Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/q_nkl-rLEcHgW87DxQIBwbjmW7Y.roa
File: q_nkl-rLEcHgW87DxQIBwbjmW7Y.roa (raw, json)
Hash identifier: b4+ofhoRO5N+nTXAfsHfKqyzOvvSJGzmfejXoPWmJ+c=
Subject key identifier: AB:F9:E4:97:EA:CB:11:C1:E0:5B:CE:C3:C5:02:01:C1:B8:E6:5B:B6
Certificate issuer: /CN=913f4c9c6388f0a0342762009e324ec13271337e
Certificate serial: 0188137586E68A961420032F80DD8006571A
Authority key identifier: 91:3F:4C:9C:63:88:F0:A0:34:27:62:00:9E:32:4E:C1:32:71:33:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kT9MnGOI8KA0J2IAnjJOwTJxM34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/q_nkl-rLEcHgW87DxQIBwbjmW7Y.roa
Signing time: Sat 13 May 2023 04:54:09 +0000
ROA not before: Sat 13 May 2023 04:54:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.151.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:13:75:86:e6:8a:96:14:20:03:2f:80:dd:80:06:57:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913f4c9c6388f0a0342762009e324ec13271337e
Validity
Not Before: May 13 04:54:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abf9e497eacb11c1e05bcec3c50201c1b8e65bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:03:93:27:06:c4:45:3b:72:39:5c:c0:8f:57:
de:4e:41:96:a2:06:36:5b:95:20:fb:52:ec:8f:18:
97:df:33:1b:a6:cd:00:7d:42:a3:2b:02:6d:8c:da:
8a:51:9e:c4:a9:c5:88:25:01:c3:69:fe:4b:56:4e:
28:59:eb:d6:36:e6:06:ac:03:3e:2a:d5:9e:19:00:
ec:16:b2:5c:d7:e9:2d:07:3b:4e:59:58:e7:b4:de:
d1:8a:70:5e:9c:67:20:4c:7a:35:b9:bb:14:dc:dc:
81:32:ad:7a:6f:3c:10:8f:9f:7b:2f:4f:c1:47:29:
d1:39:70:4c:3b:07:00:fc:0c:09:4f:d2:42:fb:13:
f2:e4:9b:57:73:7c:9c:2d:ee:5a:d3:c7:63:06:21:
1a:d6:6a:10:f9:94:ff:a8:2c:f8:d7:25:59:68:c2:
72:3b:7c:af:d0:b7:3b:57:46:1e:ae:7b:34:72:18:
1f:44:46:bb:b0:4a:f2:18:f6:03:ee:cc:53:b8:a5:
5d:7a:b5:1e:60:c3:4d:c2:54:fb:ee:26:a8:d5:18:
3c:6b:76:df:d9:d0:9c:b6:b7:38:c4:d9:69:6b:71:
f7:6c:4e:27:25:e2:93:fa:b4:96:e3:20:96:7a:9e:
bb:05:f8:fb:7c:76:d1:13:ba:42:55:16:d5:8d:cb:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F9:E4:97:EA:CB:11:C1:E0:5B:CE:C3:C5:02:01:C1:B8:E6:5B:B6
X509v3 Authority Key Identifier:
keyid:91:3F:4C:9C:63:88:F0:A0:34:27:62:00:9E:32:4E:C1:32:71:33:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kT9MnGOI8KA0J2IAnjJOwTJxM34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/q_nkl-rLEcHgW87DxQIBwbjmW7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/kT9MnGOI8KA0J2IAnjJOwTJxM34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.144.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c1:a1:fd:a1:f2:37:d2:0e:ea:94:da:1a:b4:29:a0:8e:b2:
84:71:43:6d:d7:b5:88:12:c6:7d:ab:9c:30:d7:e1:98:55:2d:
66:b7:7e:8d:22:c3:40:b8:e2:ce:6e:97:a7:54:64:6e:46:ca:
be:e4:72:0a:47:91:f5:13:5b:6a:38:ac:cd:13:d6:7f:70:79:
8a:20:77:37:6a:73:d4:78:ce:61:3b:ee:6f:4f:d9:f5:10:25:
a8:90:b6:60:56:9f:cc:83:7d:92:7c:c0:fd:d0:fa:08:48:94:
d7:d1:2b:7b:57:72:db:e0:0a:be:7e:81:7c:bf:72:29:34:92:
9f:e4:42:8f:11:89:0b:85:9d:d1:ee:a6:87:a9:42:87:f5:0f:
37:bf:70:4b:f7:72:23:a2:57:d1:f4:5b:87:be:2e:fe:66:4a:
26:59:4f:7a:85:a7:23:f9:31:9c:7e:a2:4c:06:c9:de:88:00:
3c:b7:c2:f9:53:53:41:46:de:65:0e:a4:31:ca:9b:51:28:9f:
40:c0:e7:82:41:20:1c:b3:0c:9b:0d:61:d4:50:93:cf:2b:f7:
3d:e7:ea:a1:76:84:68:3a:bd:ab:6c:76:f8:e2:d2:e6:a2:8a:
50:27:53:a8:2c:5d:35:0f:a7:14:59:34:1d:01:e0:be:c6:fa:
f4:89:71:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgTdYbmipYUIAMvgN2ABlcaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxM2Y0YzljNjM4OGYwYTAzNDI3NjIwMDllMzI0ZWMxMzI3
MTMzN2UwHhcNMjMwNTEzMDQ1NDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmY5ZTQ5N2VhY2IxMWMxZTA1YmNlYzNjNTAyMDFjMWI4ZTY1YmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQOTJwbERTtyOVzAj1feTkGWogY2
W5Ug+1LsjxiX3zMbps0AfUKjKwJtjNqKUZ7EqcWIJQHDaf5LVk4oWevWNuYGrAM+
KtWeGQDsFrJc1+ktBztOWVjntN7RinBenGcgTHo1ubsU3NyBMq16bzwQj597L0/B
RynROXBMOwcA/AwJT9JC+xPy5JtXc3ycLe5a08djBiEa1moQ+ZT/qCz41yVZaMJy
O3yv0Lc7V0Yerns0chgfREa7sEryGPYD7sxTuKVderUeYMNNwlT77iao1Rg8a3bf
2dCctrc4xNlpa3H3bE4nJeKT+rSW4yCWep67Bfj7fHbRE7pCVRbVjcv1XQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKv55JfqyxHB4FvOw8UCAcG45lu2MB8GA1UdIwQY
MBaAFJE/TJxjiPCgNCdiAJ4yTsEycTN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1Q5TW5HT0k4S0EwSjJJQW5qSk93VEp4TTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xYzc0ODEtZTZhMC00YTFjLTg3ZTYt
NDAyNzQyM2FhMzhjLzEvcV9ua2wtckxFY0hnVzg3RHhRSUJ3YmptVzdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xYzc0ODEtZTZhMC00YTFjLTg3ZTYtNDAyNzQyM2FhMzhj
LzEva1Q5TW5HT0k4S0EwSjJJQW5qSk93VEp4TTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZeQMA0G
CSqGSIb3DQEBCwUAA4IBAQBZwaH9ofI30g7qlNoatCmgjrKEcUNt17WIEsZ9q5ww
1+GYVS1mt36NIsNAuOLObpenVGRuRsq+5HIKR5H1E1tqOKzNE9Z/cHmKIHc3anPU
eM5hO+5vT9n1ECWokLZgVp/Mg32SfMD90PoISJTX0St7V3Lb4Aq+foF8v3IpNJKf
5EKPEYkLhZ3R7qaHqUKH9Q83v3BL93IjolfR9FuHvi7+ZkomWU96hacj+TGcfqJM
BsneiAA8t8L5U1NBRt5lDqQxyptRKJ9AwOeCQSAcswybDWHUUJPPK/c95+qhdoRo
Or2rbHb44tLmoopQJ1OoLF01D6cUWTQdAeC+xvr0iXGK
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:43 2023 by rpki-client on console-ams.rpki-client.org