Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/IQwTDw4Ex1RDfJuTdZAqXtKv8JA.roa
File: IQwTDw4Ex1RDfJuTdZAqXtKv8JA.roa (raw, json)
Hash identifier: ubRmbqAqrcZ7TsHIyACM9cXabCoFFRAi8pObTeqvdsw=
Subject key identifier: 21:0C:13:0F:0E:04:C7:54:43:7C:9B:93:75:90:2A:5E:D2:AF:F0:90
Certificate issuer: /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
Certificate serial: 018A79B57EF455B91724601D2389A4C75165
Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/IQwTDw4Ex1RDfJuTdZAqXtKv8JA.roa
Signing time: Sat 09 Sep 2023 11:30:52 +0000
ROA not before: Sat 09 Sep 2023 11:30:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.245.124.0/24 maxlen: 24
185.245.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 10 Sep 2023 09:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:79:b5:7e:f4:55:b9:17:24:60:1d:23:89:a4:c7:51:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
Validity
Not Before: Sep 9 11:30:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=210c130f0e04c754437c9b9375902a5ed2aff090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:68:53:5b:8e:ab:91:97:55:f8:1e:4a:47:
f6:43:96:ba:8f:77:ee:03:7c:56:0a:73:e3:08:84:
c2:7c:eb:0e:3e:a3:84:13:26:dc:86:85:28:c9:a6:
24:b1:1c:5c:be:66:eb:4d:c6:ce:0d:3f:33:d4:64:
d7:1d:e3:5d:38:37:7e:7f:58:05:c8:92:1d:45:d4:
d2:8f:de:96:2e:69:d6:fb:0b:a2:22:15:a4:06:f4:
54:c6:03:23:5f:da:9c:b6:27:d7:67:b9:f1:19:5d:
a1:1a:50:12:f8:da:c9:f8:ca:c8:9a:80:0c:34:82:
7e:8b:c2:0c:31:58:1a:ba:54:c1:6c:87:f5:d2:0b:
89:e6:a3:fd:48:41:60:de:7d:73:8e:c2:15:4b:57:
82:7a:02:a5:bc:2d:f6:4d:ae:d1:46:e4:92:e3:18:
24:f3:6e:40:c1:21:28:b4:b9:34:34:7c:b9:37:4c:
1c:62:45:2c:38:46:14:fc:ba:5f:95:a8:15:07:5e:
4d:95:bf:8b:98:ac:2d:a5:ed:d8:4f:e1:09:18:86:
1c:29:89:24:0e:8a:22:6f:47:fc:a9:49:a7:a8:ad:
d9:5a:66:9a:00:a3:41:82:24:a5:0b:37:89:9c:ed:
2e:73:28:fc:b4:9a:76:c3:83:84:a0:cd:d5:d9:de:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0C:13:0F:0E:04:C7:54:43:7C:9B:93:75:90:2A:5E:D2:AF:F0:90
X509v3 Authority Key Identifier:
keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/IQwTDw4Ex1RDfJuTdZAqXtKv8JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.124.0/22
Signature Algorithm: sha256WithRSAEncryption
28:e5:ef:fc:1a:a4:54:f4:29:25:35:bc:24:a6:fe:52:d9:c1:
a9:85:94:c9:de:b3:c0:9c:c6:95:46:70:b1:f4:c4:79:65:e3:
d6:38:77:44:11:38:5f:5b:42:a7:b2:84:7c:90:91:ed:04:e5:
8b:c6:c4:bb:26:33:75:1e:ec:89:a8:4b:e1:39:8c:ec:26:8e:
b0:c5:71:be:d3:80:00:95:bd:3e:c6:59:b4:39:92:55:73:b8:
14:f8:f2:98:55:d6:b6:22:21:86:14:e8:6d:47:9f:2c:ea:0b:
23:1b:4e:c3:9a:76:ac:b3:5a:f7:2a:a1:60:bc:95:bb:b5:7e:
db:62:ab:21:6e:b8:ea:56:b9:50:9f:52:90:1b:ba:13:36:d6:
9e:ca:7e:75:4d:19:45:0c:4d:ee:44:e8:39:b3:a0:bf:70:4c:
9c:ed:4c:4b:58:21:72:12:88:3b:e6:f5:aa:f7:0b:09:fa:08:
4d:57:bf:90:05:c7:e6:79:68:fb:b1:cc:21:b9:12:f8:b0:05:
42:06:d7:8f:87:ea:9e:ef:87:bc:30:b4:a5:70:92:9d:d2:fc:
16:ab:67:c0:0b:19:b1:51:20:1e:f7:4b:46:ba:9e:21:fa:74:
78:57:fd:6a:7e:06:0e:1f:8c:a0:1b:34:85:f4:9f:30:25:79:
74:10:2b:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYp5tX70VbkXJGAdI4mkx1FlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZTU3Y2MzZGIxODQwNDcwYzczYTA5NjA1ZDE4N2Q3YmQ5
NTk1Y2IwHhcNMjMwOTA5MTEzMDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTBjMTMwZjBlMDRjNzU0NDM3YzliOTM3NTkwMmE1ZWQyYWZmMDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAVoU1uOq5GXVfgeSkf2Q5a6j3fu
A3xWCnPjCITCfOsOPqOEEybchoUoyaYksRxcvmbrTcbODT8z1GTXHeNdODd+f1gF
yJIdRdTSj96WLmnW+wuiIhWkBvRUxgMjX9qctifXZ7nxGV2hGlAS+NrJ+MrImoAM
NIJ+i8IMMVgaulTBbIf10guJ5qP9SEFg3n1zjsIVS1eCegKlvC32Ta7RRuSS4xgk
825AwSEotLk0NHy5N0wcYkUsOEYU/LpflagVB15Nlb+LmKwtpe3YT+EJGIYcKYkk
Dooib0f8qUmnqK3ZWmaaAKNBgiSlCzeJnO0ucyj8tJp2w4OEoM3V2d4EDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCEMEw8OBMdUQ3ybk3WQKl7Sr/CQMB8GA1UdIwQY
MBaAFL/lfMPbGEBHDHOglgXRh9e9lZXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xN2I3OTctMmU2Ni00MGRmLTg2OGEt
MGEyNzVhNjc2M2NlLzEvSVF3VER3NEV4MVJEZkp1VGRaQXFYdEt2OEpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xN2I3OTctMmU2Ni00MGRmLTg2OGEtMGEyNzVhNjc2M2Nl
LzEvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufV8MA0G
CSqGSIb3DQEBCwUAA4IBAQAo5e/8GqRU9CklNbwkpv5S2cGphZTJ3rPAnMaVRnCx
9MR5ZePWOHdEEThfW0KnsoR8kJHtBOWLxsS7JjN1HuyJqEvhOYzsJo6wxXG+04AA
lb0+xlm0OZJVc7gU+PKYVda2IiGGFOhtR58s6gsjG07Dmnass1r3KqFgvJW7tX7b
YqshbrjqVrlQn1KQG7oTNtaeyn51TRlFDE3uROg5s6C/cEyc7UxLWCFyEog75vWq
9wsJ+ghNV7+QBcfmeWj7scwhuRL4sAVCBtePh+qe74e8MLSlcJKd0vwWq2fACxmx
USAe90tGup4h+nR4V/1qfgYOH4ygGzSF9J8wJXl0ECtl
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:42 2024 by rpki-client on console-ams.rpki-client.org