Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QWR35mvsZo4d5ADpA5My22drPwc.roa
File: QWR35mvsZo4d5ADpA5My22drPwc.roa (raw, json)
Hash identifier: GqBeceKk2/My1XBTJlrtMrO6fmGiNKFRKcrgjn5Lums=
Subject key identifier: 41:64:77:E6:6B:EC:66:8E:1D:E4:00:E9:03:93:32:DB:67:6B:3F:07
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CBEE305FB210CA5F282A602476490161F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QWR35mvsZo4d5ADpA5My22drPwc.roa
Signing time: Sun 31 Dec 2023 07:59:58 +0000
ROA not before: Sun 31 Dec 2023 07:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206501
IP address blocks: 185.108.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:be:e3:05:fb:21:0c:a5:f2:82:a6:02:47:64:90:16:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 31 07:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=416477e66bec668e1de400e9039332db676b3f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:42:d2:49:99:93:02:12:9e:2f:0a:3a:c3:99:
f1:f5:81:fd:ab:74:7e:c4:29:fc:0d:05:78:61:1f:
67:97:08:2b:90:86:8c:26:21:d9:f0:41:26:39:7b:
21:31:9a:ff:72:27:ba:bb:68:f4:56:aa:21:48:c9:
34:cf:56:dd:6e:1c:f5:76:69:f9:c8:69:b6:18:14:
0b:69:1f:00:f0:41:31:86:47:75:dd:6d:ed:10:e3:
09:99:58:82:56:8e:62:36:50:26:ad:b5:97:c0:2a:
b6:57:d9:52:95:6d:1e:df:95:35:03:63:ee:fb:bd:
bd:29:32:f9:ad:ab:a9:99:00:97:db:68:ba:21:77:
2f:ad:56:d0:61:ed:49:f7:cb:43:d3:92:35:be:ac:
33:08:d1:8b:c1:4e:2f:b1:a1:6d:2b:22:d5:23:3f:
1b:ba:7c:34:8a:da:c7:41:6c:d8:4a:eb:29:6c:fd:
c6:0a:d6:47:3d:e6:c9:95:76:1e:ec:6d:ac:ec:82:
56:36:a2:b5:1c:71:94:54:47:a2:d7:72:a3:aa:d5:
09:45:0f:7e:1d:e1:8b:61:83:b4:11:5e:ea:0b:b0:
6d:61:4d:3b:e4:d2:aa:11:28:4c:2d:54:21:db:62:
ab:bb:ca:86:db:e7:11:91:36:53:ea:71:0b:f7:94:
81:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:64:77:E6:6B:EC:66:8E:1D:E4:00:E9:03:93:32:DB:67:6B:3F:07
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QWR35mvsZo4d5ADpA5My22drPwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.205.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c3:02:dd:7b:d3:d5:e7:3a:bb:b5:27:47:23:43:a5:ec:cb:
05:63:57:cf:3f:f5:0b:d7:b0:11:30:80:c5:7c:23:73:08:29:
58:ea:eb:7f:46:de:f9:96:ad:b9:74:80:fb:0e:ca:b3:a2:f6:
c1:dc:55:72:6a:1d:24:36:93:b9:94:fb:85:e4:9e:8f:87:b7:
0a:38:5b:f8:95:c7:ce:c8:2b:d2:c8:42:7a:90:2d:a0:4f:36:
08:f7:82:2c:e9:91:55:78:71:bd:07:79:0f:08:a0:09:b2:ac:
5a:b5:c6:3f:9d:99:8a:c2:7b:ce:2e:fa:8c:60:2b:25:6a:14:
54:a6:48:63:48:30:85:03:f8:af:4a:17:61:76:ed:65:e0:ef:
44:4d:d8:ec:4a:a7:e8:52:56:7a:ac:bf:d4:7b:c1:23:b5:29:
34:d7:92:6d:af:d7:f7:aa:fa:fb:a2:31:32:94:da:14:5d:1d:
2d:6c:b0:0d:2c:06:a8:ae:44:9e:9c:70:37:8e:0f:84:8c:83:
28:61:b5:10:b0:e2:cf:72:40:00:40:e8:b6:4f:b6:17:a3:5b:
0e:a1:fa:d9:fc:12:97:05:5b:3a:2a:03:16:f5:41:e6:86:c9:
ec:9f:26:5a:2f:8f:9a:5e:cc:68:49:0a:6b:04:85:4b:d4:f0:
72:0b:4d:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYy+4wX7IQyl8oKmAkdkkBYfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMxMjMxMDc1OTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTY0NzdlNjZiZWM2NjhlMWRlNDAwZTkwMzkzMzJkYjY3NmIzZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0LSSZmTAhKeLwo6w5nx9YH9q3R+
xCn8DQV4YR9nlwgrkIaMJiHZ8EEmOXshMZr/cie6u2j0VqohSMk0z1bdbhz1dmn5
yGm2GBQLaR8A8EExhkd13W3tEOMJmViCVo5iNlAmrbWXwCq2V9lSlW0e35U1A2Pu
+729KTL5raupmQCX22i6IXcvrVbQYe1J98tD05I1vqwzCNGLwU4vsaFtKyLVIz8b
unw0itrHQWzYSuspbP3GCtZHPebJlXYe7G2s7IJWNqK1HHGUVEei13KjqtUJRQ9+
HeGLYYO0EV7qC7BtYU075NKqEShMLVQh22Kru8qG2+cRkTZT6nEL95SB1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEFkd+Zr7GaOHeQA6QOTMttnaz8HMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvUVdSMzVtdnNabzRkNUFEcEE1TXkyMmRyUHdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWzNMA0G
CSqGSIb3DQEBCwUAA4IBAQA6wwLde9PV5zq7tSdHI0Ol7MsFY1fPP/UL17ARMIDF
fCNzCClY6ut/Rt75lq25dID7DsqzovbB3FVyah0kNpO5lPuF5J6Ph7cKOFv4lcfO
yCvSyEJ6kC2gTzYI94Is6ZFVeHG9B3kPCKAJsqxatcY/nZmKwnvOLvqMYCslahRU
pkhjSDCFA/ivShdhdu1l4O9ETdjsSqfoUlZ6rL/Ue8EjtSk015Jtr9f3qvr7ojEy
lNoUXR0tbLANLAaorkSenHA3jg+EjIMoYbUQsOLPckAAQOi2T7YXo1sOofrZ/BKX
BVs6KgMW9UHmhsnsnyZaL4+aXsxoSQprBIVL1PByC02/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org