Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/qga0BSj3g9aRjQ9T-OO0gQa5nhM.roa
File: qga0BSj3g9aRjQ9T-OO0gQa5nhM.roa (raw, json)
Hash identifier: 534MCidLbHKuNEv3WHOWWsMUJZsDO+d6KCjvjQYSXmo=
Subject key identifier: AA:06:B4:05:28:F7:83:D6:91:8D:0F:53:F8:E3:B4:81:06:B9:9E:13
Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial: 018CCA2A23C745C9A511A602C42E2FF318BF
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/qga0BSj3g9aRjQ9T-OO0gQa5nhM.roa
Signing time: Tue 02 Jan 2024 12:33:28 +0000
ROA not before: Tue 02 Jan 2024 12:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202675
IP address blocks: 185.221.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:23:c7:45:c9:a5:11:a6:02:c4:2e:2f:f3:18:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Validity
Not Before: Jan 2 12:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa06b40528f783d6918d0f53f8e3b48106b99e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:f6:1a:40:b4:88:fd:46:32:bc:ef:f6:75:
c8:82:7f:df:5f:d2:4d:2f:5f:0e:ab:aa:2a:0a:38:
5b:f1:00:ca:49:d4:3c:13:d5:e1:3a:ca:00:65:1e:
91:5e:ca:ac:ac:4f:c5:ae:b4:ec:2b:78:3c:57:98:
22:02:de:04:e9:a5:50:a9:15:a0:55:dc:ac:e3:f5:
5d:77:10:51:da:f7:04:7b:80:ca:ff:75:6a:5e:3d:
35:3d:a2:fa:26:c3:25:41:5a:e0:45:9f:49:b4:50:
25:4b:02:80:40:3a:11:13:4a:02:7d:18:89:4e:3d:
6a:24:31:9f:24:dd:0f:c8:71:a6:e7:d8:a6:75:79:
ea:67:8a:08:c4:5e:b2:67:2b:3c:96:62:20:46:cb:
47:c9:bb:e1:e1:4c:40:4a:07:9a:dd:42:6a:3f:f8:
56:77:cd:39:c4:e8:fe:1b:79:52:3b:e8:26:83:06:
3c:e7:ca:f9:e4:9f:3e:1f:43:ff:d5:54:54:3b:b0:
87:f3:05:8c:e7:7d:9d:54:b7:cc:15:37:7d:34:70:
9a:32:b7:6e:46:d9:f5:e2:54:e6:02:ec:ee:68:a9:
12:f9:51:cb:d7:08:3a:5b:01:3c:f6:2d:04:00:dd:
16:1f:bc:9c:47:c6:b7:76:31:4f:92:69:54:14:e7:
81:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:06:B4:05:28:F7:83:D6:91:8D:0F:53:F8:E3:B4:81:06:B9:9E:13
X509v3 Authority Key Identifier:
keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/qga0BSj3g9aRjQ9T-OO0gQa5nhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.172.0/22
Signature Algorithm: sha256WithRSAEncryption
39:64:27:14:22:81:bc:2d:e1:1f:13:7f:a1:6f:39:6d:ed:ee:
92:b6:76:76:ad:3d:4b:64:6d:24:46:56:bb:25:a3:c9:e9:7f:
bb:de:6a:de:0d:e4:29:b8:ac:9d:8c:89:10:bd:a9:7d:ba:35:
8a:07:07:2d:c0:bc:1e:3e:44:f4:f0:46:fd:0b:d2:54:b6:34:
ce:90:21:f6:fe:40:a0:d5:cb:8b:1b:83:6d:32:37:12:1b:28:
34:8f:4c:40:31:df:01:d0:9b:0f:39:6b:6a:d8:9b:f8:65:92:
72:85:10:96:35:bd:a5:36:9a:05:23:8a:06:73:48:af:95:f1:
05:9b:50:a7:3b:5b:3e:d1:18:4c:47:08:e2:1a:d6:c0:c2:5f:
49:90:36:3e:a3:6f:23:40:38:ff:62:e4:ac:ae:00:eb:47:28:
84:3e:17:49:c6:b2:e3:c3:ed:2d:6a:b5:65:ec:33:ba:36:da:
2b:74:66:ce:fc:37:56:0c:57:9f:28:fb:ac:56:6f:ea:5f:8b:
d7:96:89:f0:62:72:7c:12:eb:e7:08:a3:6e:8d:f7:65:fd:68:
81:cf:ab:c4:bc:55:21:48:89:67:40:96:27:41:d6:f3:14:31:
83:3a:54:ba:29:1c:d7:bc:d7:c9:4a:72:b6:7f:5a:cc:8c:c5:
7c:f6:54:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKiPHRcmlEaYCxC4v8xi/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Mjg5NTM1ZTdlNGQyM2U2M2UxNzhlM2ZiNWJmMDU2ZmU4
YWUyNzcwHhcNMjQwMTAyMTIzMzI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTA2YjQwNTI4Zjc4M2Q2OTE4ZDBmNTNmOGUzYjQ4MTA2Yjk5ZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxD2GkC0iP1GMrzv9nXIgn/fX9JN
L18Oq6oqCjhb8QDKSdQ8E9XhOsoAZR6RXsqsrE/FrrTsK3g8V5giAt4E6aVQqRWg
Vdys4/VddxBR2vcEe4DK/3VqXj01PaL6JsMlQVrgRZ9JtFAlSwKAQDoRE0oCfRiJ
Tj1qJDGfJN0PyHGm59imdXnqZ4oIxF6yZys8lmIgRstHybvh4UxASgea3UJqP/hW
d805xOj+G3lSO+gmgwY858r55J8+H0P/1VRUO7CH8wWM532dVLfMFTd9NHCaMrdu
Rtn14lTmAuzuaKkS+VHL1wg6WwE89i0EAN0WH7ycR8a3djFPkmlUFOeBiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKoGtAUo94PWkY0PU/jjtIEGuZ4TMB8GA1UdIwQY
MBaAFMgolTXn5NI+Y+F44/tb8Fb+iuJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQt
NjZhNWVjYzg0NjE2LzEvcWdhMEJTajNnOWFSalE5VC1PTzBnUWE1bmhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQtNjZhNWVjYzg0NjE2
LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCud2sMA0G
CSqGSIb3DQEBCwUAA4IBAQA5ZCcUIoG8LeEfE3+hbzlt7e6StnZ2rT1LZG0kRla7
JaPJ6X+73mreDeQpuKydjIkQval9ujWKBwctwLwePkT08Eb9C9JUtjTOkCH2/kCg
1cuLG4NtMjcSGyg0j0xAMd8B0JsPOWtq2Jv4ZZJyhRCWNb2lNpoFI4oGc0ivlfEF
m1CnO1s+0RhMRwjiGtbAwl9JkDY+o28jQDj/YuSsrgDrRyiEPhdJxrLjw+0tarVl
7DO6NtordGbO/DdWDFefKPusVm/qX4vXlonwYnJ8EuvnCKNujfdl/WiBz6vEvFUh
SIlnQJYnQdbzFDGDOlS6KRzXvNfJSnK2f1rMjMV89lRh
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:55 2025 by rpki-client