkV3G
SavOrEfFZE92u3UTrYjSAoFKCdjLyFAuL13OYOars24p+H4GeGA5nmk1sNEYo5hR
0YfYByizKsunVphhYpy9etpSZQAzLM5u9atKXL5XO8DpOymGM9e7OOQpCipVm6k5
E52HAMiYXhZNph1ADUL3LU3iauv7SJr1lXnoqsi9atla5neVHFI2FyraNxegZnF4
IBsCnpfXg1mb3T9UxqFPY+S/8tu/tgp4mL3oFjGdni4aNQxThRIrJFGQmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKiCnXdZ6x32bODYN8ksMQlhNIV5MB8GA1UdIwQY
MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt
NTU1ZjNmMThlNTRmLzEvcUlLZGQxbnJIZlpzNE5nM3lTd3hDV0UwaFhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm
LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU+U+MA0G
CSqGSIb3DQEBCwUAA4IBAQCFqUMMrrM4SiLCsuLgMC9ebCM4/IGfU1adGlTGRavx
SK4H8Ly0HDeW40DdK/liEW4zga/EjvhpGj3P/yRHqXhzhhNqaf9lN4/NiosGpqRG
jSLIdw6mXNBd8htUGS8JheCMxFkzORwOJayMx2wlmJGdgN1rlrIyYTyTV74IRfct
x5l9nexs2oxudGRAN1UDnaV2e5fQF4Sc6mU0ET+hyauZDzeNzCMN8KmNj5qY+7xU
Vb5iy/K+Fy1cb/AkKpcp86NrI+ggVbzQtgNYpv+asyu2WtuozR6BmHBH4BVxOoYF
Q/xDiabiQS5GPjh+rB59h7/KF/x9LCy7IQl9GcO8TwWm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:24 2024 by rpki-client on console-ams.rpki-client.org