Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qv2StUgmZQmFm54SZ-4s2Hq85SU.roa
File: qv2StUgmZQmFm54SZ-4s2Hq85SU.roa (raw, json)
Hash identifier: QfnSJtJYIA9OSh1RbGLSPj+dxI0mf3NMH3raPz+TbHI=
Subject key identifier: AA:FD:92:B5:48:26:65:09:85:9B:9E:12:67:EE:2C:D8:7A:BC:E5:25
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018820606C8238B2B9BE208DC92D738A284B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qv2StUgmZQmFm54SZ-4s2Hq85SU.roa
Signing time: Mon 15 May 2023 17:06:10 +0000
ROA not before: Mon 15 May 2023 17:06:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 185.223.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jul 2023 15:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:60:6c:82:38:b2:b9:be:20:8d:c9:2d:73:8a:28:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 15 17:06:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aafd92b548266509859b9e1267ee2cd87abce525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:91:77:27:0e:25:9e:71:86:5c:50:a6:a2:
e9:5f:7a:49:6b:46:7f:f7:ca:c1:47:66:72:75:46:
dd:ff:95:8f:cf:5d:0a:48:18:12:c5:64:8a:fc:d3:
8b:17:8b:d2:40:b4:23:23:01:fd:df:f5:9a:4c:07:
64:38:80:db:1e:d8:05:2f:3b:55:e9:00:30:2a:6e:
aa:38:dd:96:a1:14:a2:b3:fc:06:c5:e7:c7:f1:c1:
51:45:8b:b4:b8:52:7e:ef:64:57:4d:6e:f7:53:45:
e2:f7:f0:c9:8f:c0:74:1b:75:3f:a2:5d:b0:d0:89:
be:6a:09:d9:5d:20:a3:b7:02:3c:1f:4a:39:8d:c7:
cc:1c:36:58:da:6b:79:42:9b:ad:9e:42:cc:38:27:
c6:3d:13:d3:82:2a:04:2b:07:87:21:e6:80:9b:4e:
6c:63:07:e3:89:03:3a:24:7e:4c:a2:e7:01:e9:b8:
a5:e5:ba:cd:96:2d:77:42:31:c2:5d:7f:74:6d:16:
cd:d8:c0:aa:bd:56:e8:62:25:45:fd:ee:32:4e:34:
ad:c1:22:98:9f:11:0f:36:ff:60:eb:57:0d:39:a3:
f0:9b:ee:9d:18:8a:ba:9b:d0:3e:d6:24:2a:4f:6e:
3e:b7:82:d7:2c:cf:4a:6d:3e:06:e5:ae:0e:0d:16:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FD:92:B5:48:26:65:09:85:9B:9E:12:67:EE:2C:D8:7A:BC:E5:25
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qv2StUgmZQmFm54SZ-4s2Hq85SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.78.0/24
Signature Algorithm: sha256WithRSAEncryption
95:dd:38:47:13:c8:b0:3d:f0:86:8f:cc:8c:96:f2:e8:5f:c7:
f0:c9:b4:73:01:2c:bc:07:dc:28:30:12:fc:ad:6d:ce:3c:f2:
df:7d:a0:22:99:d1:7f:42:f5:49:41:42:06:ed:ff:8a:3d:f0:
19:ee:87:51:74:02:04:9c:6e:3f:6a:08:18:1a:0e:8f:b5:a1:
fa:81:94:79:70:04:24:37:f5:5c:ec:c5:d7:9e:39:30:81:51:
e9:23:1a:0f:81:87:ee:3f:ea:b1:65:8d:32:66:7c:dc:84:ab:
51:5f:f6:c1:8c:2a:2b:18:2c:bc:c0:fe:53:04:5f:f2:77:64:
49:54:0f:89:f5:54:a0:69:93:16:a3:e7:22:88:7e:b8:e7:e2:
0a:76:c9:0e:8b:d9:8a:cf:14:5b:65:6c:c0:0a:95:ba:38:a8:
1f:7c:10:6b:5f:49:f7:e4:e5:00:86:9d:0c:d1:88:7a:7c:d5:
25:5a:31:84:bf:1d:27:5c:48:fe:ea:1f:1a:0d:1a:79:44:b3:
be:75:93:2f:10:10:be:65:57:8c:42:04:40:cf:dd:fe:04:70:
84:12:be:cf:3a:0f:00:0c:14:32:8d:92:e1:23:60:9e:ec:de:
48:dc:fa:eb:13:82:72:24:ce:79:58:0c:b0:15:df:f3:37:3e:
7a:13:d9:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYggYGyCOLK5viCNyS1ziihLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNTE1MTcwNjEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWZkOTJiNTQ4MjY2NTA5ODU5YjllMTI2N2VlMmNkODdhYmNlNTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq+RdycOJZ5xhlxQpqLpX3pJa0Z/
98rBR2ZydUbd/5WPz10KSBgSxWSK/NOLF4vSQLQjIwH93/WaTAdkOIDbHtgFLztV
6QAwKm6qON2WoRSis/wGxefH8cFRRYu0uFJ+72RXTW73U0Xi9/DJj8B0G3U/ol2w
0Im+agnZXSCjtwI8H0o5jcfMHDZY2mt5QputnkLMOCfGPRPTgioEKweHIeaAm05s
YwfjiQM6JH5MoucB6bil5brNli13QjHCXX90bRbN2MCqvVboYiVF/e4yTjStwSKY
nxEPNv9g61cNOaPwm+6dGIq6m9A+1iQqT24+t4LXLM9KbT4G5a4ODRY/lQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKr9krVIJmUJhZueEmfuLNh6vOUlMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvcXYyU3RVZ21aUW1GbTU0U1otNHMySHE4NVNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud9OMA0G
CSqGSIb3DQEBCwUAA4IBAQCV3ThHE8iwPfCGj8yMlvLoX8fwybRzASy8B9woMBL8
rW3OPPLffaAimdF/QvVJQUIG7f+KPfAZ7odRdAIEnG4/aggYGg6PtaH6gZR5cAQk
N/Vc7MXXnjkwgVHpIxoPgYfuP+qxZY0yZnzchKtRX/bBjCorGCy8wP5TBF/yd2RJ
VA+J9VSgaZMWo+ciiH645+IKdskOi9mKzxRbZWzACpW6OKgffBBrX0n35OUAhp0M
0Yh6fNUlWjGEvx0nXEj+6h8aDRp5RLO+dZMvEBC+ZVeMQgRAz93+BHCEEr7POg8A
DBQyjZLhI2Ce7N5I3PrrE4JyJM55WAywFd/zNz56E9nH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org