Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/BAFE2n9cr6i33t_LQegoZSRcgBA.roa
File: BAFE2n9cr6i33t_LQegoZSRcgBA.roa (raw, json)
Hash identifier: zxpkBwKNuY5QLOX0v7tko7cgsvemU50TuQvjPXEGHlA=
Subject key identifier: 04:01:44:DA:7F:5C:AF:A8:B7:DE:DF:CB:41:E8:28:65:24:5C:80:10
Certificate issuer: /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Certificate serial: 0185771E713241F3167EA084F355F47C2063
Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/BAFE2n9cr6i33t_LQegoZSRcgBA.roa
Signing time: Tue 03 Jan 2023 10:12:41 +0000
ROA not before: Tue 03 Jan 2023 10:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199769
IP address blocks: 92.60.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:1e:71:32:41:f3:16:7e:a0:84:f3:55:f4:7c:20:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Validity
Not Before: Jan 3 10:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=040144da7f5cafa8b7dedfcb41e82865245c8010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:1f:8c:d8:ad:94:50:a1:93:9d:7b:c1:2d:
71:12:70:cb:c4:9c:d3:b8:bd:94:e9:ce:a6:bb:7b:
5d:6a:d4:d5:c7:38:95:e7:7f:46:c0:f3:e1:5c:a3:
46:8a:9f:c5:af:15:3e:b1:2e:b4:6d:b8:52:ff:a6:
fc:c1:e0:0a:5a:29:bd:7f:17:53:01:fd:8c:c3:8e:
3d:00:b3:9f:6b:6b:49:bb:36:b9:37:46:27:0f:21:
02:62:4c:53:d7:65:ee:a5:87:01:dc:d1:7c:3c:d0:
d5:93:b3:1c:84:5a:3e:d0:21:27:a5:38:33:a9:f0:
4c:5d:45:3d:0d:d6:75:b6:49:8b:d5:6b:7e:45:27:
2b:92:d0:71:db:c8:e9:0c:74:c0:21:46:fa:59:63:
82:bd:36:8b:a4:43:28:ce:47:21:67:0d:10:34:e8:
7e:9a:e6:db:3a:9a:19:47:61:ed:24:0a:2b:78:b2:
a0:e2:d9:ca:22:da:03:e5:c9:d8:32:8d:9a:cd:b8:
99:4b:69:b9:27:ed:dc:9e:bb:75:07:a8:93:d5:ae:
dc:87:5c:76:90:dc:a6:16:85:60:6d:f9:aa:88:7d:
2c:80:df:e3:40:9d:52:e1:0e:ab:2a:76:54:35:0b:
6b:f2:e2:d8:9c:c8:9d:ef:9a:89:f8:e8:9e:68:8e:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:01:44:DA:7F:5C:AF:A8:B7:DE:DF:CB:41:E8:28:65:24:5C:80:10
X509v3 Authority Key Identifier:
keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/BAFE2n9cr6i33t_LQegoZSRcgBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.149.0/24
Signature Algorithm: sha256WithRSAEncryption
46:2e:b4:34:90:55:10:d9:b6:36:8d:e7:61:f8:84:7e:ff:01:
42:87:d3:c7:be:41:20:d2:b5:fc:4b:46:de:4c:66:86:11:45:
ca:15:0f:5d:ca:3b:08:62:7d:af:da:6d:bc:cb:a9:08:05:1e:
db:7b:f4:32:31:6e:59:7a:58:a1:6d:9c:6e:59:b5:84:32:f6:
1f:ef:73:36:39:30:20:d8:b4:44:b8:f6:56:9c:90:ed:44:3f:
37:ac:9d:61:6a:c9:38:5d:fc:05:6c:8e:f2:b8:a4:20:4b:cb:
c0:d4:9c:1e:8d:8c:c9:8a:e0:e9:49:25:15:47:9a:b0:4d:d5:
b6:7f:2d:d9:f2:ee:2f:a2:ab:0a:11:ba:55:4c:ab:1b:fb:9f:
02:3b:05:7e:ae:d5:c8:e9:28:0f:f0:3f:25:02:51:83:d0:59:
25:3f:dc:18:a7:81:78:62:32:e1:03:0f:fe:b3:3e:49:0f:db:
59:56:ca:bf:d7:1f:bc:f4:c0:8a:6a:ba:9a:a8:f2:e1:b8:1b:
be:d6:d9:bd:00:36:52:bf:63:7d:44:be:19:38:f3:3a:c5:0e:
33:6d:b8:fa:d9:a1:a7:05:a8:33:50:b1:ce:7a:e6:c0:e8:84:
3d:37:f0:79:5b:79:d2:d3:b0:1f:48:9d:69:63:eb:72:ce:2a:
00:c6:97:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYV3HnEyQfMWfqCE81X0fCBjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OWM3MTNjNTE5ODdlMWZmYTU0ODIyNzdmNWYxYzhjYjcy
MmY0NGIwHhcNMjMwMTAzMTAxMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDAxNDRkYTdmNWNhZmE4YjdkZWRmY2I0MWU4Mjg2NTI0NWM4MDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEcfjNitlFChk517wS1xEnDLxJzT
uL2U6c6mu3tdatTVxziV539GwPPhXKNGip/FrxU+sS60bbhS/6b8weAKWim9fxdT
Af2Mw449ALOfa2tJuza5N0YnDyECYkxT12XupYcB3NF8PNDVk7MchFo+0CEnpTgz
qfBMXUU9DdZ1tkmL1Wt+RScrktBx28jpDHTAIUb6WWOCvTaLpEMozkchZw0QNOh+
mubbOpoZR2HtJAoreLKg4tnKItoD5cnYMo2azbiZS2m5J+3cnrt1B6iT1a7ch1x2
kNymFoVgbfmqiH0sgN/jQJ1S4Q6rKnZUNQtr8uLYnMid75qJ+OieaI47zQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAQBRNp/XK+ot97fy0HoKGUkXIAQMB8GA1UdIwQY
MBaAFDaccTxRmH4f+lSCJ39fHIy3IvRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAt
NzZjMDVjZjVmMmU2LzEvQkFGRTJuOWNyNmkzM3RfTFFlZ29aU1JjZ0JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAtNzZjMDVjZjVmMmU2
LzEvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDyVMA0G
CSqGSIb3DQEBCwUAA4IBAQBGLrQ0kFUQ2bY2jedh+IR+/wFCh9PHvkEg0rX8S0be
TGaGEUXKFQ9dyjsIYn2v2m28y6kIBR7be/QyMW5ZelihbZxuWbWEMvYf73M2OTAg
2LREuPZWnJDtRD83rJ1hask4XfwFbI7yuKQgS8vA1JwejYzJiuDpSSUVR5qwTdW2
fy3Z8u4voqsKEbpVTKsb+58COwV+rtXI6SgP8D8lAlGD0FklP9wYp4F4YjLhAw/+
sz5JD9tZVsq/1x+89MCKarqaqPLhuBu+1tm9ADZSv2N9RL4ZOPM6xQ4zbbj62aGn
BagzULHOeubA6IQ9N/B5W3nS07AfSJ1pY+tyzioAxpfU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:26 2024 by rpki-client on console-fra.rpki-client.org