Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/_QIqKiMVUO45cFhYs-4eQZeUBfU.roa
File: _QIqKiMVUO45cFhYs-4eQZeUBfU.roa (raw, json)
Hash identifier: IXW1/U675V6AxBcHfjBkOEY57W+t/Lc/HpTsTaFUVsY=
Subject key identifier: FD:02:2A:2A:23:15:50:EE:39:70:58:58:B3:EE:1E:41:97:94:05:F5
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 01856F9E06E08825527E1DF921C402A3EE18
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/_QIqKiMVUO45cFhYs-4eQZeUBfU.roa
Signing time: Sun 01 Jan 2023 23:15:05 +0000
ROA not before: Sun 01 Jan 2023 23:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 185.152.92.0/22 maxlen: 24
85.239.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 19:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9e:06:e0:88:25:52:7e:1d:f9:21:c4:02:a3:ee:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 23:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd022a2a231550ee39705858b3ee1e41979405f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:36:d2:c6:76:da:1a:21:52:54:0e:b1:4b:
66:78:da:ab:20:e1:ba:16:4b:c7:8a:23:55:be:46:
64:f8:ad:06:fe:79:e8:e9:0b:2b:22:30:17:12:ac:
41:9f:4b:01:6b:a1:c6:08:5b:b0:a8:a1:95:0f:ae:
7f:d7:19:36:a0:cd:ae:c1:0f:ef:75:8e:80:48:c7:
4f:8d:48:cc:59:e6:9e:47:77:86:1b:6b:90:df:79:
8d:a1:16:dd:87:16:50:d9:0c:fc:b6:17:7e:5f:12:
0f:17:41:7c:26:33:ca:d7:83:79:a7:23:85:35:e3:
b1:72:26:ac:c4:a8:42:45:b2:76:4d:48:e1:2e:c8:
e7:df:fd:4f:f2:62:b8:e7:95:98:67:9d:e1:fc:47:
a6:82:f6:88:c5:ce:94:69:ae:ec:16:1c:bb:a2:3a:
9a:eb:a1:74:73:5e:fb:28:a2:8d:b9:68:8a:88:78:
62:a4:98:9b:93:87:1c:d5:01:59:c9:04:45:75:2e:
87:70:73:65:36:9f:7c:04:3b:7e:97:ee:fc:d5:c3:
9e:80:cc:a2:9a:fc:b2:fc:dd:95:ed:de:2f:96:7b:
7d:22:b6:86:d0:dc:bc:5f:cc:a9:77:42:fb:83:a9:
e3:01:b6:af:d0:66:80:bb:25:63:db:b7:49:4a:10:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:02:2A:2A:23:15:50:EE:39:70:58:58:B3:EE:1E:41:97:94:05:F5
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/_QIqKiMVUO45cFhYs-4eQZeUBfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.36.0/22
185.152.92.0/22
Signature Algorithm: sha256WithRSAEncryption
44:c6:14:22:d4:34:35:7e:61:7f:90:0d:33:21:1c:97:48:3f:
3f:d9:1f:a4:af:d2:d0:c8:22:de:60:f0:c2:28:8a:ea:ab:6a:
ec:26:3f:40:ae:aa:90:e5:9d:e7:f1:93:4b:b2:d2:e4:0b:a1:
57:5a:66:40:22:ed:2b:10:27:cf:b9:42:cb:41:f8:ad:37:c1:
cc:ea:fa:96:68:92:e4:83:30:f1:1d:59:71:33:5f:f0:9d:ec:
41:5c:c7:bd:91:58:23:62:69:d0:cb:6c:b8:fd:b4:d4:27:45:
5f:e6:81:f3:73:5e:6e:1d:8c:49:1e:28:64:0f:7c:47:fa:4d:
3d:e5:c6:0d:5e:11:23:e0:61:ce:e2:97:df:52:22:b4:c5:0e:
52:af:91:3c:d4:d3:15:bf:3f:25:4b:81:bb:be:93:f5:a8:c8:
7c:47:bb:2e:eb:fc:48:62:bf:af:d2:27:ec:fd:c4:90:d9:db:
15:d5:70:f8:1f:e8:be:9a:4f:9b:e1:f4:61:64:2c:b8:a0:db:
32:02:5e:56:5d:0b:4c:f4:86:0a:b0:63:89:2e:4c:1b:ce:68:
66:47:2c:43:3b:f7:17:6c:21:c3:d4:9d:06:44:b8:74:37:e2:
4c:a5:6c:29:e7:c6:6f:84:1f:6a:0e:88:4f:a7:1c:45:d3:37:
68:e2:09:97
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvngbgiCVSfh35IcQCo+4YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiN2VjOTQyM2JmOTBjODFkMjJkOTQ4NDFjMTAzNTdhNTQy
NjAzNzkwHhcNMjMwMTAxMjMxNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDAyMmEyYTIzMTU1MGVlMzk3MDU4NThiM2VlMWU0MTk3OTQwNWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcw20sZ22hohUlQOsUtmeNqrIOG6
FkvHiiNVvkZk+K0G/nno6QsrIjAXEqxBn0sBa6HGCFuwqKGVD65/1xk2oM2uwQ/v
dY6ASMdPjUjMWeaeR3eGG2uQ33mNoRbdhxZQ2Qz8thd+XxIPF0F8JjPK14N5pyOF
NeOxciasxKhCRbJ2TUjhLsjn3/1P8mK455WYZ53h/EemgvaIxc6Uaa7sFhy7ojqa
66F0c177KKKNuWiKiHhipJibk4cc1QFZyQRFdS6HcHNlNp98BDt+l+781cOegMyi
mvyy/N2V7d4vlnt9IraG0Ny8X8ypd0L7g6njAbav0GaAuyVj27dJShB7ZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP0CKiojFVDuOXBYWLPuHkGXlAX1MB8GA1UdIwQY
MBaAFDt+yUI7+QyB0i2UhBwQNXpUJgN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzM3SlFqdjVESUhTTFpTRUhCQTFlbFFtQTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZWE0N2YtZWZmMy00NjI3LTk0ZWQt
MWQxMGYzYzcwYmI0LzEvX1FJcUtpTVZVTzQ1Y0ZoWXMtNGVRWmVVQmZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZWE0N2YtZWZmMy00NjI3LTk0ZWQtMWQxMGYzYzcwYmI0
LzEvTzM3SlFqdjVESUhTTFpTRUhCQTFlbFFtQTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVe8kAwQC
uZhcMA0GCSqGSIb3DQEBCwUAA4IBAQBExhQi1DQ1fmF/kA0zIRyXSD8/2R+kr9LQ
yCLeYPDCKIrqq2rsJj9ArqqQ5Z3n8ZNLstLkC6FXWmZAIu0rECfPuULLQfitN8HM
6vqWaJLkgzDxHVlxM1/wnexBXMe9kVgjYmnQy2y4/bTUJ0Vf5oHzc15uHYxJHihk
D3xH+k095cYNXhEj4GHO4pffUiK0xQ5Sr5E81NMVvz8lS4G7vpP1qMh8R7su6/xI
Yr+v0ifs/cSQ2dsV1XD4H+i+mk+b4fRhZCy4oNsyAl5WXQtM9IYKsGOJLkwbzmhm
RyxDO/cXbCHD1J0GRLh0N+JMpWwp58ZvhB9qDohPpxxF0zdo4gmX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:28 2024 by rpki-client on console-ams.rpki-client.org