Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gQCne98hEkB69yWSVyaPmySOrLs.roa
File: gQCne98hEkB69yWSVyaPmySOrLs.roa (raw, json)
Hash identifier: Mq9jbRSJGwyAqn6iYs3TQSOLvdH0/fpR8NAc4Dn2J9k=
Subject key identifier: 81:00:A7:7B:DF:21:12:40:7A:F7:25:92:57:26:8F:9B:24:8E:AC:BB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01891CBE736710AA202A57DE6F121617E2DC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gQCne98hEkB69yWSVyaPmySOrLs.roa
Signing time: Mon 03 Jul 2023 17:13:10 +0000
ROA not before: Mon 03 Jul 2023 17:13:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 185.210.235.0/24 maxlen: 24
185.240.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 10:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:be:73:67:10:aa:20:2a:57:de:6f:12:16:17:e2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 3 17:13:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8100a77bdf2112407af7259257268f9b248eacbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:00:d1:08:ce:c4:90:c7:f1:b0:e8:38:83:
96:1d:b7:38:b1:1e:e2:05:5f:f6:22:93:22:75:e7:
64:2d:a0:b9:8b:22:70:26:da:bd:7f:dc:7c:51:5a:
db:00:d5:01:03:14:9b:f6:5d:60:e7:08:8e:11:08:
61:71:06:a0:93:a6:c6:99:94:94:99:4a:47:34:7d:
29:ac:dd:9d:a6:6c:ab:b0:26:25:b1:83:9c:55:0b:
ed:21:39:a2:b4:95:a9:38:fb:4c:1c:cf:40:a8:c3:
0e:09:c1:9c:05:09:43:b0:88:ee:ae:17:62:00:05:
97:4a:51:6d:88:b5:0d:96:af:4d:29:44:4b:8d:dd:
74:89:e3:1a:61:3f:f8:e3:ac:21:95:60:ca:cc:f4:
77:3d:fe:f8:2d:6a:46:79:6a:cb:9c:ca:a1:f3:18:
5b:1d:eb:5e:71:05:f3:f4:9a:5a:17:a5:36:ee:7b:
da:f3:e3:53:75:60:bd:f9:3d:5d:bb:f2:f5:62:d1:
12:ad:6e:cf:e5:25:f8:e7:cb:26:35:74:4b:28:7e:
e2:f4:e7:40:31:ca:e0:b0:93:64:09:6a:9c:16:20:
61:ae:81:a1:29:27:50:ba:34:03:43:b1:97:80:4a:
35:05:57:da:60:81:61:d8:3b:3f:42:15:a6:ad:bd:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:00:A7:7B:DF:21:12:40:7A:F7:25:92:57:26:8F:9B:24:8E:AC:BB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gQCne98hEkB69yWSVyaPmySOrLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.235.0/24
185.240.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:49:9d:fc:12:03:52:32:c9:18:13:37:3f:cf:70:2d:ed:e9:
bb:5c:6f:8b:fc:5d:30:77:99:07:9a:7c:63:49:df:bc:f4:ab:
05:32:7d:34:f8:b0:23:0c:c0:9a:59:a4:3e:ea:bf:9f:65:f1:
97:0d:9e:6d:59:5d:f9:5f:e9:b9:ff:e8:7f:ea:4b:b3:26:40:
e0:67:1f:60:f3:03:3c:63:8f:23:32:c7:d1:5a:d9:8d:8f:af:
cc:ed:4f:a2:bb:fd:4b:67:bd:3a:14:68:29:83:40:70:e8:7f:
c2:95:ae:ac:41:38:d5:d8:eb:f5:1f:32:77:64:fb:31:9f:f8:
83:f6:46:7d:30:76:01:65:af:32:ed:a1:d8:24:1a:71:3b:5c:
54:5f:27:34:b2:ff:20:ec:7a:20:af:07:c9:0b:1e:4a:3d:74:
55:ce:88:7a:aa:27:d5:32:8d:57:56:f2:b0:17:6e:4b:2f:7d:
e4:a3:d3:05:4a:00:cb:74:5b:81:af:a6:58:51:9c:b5:90:de:
a8:ac:f9:ee:50:9f:f8:c1:f4:2d:50:ad:74:8e:44:c6:18:2c:
74:3a:6a:a2:f1:5a:00:d6:9e:6b:97:cd:7c:af:a0:29:1b:a6:
a1:7c:4c:b1:84:d9:e3:dc:4a:c5:8a:bc:8b:63:bb:ad:c7:af:
f4:27:ca:29
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkcvnNnEKogKlfebxIWF+LcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNzAzMTcxMzEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTAwYTc3YmRmMjExMjQwN2FmNzI1OTI1NzI2OGY5YjI0OGVhY2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki0A0QjOxJDH8bDoOIOWHbc4sR7i
BV/2IpMidedkLaC5iyJwJtq9f9x8UVrbANUBAxSb9l1g5wiOEQhhcQagk6bGmZSU
mUpHNH0prN2dpmyrsCYlsYOcVQvtITmitJWpOPtMHM9AqMMOCcGcBQlDsIjurhdi
AAWXSlFtiLUNlq9NKURLjd10ieMaYT/446whlWDKzPR3Pf74LWpGeWrLnMqh8xhb
HetecQXz9JpaF6U27nva8+NTdWC9+T1du/L1YtESrW7P5SX458smNXRLKH7i9OdA
McrgsJNkCWqcFiBhroGhKSdQujQDQ7GXgEo1BVfaYIFh2Ds/QhWmrb0R9QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIEAp3vfIRJAevclklcmj5skjqy7MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvZ1FDbmU5OGhFa0I2OXlXU1Z5YVBteVNPckxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudLrAwQA
ufB6MA0GCSqGSIb3DQEBCwUAA4IBAQCoSZ38EgNSMskYEzc/z3At7em7XG+L/F0w
d5kHmnxjSd+89KsFMn00+LAjDMCaWaQ+6r+fZfGXDZ5tWV35X+m5/+h/6kuzJkDg
Zx9g8wM8Y48jMsfRWtmNj6/M7U+iu/1LZ706FGgpg0Bw6H/Cla6sQTjV2Ov1HzJ3
ZPsxn/iD9kZ9MHYBZa8y7aHYJBpxO1xUXyc0sv8g7HogrwfJCx5KPXRVzoh6qifV
Mo1XVvKwF25LL33ko9MFSgDLdFuBr6ZYUZy1kN6orPnuUJ/4wfQtUK10jkTGGCx0
Omqi8VoA1p5rl818r6ApG6ahfEyxhNnj3ErFiryLY7utx6/0J8op
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org