Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Bc6Bteh-ygr_RDHOwOY6YkwD3Fw.roa
File: Bc6Bteh-ygr_RDHOwOY6YkwD3Fw.roa (raw, json)
Hash identifier: 8hrtmJpZQJWGXlJkcu1iUf7O6xvRIRewGakhE5JUwO0=
Subject key identifier: 05:CE:81:B5:E8:7E:CA:0A:FF:44:31:CE:C0:E6:3A:62:4C:03:DC:5C
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB831D1B84325E610477AFB35855A23
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Bc6Bteh-ygr_RDHOwOY6YkwD3Fw.roa
Signing time: Sun 01 Jan 2023 09:44:48 +0000
ROA not before: Sun 01 Jan 2023 09:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2281
IP address blocks: 90.84.10.0/24 maxlen: 24
2a01:c9c0:8020::/48 maxlen: 64
2a01:c9c0:802f::/48 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:31:d1:b8:43:25:e6:10:47:7a:fb:35:85:5a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05ce81b5e87eca0aff4431cec0e63a624c03dc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fd:97:a7:94:31:85:93:51:08:46:56:2a:71:
bf:f3:06:1a:11:e6:b7:8a:94:60:5f:77:de:44:8b:
fc:65:0e:db:db:80:e4:1c:e3:15:cd:5f:f1:a1:7f:
e5:8f:53:bb:6a:77:4c:76:93:db:d7:29:e8:73:1b:
8b:72:7a:c0:cf:34:68:a2:91:e9:fc:7c:7c:66:13:
76:e3:5c:15:51:46:56:da:b7:c4:72:d0:63:56:ec:
f6:de:18:04:c8:35:f0:21:06:6b:5e:6b:b5:11:45:
8a:f7:c0:4d:0c:27:c8:65:d0:8a:a8:0b:0f:e4:8a:
98:17:81:4a:e7:58:dc:54:8d:65:f9:e2:a9:e6:1c:
40:a6:6e:a0:26:ad:fa:c6:85:64:70:57:a1:57:9c:
38:d8:7b:f1:e4:e1:09:10:e5:c3:9b:4b:50:df:7d:
fd:4f:2d:11:3b:63:2c:92:dd:c0:58:5e:bb:43:93:
4a:28:21:6f:0b:41:b0:07:b3:76:f8:f0:f1:fb:32:
43:9b:07:43:d1:b3:30:6f:c0:f6:d1:41:73:27:01:
29:38:0a:c1:b4:96:68:a9:ef:39:69:9b:1b:63:c7:
38:40:d2:87:3a:48:89:96:b1:9d:cc:95:7f:94:b7:
5c:a0:41:c6:3a:9c:f9:48:03:ae:d8:4b:87:ac:d2:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CE:81:B5:E8:7E:CA:0A:FF:44:31:CE:C0:E6:3A:62:4C:03:DC:5C
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Bc6Bteh-ygr_RDHOwOY6YkwD3Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.10.0/24
IPv6:
2a01:c9c0:8020::/48
2a01:c9c0:802f::/48
Signature Algorithm: sha256WithRSAEncryption
58:c4:69:96:df:a5:fd:5b:fb:c4:0d:dc:ac:11:7b:79:f1:ad:
56:98:0f:1c:62:b4:c6:61:81:74:98:87:40:62:55:9b:0c:62:
84:18:86:ae:d0:f4:9d:77:bc:73:b4:74:a9:d0:77:1a:5a:02:
8b:64:3d:19:13:fc:c1:73:e7:ca:18:77:a1:61:80:5c:9f:21:
f1:52:c2:d9:b7:8b:8c:55:33:61:12:2a:d8:13:46:9b:2a:4c:
6e:89:70:2c:4b:0b:fb:5c:96:63:0d:ac:d5:d7:c3:cd:1f:eb:
7c:25:0f:b1:30:ec:80:59:58:79:18:ad:ae:72:5d:c4:91:34:
35:ea:9d:13:59:0e:81:ef:9e:33:e1:ad:3a:e2:bf:30:8d:96:
8c:69:fc:78:eb:84:b2:0b:ab:33:a9:21:a3:95:ea:67:df:a8:
f5:17:76:9e:ad:54:05:29:a3:d0:49:54:fb:4c:76:17:25:3d:
b8:dd:31:18:2d:67:a5:90:1b:f3:70:96:28:ce:6a:58:ea:64:
63:e8:25:a9:8e:ef:5d:bb:29:d7:f0:97:9e:d8:a2:92:65:64:
47:3e:e1:57:aa:cb:46:3d:20:48:fa:e9:aa:82:37:1b:42:55:
9f:5c:4d:56:59:f1:0f:c7:ca:44:fd:7d:85:b1:c9:74:e6:84:
fa:ba:57:ee
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYVsuDHRuEMl5hBHevs1hVojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjMwMTAxMDk0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWNlODFiNWU4N2VjYTBhZmY0NDMxY2VjMGU2M2E2MjRjMDNkYzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf2Xp5QxhZNRCEZWKnG/8wYaEea3
ipRgX3feRIv8ZQ7b24DkHOMVzV/xoX/lj1O7andMdpPb1ynocxuLcnrAzzRoopHp
/Hx8ZhN241wVUUZW2rfEctBjVuz23hgEyDXwIQZrXmu1EUWK98BNDCfIZdCKqAsP
5IqYF4FK51jcVI1l+eKp5hxApm6gJq36xoVkcFehV5w42Hvx5OEJEOXDm0tQ3339
Ty0RO2Mskt3AWF67Q5NKKCFvC0GwB7N2+PDx+zJDmwdD0bMwb8D20UFzJwEpOArB
tJZoqe85aZsbY8c4QNKHOkiJlrGdzJV/lLdcoEHGOpz5SAOu2EuHrNJerQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFAXOgbXofsoK/0QxzsDmOmJMA9xcMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvQmM2QnRlaC15Z3JfUkRIT3dPWTZZa3dEM0Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAWlQKMBgE
AgACMBIDBwAqAcnAgCADBwAqAcnAgC8wDQYJKoZIhvcNAQELBQADggEBAFjEaZbf
pf1b+8QN3KwRe3nxrVaYDxxitMZhgXSYh0BiVZsMYoQYhq7Q9J13vHO0dKnQdxpa
AotkPRkT/MFz58oYd6FhgFyfIfFSwtm3i4xVM2ESKtgTRpsqTG6JcCxLC/tclmMN
rNXXw80f63wlD7Ew7IBZWHkYra5yXcSRNDXqnRNZDoHvnjPhrTrivzCNloxp/Hjr
hLILqzOpIaOV6mffqPUXdp6tVAUpo9BJVPtMdhclPbjdMRgtZ6WQG/NwlijOaljq
ZGPoJamO7127Kdfwl57YopJlZEc+4Veqy0Y9IEj66aqCNxtCVZ9cTVZZ8Q/HykT9
fYWxyXTmhPq6V+4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org