Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/bLmyVFCDfRFLKtZ-ruapXta_2I8.roa
File: bLmyVFCDfRFLKtZ-ruapXta_2I8.roa (raw, json)
Hash identifier: tzrNnKrrYVReyNR//0KlyQS/kOuSWgJufstyDpEXHwg=
Subject key identifier: 6C:B9:B2:54:50:83:7D:11:4B:2A:D6:7E:AE:E6:A9:5E:D6:BF:D8:8F
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 01857002842FDC8DC744603AA75AEF010D39
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/bLmyVFCDfRFLKtZ-ruapXta_2I8.roa
Signing time: Mon 02 Jan 2023 01:04:51 +0000
ROA not before: Mon 02 Jan 2023 01:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47294
IP address blocks: 84.44.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:84:2f:dc:8d:c7:44:60:3a:a7:5a:ef:01:0d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cb9b25450837d114b2ad67eaee6a95ed6bfd88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:20:fb:ca:20:db:ac:7d:d7:ea:8a:99:b3:
a8:06:b6:58:f5:66:d7:d2:6b:c8:3f:22:a1:45:e0:
fd:42:14:87:92:84:ed:b2:73:b9:5b:bf:3f:44:dc:
8f:b3:60:a7:d8:dc:9c:de:d9:ce:a4:55:24:e8:69:
30:45:0a:ae:d0:b9:f0:b6:5b:1f:4b:87:f6:c3:46:
6f:2f:93:71:3b:a9:05:58:41:2d:62:56:79:41:83:
c9:5c:bd:8e:4e:f1:27:33:ff:4c:1d:94:9b:9f:c6:
b4:e9:23:52:a4:61:52:7d:9f:29:e3:4d:43:bd:a4:
ac:7d:8c:db:0d:6d:9b:07:33:aa:d9:6b:2b:b0:4a:
b5:7a:81:22:e9:18:2f:dd:6b:f7:df:e6:60:36:ef:
90:33:7e:81:fb:b6:5c:8f:b1:b4:65:92:aa:65:e3:
47:de:e4:a9:95:0f:08:9b:80:a1:17:8a:b1:57:34:
42:5e:36:e6:0a:ac:49:f3:f8:6c:40:e1:1f:e1:34:
c8:b4:69:3d:86:75:59:df:61:53:a6:14:94:ec:2c:
12:25:99:5d:a1:34:df:84:07:56:8c:50:60:a4:b9:
43:fb:b0:47:62:cb:c2:e7:8b:be:f7:2d:2f:f5:59:
2b:37:e1:25:17:88:a5:bd:f1:8f:03:15:b6:47:cc:
40:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B9:B2:54:50:83:7D:11:4B:2A:D6:7E:AE:E6:A9:5E:D6:BF:D8:8F
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/bLmyVFCDfRFLKtZ-ruapXta_2I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.44.41.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:73:0b:2b:10:93:00:5c:ca:06:d8:86:0f:10:35:67:94:63:
64:55:9f:a8:f0:d5:14:68:70:d7:ed:5f:90:02:1c:94:32:56:
55:3d:cb:e9:9d:cd:f8:c5:94:9b:0d:d0:5a:93:1c:e2:45:65:
88:aa:72:0e:b1:cc:ea:f3:15:19:39:b9:21:c0:d5:3f:20:0b:
49:ed:58:06:07:53:fd:bd:2d:4c:2f:d5:c4:25:d0:b6:da:d0:
9e:8a:bc:12:d8:fb:1c:8f:7e:ab:6b:3d:9a:dd:26:35:bd:5e:
f9:46:e1:0b:09:83:1c:db:89:90:96:af:da:ff:e6:53:7a:93:
99:18:8a:67:ac:a5:db:6d:08:e5:61:a3:85:66:09:c4:9b:f9:
ab:58:58:aa:d2:50:21:a7:f6:3e:79:17:16:da:9d:3e:5d:42:
59:bb:6a:bd:7c:b5:a3:a3:42:e6:02:0c:75:da:c7:b1:be:16:
f9:b3:b8:7b:13:1a:9f:e6:67:c9:22:2d:57:36:4c:87:db:4b:
2a:aa:47:a7:86:e0:bb:35:9e:44:71:16:b7:51:a1:63:53:b3:
e9:48:96:ab:96:ce:3f:6a:66:51:44:73:a0:50:ad:01:f3:57:
fd:10:f0:2d:98:f2:e1:e9:01:61:b6:7e:b5:fb:de:9d:35:93:
2f:62:c5:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwAoQv3I3HRGA6p1rvAQ05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjMwMTAyMDEwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2I5YjI1NDUwODM3ZDExNGIyYWQ2N2VhZWU2YTk1ZWQ2YmZkODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPEg+8og26x91+qKmbOoBrZY9WbX
0mvIPyKhReD9QhSHkoTtsnO5W78/RNyPs2Cn2Nyc3tnOpFUk6GkwRQqu0Lnwtlsf
S4f2w0ZvL5NxO6kFWEEtYlZ5QYPJXL2OTvEnM/9MHZSbn8a06SNSpGFSfZ8p401D
vaSsfYzbDW2bBzOq2WsrsEq1eoEi6Rgv3Wv33+ZgNu+QM36B+7Zcj7G0ZZKqZeNH
3uSplQ8Im4ChF4qxVzRCXjbmCqxJ8/hsQOEf4TTItGk9hnVZ32FTphSU7CwSJZld
oTTfhAdWjFBgpLlD+7BHYsvC54u+9y0v9VkrN+ElF4ilvfGPAxW2R8xAgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGy5slRQg30RSyrWfq7mqV7Wv9iPMB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEvYkxteVZGQ0RmUkZMS3RaLXJ1YXBYdGFfMkk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCwpMA0G
CSqGSIb3DQEBCwUAA4IBAQDYcwsrEJMAXMoG2IYPEDVnlGNkVZ+o8NUUaHDX7V+Q
AhyUMlZVPcvpnc34xZSbDdBakxziRWWIqnIOsczq8xUZObkhwNU/IAtJ7VgGB1P9
vS1ML9XEJdC22tCeirwS2Pscj36raz2a3SY1vV75RuELCYMc24mQlq/a/+ZTepOZ
GIpnrKXbbQjlYaOFZgnEm/mrWFiq0lAhp/Y+eRcW2p0+XUJZu2q9fLWjo0LmAgx1
2sexvhb5s7h7Exqf5mfJIi1XNkyH20sqqkenhuC7NZ5EcRa3UaFjU7PpSJarls4/
amZRRHOgUK0B81f9EPAtmPLh6QFhtn61+96dNZMvYsWE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org