Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/f_QrqTzwnGJjSO62ij6UWCf4Fj0.roa
File: f_QrqTzwnGJjSO62ij6UWCf4Fj0.roa (raw, json)
Hash identifier: u01Df4m7qFWoT/8rSNwLSsvaicqnVUD+MqlOXREzcL0=
Subject key identifier: 7F:F4:2B:A9:3C:F0:9C:62:63:48:EE:B6:8A:3E:94:58:27:F8:16:3D
Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial: 018570F08D2A8BA62C4848EA31147A44C953
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/f_QrqTzwnGJjSO62ij6UWCf4Fj0.roa
Signing time: Mon 02 Jan 2023 05:24:51 +0000
ROA not before: Mon 02 Jan 2023 05:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52129
IP address blocks: 185.132.181.0/24 maxlen: 24
185.132.180.0/22 maxlen: 22
185.132.182.0/24 maxlen: 24
185.132.183.0/24 maxlen: 24
185.132.180.0/24 maxlen: 24
2a0a:2b00:10::/44 maxlen: 44
2a0a:2b00::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:8d:2a:8b:a6:2c:48:48:ea:31:14:7a:44:c9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Validity
Not Before: Jan 2 05:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ff42ba93cf09c626348eeb68a3e945827f8163d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:6f:bc:88:59:85:6f:6f:ef:2d:e1:0c:4b:
b5:3d:04:c1:83:80:69:05:71:36:aa:09:1f:16:92:
eb:38:8c:49:14:6c:4e:a9:07:22:89:24:48:a1:ea:
43:5a:e3:d2:82:53:c6:de:87:b6:15:8c:07:b6:01:
4c:44:cc:80:28:4e:2c:79:2e:75:2b:ce:f8:06:07:
e5:c2:2b:c8:12:9d:20:f7:ca:c3:a3:07:11:71:b3:
c2:a9:13:15:ef:b5:3b:91:4c:8c:55:a5:13:6a:0e:
93:33:26:c0:30:5d:2f:32:2f:37:f4:79:c9:d0:93:
79:01:cc:66:a2:7e:ac:45:40:a4:da:c7:b8:ed:ac:
df:d1:7e:7b:54:22:97:30:3a:a4:f0:ff:4f:de:d1:
f7:8d:83:fe:32:c1:25:22:f1:d8:76:e6:5a:23:ab:
3b:ce:51:5d:36:e7:e2:cb:83:db:12:de:c4:ee:57:
91:76:bd:59:df:ee:d9:67:b6:fb:7e:6d:72:73:48:
12:b6:db:c2:1b:87:f6:2a:25:53:1c:27:c2:f8:88:
d6:46:3d:f2:65:63:33:f2:b4:48:f7:16:54:74:7f:
7a:a6:12:42:c1:1d:e4:01:e0:9a:39:e8:88:43:39:
49:7a:4d:1c:4b:ee:63:63:d2:61:c8:18:4b:72:63:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F4:2B:A9:3C:F0:9C:62:63:48:EE:B6:8A:3E:94:58:27:F8:16:3D
X509v3 Authority Key Identifier:
keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/f_QrqTzwnGJjSO62ij6UWCf4Fj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.180.0/22
IPv6:
2a0a:2b00::/43
Signature Algorithm: sha256WithRSAEncryption
4f:1a:f7:2b:dc:16:a5:12:8a:dd:19:3e:fd:23:f8:f8:ae:12:
93:81:24:90:2f:9e:3e:75:18:89:d4:19:d5:d6:6b:7a:4a:28:
f2:36:fa:03:9e:e5:58:88:31:10:a3:5a:43:70:c9:a2:db:3c:
e0:ca:da:f8:19:6e:c8:b2:8e:77:10:9b:ad:14:29:0b:3d:4b:
4e:b3:3a:27:08:81:47:68:1d:8e:9e:83:b4:29:48:45:fb:6f:
be:48:e8:85:bb:6a:c0:53:3e:95:1b:19:ea:da:0f:b0:7c:ea:
6d:0b:57:a4:1f:af:d3:1b:9d:5d:26:36:65:1c:02:24:bf:b8:
78:8c:32:2e:c8:92:31:04:d4:61:11:9f:d7:32:cb:9b:08:35:
13:41:99:4b:1e:22:91:1c:c0:00:24:c6:d6:8c:f4:fc:8d:7b:
df:00:ca:ae:6c:71:ce:38:0b:97:2b:76:26:a6:7f:bf:74:f8:
7e:ef:fa:8c:4c:b6:77:47:96:ba:0d:38:76:7b:3e:0d:08:eb:
ae:86:2a:70:79:57:19:fc:3f:1e:d1:d7:0d:e5:2d:60:6e:04:
d2:3c:26:1f:5e:8e:ed:f6:8f:aa:ac:fd:19:ac:0e:68:ec:b8:
66:7f:2b:ae:21:86:6f:6e:39:8b:cd:99:e0:76:8b:0c:c7:b6:
8c:8a:6b:d1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVw8I0qi6YsSEjqMRR6RMlTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYjhmZjJmM2EwYmZjNDFlYWRjMThhZjllNTJhY2QxMDA1
MjQxNDkwHhcNMjMwMTAyMDUyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmY0MmJhOTNjZjA5YzYyNjM0OGVlYjY4YTNlOTQ1ODI3ZjgxNjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfBvvIhZhW9v7y3hDEu1PQTBg4Bp
BXE2qgkfFpLrOIxJFGxOqQciiSRIoepDWuPSglPG3oe2FYwHtgFMRMyAKE4seS51
K874BgflwivIEp0g98rDowcRcbPCqRMV77U7kUyMVaUTag6TMybAMF0vMi839HnJ
0JN5Acxmon6sRUCk2se47azf0X57VCKXMDqk8P9P3tH3jYP+MsElIvHYduZaI6s7
zlFdNufiy4PbEt7E7leRdr1Z3+7ZZ7b7fm1yc0gSttvCG4f2KiVTHCfC+IjWRj3y
ZWMz8rRI9xZUdH96phJCwR3kAeCaOeiIQzlJek0cS+5jY9JhyBhLcmN+HQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH/0K6k88JxiY0jutoo+lFgn+BY9MB8GA1UdIwQY
MBaAFN+4/y86C/xB6twYr55SrNEAUkFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQt
YTNkZjNiNjljZTVhLzEvZl9RcnFUenduR0pqU082MmlqNlVXQ2Y0RmowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQtYTNkZjNiNjljZTVh
LzEvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuYS0MA8E
AgACMAkDBwUqCisAAAAwDQYJKoZIhvcNAQELBQADggEBAE8a9yvcFqUSit0ZPv0j
+PiuEpOBJJAvnj51GInUGdXWa3pKKPI2+gOe5ViIMRCjWkNwyaLbPODK2vgZbsiy
jncQm60UKQs9S06zOicIgUdoHY6eg7QpSEX7b75I6IW7asBTPpUbGeraD7B86m0L
V6Qfr9MbnV0mNmUcAiS/uHiMMi7IkjEE1GERn9cyy5sINRNBmUseIpEcwAAkxtaM
9PyNe98Ayq5scc44C5crdiamf790+H7v+oxMtndHlroNOHZ7Pg0I666GKnB5Vxn8
Px7R1w3lLWBuBNI8Jh9eju32j6qs/RmsDmjsuGZ/K64hhm9uOYvNmeB2iwzHtoyK
a9E=
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:42 2024 by rpki-client on console-ams.rpki-client.org