Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/bSdHYBd-CdAlZS9ESoG5NKs3n40.roa
File: bSdHYBd-CdAlZS9ESoG5NKs3n40.roa (raw, json)
Hash identifier: uBToN2fpzaRJHQSMCsMPUWKCM2UEVpacQ3mlZMclf/k=
Subject key identifier: 6D:27:47:60:17:7E:09:D0:25:65:2F:44:4A:81:B9:34:AB:37:9F:8D
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 0185711E5D1E2B056B78237D909FA21A7A28
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/bSdHYBd-CdAlZS9ESoG5NKs3n40.roa
Signing time: Mon 02 Jan 2023 06:14:53 +0000
ROA not before: Mon 02 Jan 2023 06:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210015
IP address blocks: 193.151.160.0/23 maxlen: 23
193.151.162.0/23 maxlen: 23
45.80.248.0/23 maxlen: 23
2a0d:e7c7:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:5d:1e:2b:05:6b:78:23:7d:90:9f:a2:1a:7a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Jan 2 06:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d274760177e09d025652f444a81b934ab379f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:c1:fc:0e:84:56:6a:db:09:40:2e:5d:d6:
8b:5d:7b:05:35:7b:18:eb:79:74:fc:a6:98:cd:5e:
1d:57:45:30:fd:d6:79:d6:7e:fa:36:27:a4:2d:78:
bb:a7:61:e9:6e:17:94:8c:2d:cf:77:a4:5d:d5:8b:
c7:d1:00:3f:2d:4a:bc:39:21:40:15:79:61:e3:3e:
73:e1:22:1e:73:31:b7:cd:27:11:33:30:45:da:5e:
05:4d:52:e1:c4:ae:d2:7d:68:9a:82:ae:7a:0c:69:
93:cb:33:05:de:69:55:c5:ca:ab:c6:ad:20:cc:17:
67:30:52:49:e1:44:54:4e:38:4f:72:18:07:f6:a4:
69:69:12:52:74:0b:88:b7:cc:9e:91:e4:2b:bb:cf:
00:c3:6b:21:d4:fd:f9:6c:8d:1e:84:f2:4c:b1:3f:
2e:1e:47:51:02:57:a5:b2:d1:db:2e:bb:24:a6:13:
25:79:7b:5d:5f:ac:07:74:e7:fd:51:3b:fb:71:3c:
f8:5a:21:31:6e:50:7e:8a:a7:8e:70:55:d3:45:43:
d3:a2:b1:7b:6b:77:9a:35:f4:e1:6e:71:e4:bd:b4:
e2:be:c9:26:a7:11:6e:90:b7:ac:f6:19:d0:6d:12:
8e:5c:9c:d0:f2:f1:87:95:59:7d:da:ec:b1:67:b6:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:27:47:60:17:7E:09:D0:25:65:2F:44:4A:81:B9:34:AB:37:9F:8D
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/bSdHYBd-CdAlZS9ESoG5NKs3n40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.248.0/23
193.151.160.0/22
IPv6:
2a0d:e7c7:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
6b:ec:9c:eb:5e:28:95:14:42:fb:95:cb:a0:92:2c:40:3f:28:
6c:58:85:94:11:ab:7f:95:58:62:80:1f:3b:35:83:23:d7:fd:
e1:1c:bc:6d:7a:a8:67:c8:9f:c5:a4:8c:23:b5:7e:06:27:fe:
e2:af:1f:f3:35:c8:eb:ef:61:e4:4e:f7:60:1b:13:f8:96:7d:
8c:a6:9f:47:b9:e3:17:d6:fe:3d:30:61:2a:2e:12:f3:1c:c6:
ff:5a:07:56:05:fa:17:9a:b8:bb:93:2f:82:e5:6f:c7:a0:f2:
0c:83:f9:82:94:5f:07:cf:0c:2b:a5:8f:77:f5:42:01:75:7e:
b8:9e:59:21:a7:33:07:e1:0d:02:8a:47:ee:80:84:e1:8a:89:
16:0b:87:ad:20:ec:05:c2:28:2d:2a:b7:40:d6:a2:e2:fb:89:
e2:c8:a3:1b:e5:70:5f:f8:b0:21:23:75:94:bf:77:3d:4c:f3:
9a:1d:d1:9a:61:fc:89:4a:2e:d8:6e:36:cb:ad:cd:1e:27:5b:
0f:3c:4e:c2:59:d6:68:f3:c2:18:c8:49:bd:48:64:d5:66:07:
e2:67:ed:3c:00:21:7d:dd:b8:c5:4b:d5:34:40:10:16:5c:9e:
e9:88:b2:ff:7f:4b:6c:13:5e:ef:bf:39:80:2e:fc:28:2c:0a:
a2:f8:5b:44
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVxHl0eKwVreCN9kJ+iGnooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx
MGU5MWEwHhcNMjMwMTAyMDYxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDI3NDc2MDE3N2UwOWQwMjU2NTJmNDQ0YTgxYjkzNGFiMzc5ZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XrB/A6EVmrbCUAuXdaLXXsFNXsY
63l0/KaYzV4dV0Uw/dZ51n76NiekLXi7p2HpbheUjC3Pd6Rd1YvH0QA/LUq8OSFA
FXlh4z5z4SIeczG3zScRMzBF2l4FTVLhxK7SfWiagq56DGmTyzMF3mlVxcqrxq0g
zBdnMFJJ4URUTjhPchgH9qRpaRJSdAuIt8yekeQru88Aw2sh1P35bI0ehPJMsT8u
HkdRAlelstHbLrskphMleXtdX6wHdOf9UTv7cTz4WiExblB+iqeOcFXTRUPTorF7
a3eaNfThbnHkvbTivskmpxFukLes9hnQbRKOXJzQ8vGHlVl92uyxZ7bQ/wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFG0nR2AXfgnQJWUvREqBuTSrN5+NMB8GA1UdIwQY
MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt
YTM0N2I1NmYzYjlhLzEvYlNkSFlCZC1DZEFsWlM5RVNvRzVOS3MzbjQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh
LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBLVD4AwQC
wZegMA8EAgACMAkDBwAqDefH//8wDQYJKoZIhvcNAQELBQADggEBAGvsnOteKJUU
QvuVy6CSLEA/KGxYhZQRq3+VWGKAHzs1gyPX/eEcvG16qGfIn8WkjCO1fgYn/uKv
H/M1yOvvYeRO92AbE/iWfYymn0e54xfW/j0wYSouEvMcxv9aB1YF+heauLuTL4Ll
b8eg8gyD+YKUXwfPDCulj3f1QgF1frieWSGnMwfhDQKKR+6AhOGKiRYLh60g7AXC
KC0qt0DWouL7ieLIoxvlcF/4sCEjdZS/dz1M85od0Zph/IlKLthuNsutzR4nWw88
TsJZ1mjzwhjISb1IZNVmB+Jn7TwAIX3duMVL1TRAEBZcnumIsv9/S2wTXu+/OYAu
/CgsCqL4W0Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:01 2024 by rpki-client on console-fra.rpki-client.org