Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BmxEAnoR-N1pD_SYOFwdu-F3Xe4.roa
File: BmxEAnoR-N1pD_SYOFwdu-F3Xe4.roa (raw, json)
Hash identifier: kRC1mKco58gy0cX6Kg5MrvW4+eablXKRhNG/ZTMQva8=
Subject key identifier: 06:6C:44:02:7A:11:F8:DD:69:0F:F4:98:38:5C:1D:BB:E1:77:5D:EE
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF986CD0A3C6ADB3785CB6C410818DF
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BmxEAnoR-N1pD_SYOFwdu-F3Xe4.roa
Signing time: Mon 02 Jan 2023 00:55:02 +0000
ROA not before: Mon 02 Jan 2023 00:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201326
IP address blocks: 78.83.212.0/24 maxlen: 24
78.83.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:86:cd:0a:3c:6a:db:37:85:cb:6c:41:08:18:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=066c44027a11f8dd690ff498385c1dbbe1775dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:1f:8a:1c:f7:45:e5:53:c1:1d:c5:cc:30:
fc:cd:b7:a8:04:fe:b0:fb:84:0e:0c:c2:54:d1:4e:
84:a8:d2:ad:b1:39:7e:46:3a:33:8f:2a:64:66:3c:
0d:3a:4a:d0:42:51:08:54:26:77:a3:90:99:ec:78:
4b:c1:19:53:8c:6b:d9:98:a0:34:d2:d3:04:48:d8:
a7:0c:12:4d:07:23:97:cf:78:ff:2f:56:24:6f:03:
4a:da:db:62:80:de:43:dd:cd:59:5b:5d:ff:32:52:
de:63:d2:5c:22:00:17:2f:88:ae:90:43:29:41:d2:
b1:3a:6c:0c:8c:4d:75:c7:06:43:18:b7:67:e9:9b:
23:ca:07:86:f0:16:85:8e:cb:31:c4:3d:56:83:20:
1a:73:41:ed:d5:ea:dd:5a:e5:b4:c1:25:b0:22:86:
eb:bd:1d:51:f6:70:11:43:f0:38:e7:35:8c:7f:35:
1b:f5:8d:f3:30:b4:60:70:19:ee:61:a1:73:f6:90:
cb:c6:c2:1d:b3:bd:cf:2d:cb:e6:bd:83:31:b0:65:
aa:5e:13:6f:12:b3:e0:62:c6:38:18:44:2f:30:0d:
86:c4:bd:2b:0d:e5:99:60:fd:14:29:36:15:af:0a:
ca:b9:39:fe:a3:6c:cc:b2:64:8a:11:67:58:76:8c:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6C:44:02:7A:11:F8:DD:69:0F:F4:98:38:5C:1D:BB:E1:77:5D:EE
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BmxEAnoR-N1pD_SYOFwdu-F3Xe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.212.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:a4:d2:63:9b:4b:70:05:dd:62:4a:28:a3:bf:c9:22:39:64:
58:98:bc:5b:ff:39:6b:cc:41:bb:4c:62:e1:60:42:a5:56:dd:
2e:c8:a9:00:0a:73:79:1f:10:d9:f4:53:95:f9:8a:6d:b8:7c:
08:18:f8:df:08:d8:cb:db:19:c5:a2:d4:43:e4:08:e7:3c:64:
a4:60:4d:d6:d1:07:29:9e:e6:19:10:3b:d6:a1:df:e3:e7:bf:
88:90:8d:94:90:eb:ce:48:9a:8f:4c:6f:e4:1e:46:be:05:60:
12:88:b6:a1:06:04:a4:70:f9:fe:6a:ce:b5:7d:01:49:7c:13:
c2:9e:86:71:33:0e:ac:76:1c:a7:aa:90:77:5a:4d:ba:02:24:
f9:15:2d:49:12:91:cf:1b:89:6d:6a:a0:bb:4b:a4:38:2d:3c:
50:18:e4:61:af:37:8b:e8:39:51:26:5e:8e:d9:ce:05:15:c7:
8a:8b:39:1a:ba:10:14:33:85:82:50:a6:02:04:3b:05:af:6d:
8d:fc:cf:55:cc:6d:e1:8a:66:ab:f9:30:af:44:b1:34:1e:79:
3d:45:0f:ba:b6:6e:62:29:7b:5b:6c:43:57:12:fe:54:b1:db:
92:10:9b:97:39:2b:99:b8:8c:d4:53:4d:70:7f:4b:f9:21:aa:
7d:11:0a:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv+YbNCjxq2zeFy2xBCBjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjMwMTAyMDA1NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjZjNDQwMjdhMTFmOGRkNjkwZmY0OTgzODVjMWRiYmUxNzc1ZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisEfihz3ReVTwR3FzDD8zbeoBP6w
+4QODMJU0U6EqNKtsTl+RjozjypkZjwNOkrQQlEIVCZ3o5CZ7HhLwRlTjGvZmKA0
0tMESNinDBJNByOXz3j/L1YkbwNK2ttigN5D3c1ZW13/MlLeY9JcIgAXL4iukEMp
QdKxOmwMjE11xwZDGLdn6ZsjygeG8BaFjssxxD1WgyAac0Ht1erdWuW0wSWwIobr
vR1R9nARQ/A45zWMfzUb9Y3zMLRgcBnuYaFz9pDLxsIds73PLcvmvYMxsGWqXhNv
ErPgYsY4GEQvMA2GxL0rDeWZYP0UKTYVrwrKuTn+o2zMsmSKEWdYdoyzCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAZsRAJ6EfjdaQ/0mDhcHbvhd13uMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvQm14RUFub1ItTjFwRF9TWU9Gd2R1LUYzWGU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTlPUMA0G
CSqGSIb3DQEBCwUAA4IBAQAvpNJjm0twBd1iSiijv8kiOWRYmLxb/zlrzEG7TGLh
YEKlVt0uyKkACnN5HxDZ9FOV+YptuHwIGPjfCNjL2xnFotRD5AjnPGSkYE3W0Qcp
nuYZEDvWod/j57+IkI2UkOvOSJqPTG/kHka+BWASiLahBgSkcPn+as61fQFJfBPC
noZxMw6sdhynqpB3Wk26AiT5FS1JEpHPG4ltaqC7S6Q4LTxQGORhrzeL6DlRJl6O
2c4FFceKizkauhAUM4WCUKYCBDsFr22N/M9VzG3himar+TCvRLE0Hnk9RQ+6tm5i
KXtbbENXEv5UsduSEJuXOSuZuIzUU01wf0v5Iap9EQpf
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:00 2024 by rpki-client on console-fra.rpki-client.org