Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/BpiaEh16RnPgrHy4wLbtXaV56AI.roa
File: BpiaEh16RnPgrHy4wLbtXaV56AI.roa (raw, json)
Hash identifier: MsojJH5g+rf3MAxZFUF3PATYdzx407yq4MePgbP52GA=
Subject key identifier: 06:98:9A:12:1D:7A:46:73:E0:AC:7C:B8:C0:B6:ED:5D:A5:79:E8:02
Certificate issuer: /CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e
Certificate serial: 01856E6FAABA60DD490CB9CD1E412C3357F9
Authority key identifier: F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/BpiaEh16RnPgrHy4wLbtXaV56AI.roa
Signing time: Sun 01 Jan 2023 17:44:50 +0000
ROA not before: Sun 01 Jan 2023 17:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 185.145.60.0/22 maxlen: 22
195.93.238.0/23 maxlen: 23
91.199.58.0/24 maxlen: 24
87.236.96.0/21 maxlen: 21
2a02:cc8::/32 maxlen: 32
2a02:cc9::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:aa:ba:60:dd:49:0c:b9:cd:1e:41:2c:33:57:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e
Validity
Not Before: Jan 1 17:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06989a121d7a4673e0ac7cb8c0b6ed5da579e802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:14:b9:d0:10:c4:60:d7:e3:b2:06:2b:38:a9:
8d:f9:26:a8:89:e5:af:68:90:90:8b:09:ea:40:6e:
12:60:f9:b6:8a:22:45:dd:df:6f:24:33:d6:5d:36:
ab:da:0d:c9:30:65:37:78:2b:c5:20:4a:a1:71:53:
3d:1c:c7:d7:1a:58:27:e9:d0:51:80:1c:15:30:3e:
9f:07:ad:67:94:11:44:de:6c:72:e3:d6:94:c7:48:
5d:fc:9e:9b:2c:b1:61:aa:42:07:08:97:49:81:b3:
df:24:93:72:f4:67:d6:33:e8:9b:ac:0d:be:99:46:
71:58:22:64:8b:f0:ea:e9:ca:ed:b3:dd:73:6d:e6:
30:56:0e:4c:56:6d:db:4e:48:de:e2:21:2c:cb:3e:
88:3e:47:e1:0c:22:7b:0f:72:81:6a:0b:0d:ea:00:
44:d5:fa:38:a9:59:f3:d4:66:b0:f1:e8:07:ef:a6:
5c:32:1e:29:66:4b:31:1a:8c:a7:cc:de:ae:c1:5d:
40:8f:dd:d3:5e:08:97:7c:fc:85:f9:e5:65:61:4c:
be:76:24:7f:f1:d0:3d:36:c2:b8:de:c9:b7:05:de:
53:63:35:ec:14:4a:a8:48:8a:d5:b1:4e:9d:e5:51:
c5:a4:f4:a4:bc:8c:4f:6a:cd:7e:38:2d:28:1b:8a:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:98:9A:12:1D:7A:46:73:E0:AC:7C:B8:C0:B6:ED:5D:A5:79:E8:02
X509v3 Authority Key Identifier:
keyid:F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/BpiaEh16RnPgrHy4wLbtXaV56AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.96.0/21
91.199.58.0/24
185.145.60.0/22
195.93.238.0/23
IPv6:
2a02:cc8::/31
Signature Algorithm: sha256WithRSAEncryption
cd:9e:0c:57:79:62:43:83:ca:5b:e9:78:d2:31:0e:87:6c:ee:
b6:4a:63:d2:02:04:d5:ba:98:a3:a9:98:78:4d:64:49:3c:38:
49:f9:b0:5e:7d:0d:df:e3:7a:13:4a:8c:41:fb:98:0c:17:e2:
cc:b5:84:e9:92:37:1e:94:5a:37:11:d4:26:40:4c:e9:ae:ba:
a7:40:e5:dd:0f:1a:34:ba:10:81:02:58:8f:2a:d0:40:dd:da:
7c:00:c4:6e:6f:60:32:b2:93:aa:65:3e:bd:35:ca:4d:77:5d:
c6:42:38:79:fd:e9:58:6d:fd:a1:e8:c1:8a:76:70:6f:2d:46:
04:23:16:2e:05:fb:eb:85:ed:d8:0e:a5:bd:b8:41:d2:5e:99:
af:90:b0:6c:e6:ea:b0:86:3c:09:38:6c:44:6d:93:77:2b:42:
2e:c9:cf:eb:12:ca:23:6b:25:bc:95:e8:93:9d:ce:4c:df:b9:
86:e7:23:cc:f8:b2:ee:25:41:34:6e:af:0c:48:d0:9a:bb:63:
7e:63:13:cb:93:dc:4e:d7:15:98:13:56:38:d8:f8:f3:3c:d9:
68:33:a0:57:5c:53:c1:97:a5:fd:64:11:a6:9e:9c:7f:b0:9f:
45:e0:e9:74:e3:f3:1f:0a:ad:d6:eb:bb:e0:c5:32:50:2a:20:
ec:5d:22:a2
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYVub6q6YN1JDLnNHkEsM1f5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZGQ3YWUxMmQyYTM3ZjIxYWFjNmY4MWI2YWY2N2Q2NjE3
Y2EyOGUwHhcNMjMwMTAxMTc0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjk4OWExMjFkN2E0NjczZTBhYzdjYjhjMGI2ZWQ1ZGE1NzllODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxS50BDEYNfjsgYrOKmN+SaoieWv
aJCQiwnqQG4SYPm2iiJF3d9vJDPWXTar2g3JMGU3eCvFIEqhcVM9HMfXGlgn6dBR
gBwVMD6fB61nlBFE3mxy49aUx0hd/J6bLLFhqkIHCJdJgbPfJJNy9GfWM+ibrA2+
mUZxWCJki/Dq6crts91zbeYwVg5MVm3bTkje4iEsyz6IPkfhDCJ7D3KBagsN6gBE
1fo4qVnz1Gaw8egH76ZcMh4pZksxGoynzN6uwV1Aj93TXgiXfPyF+eVlYUy+diR/
8dA9NsK43sm3Bd5TYzXsFEqoSIrVsU6d5VHFpPSkvIxPas1+OC0oG4rRCwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFAaYmhIdekZz4Kx8uMC27V2leegCMB8GA1UdIwQY
MBaAFPjdeuEtKjfyGqxvgbavZ9ZhfKKOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OMTY0UzBxTl9JYXJHLUJ0cTluMW1GOG9vNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMmMwZDgwLTM5MzctNDQ1NS1iOWNm
LTJiNGEzNTM4YzVlMy8xL0JwaWFFaDE2Um5QZ3JIeTR3TGJ0WGFWNTZBSS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDYvMmMwZDgwLTM5MzctNDQ1NS1iOWNmLTJiNGEzNTM4YzVl
My8xLzEtTjE2NFMwcU5fSWFyRy1CdHE5bjFtRjhvbzQuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBANX7GAD
BABbxzoDBAK5kTwDBAHDXe4wDQQCAAIwBwMFASoCDMgwDQYJKoZIhvcNAQELBQAD
ggEBAM2eDFd5YkODylvpeNIxDods7rZKY9ICBNW6mKOpmHhNZEk8OEn5sF59Dd/j
ehNKjEH7mAwX4sy1hOmSNx6UWjcR1CZATOmuuqdA5d0PGjS6EIECWI8q0EDd2nwA
xG5vYDKyk6plPr01yk13XcZCOHn96Vht/aHowYp2cG8tRgQjFi4F++uF7dgOpb24
QdJema+QsGzm6rCGPAk4bERtk3crQi7Jz+sSyiNrJbyV6JOdzkzfuYbnI8z4su4l
QTRurwxI0Jq7Y35jE8uT3E7XFZgTVjjY+PM82WgzoFdcU8GXpf1kEaaenH+wn0Xg
6XTj8x8Krdbru+DFMlAqIOxdIqI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:18 2024 by rpki-client on console-ams.rpki-client.org