Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bmqIXDTD3j-KzFfOliCbvqK-1Hc.roa
File: bmqIXDTD3j-KzFfOliCbvqK-1Hc.roa (raw, json)
Hash identifier: GFGuCFELDtvLZbvlL1V5lp93qYBFyuyxVyjjq46MaTw=
Subject key identifier: 6E:6A:88:5C:34:C3:DE:3F:8A:CC:57:CE:96:20:9B:BE:A2:BE:D4:77
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018C49C33C0A24C305E065E905874ACC5DAD
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bmqIXDTD3j-KzFfOliCbvqK-1Hc.roa
Signing time: Fri 08 Dec 2023 14:09:40 +0000
ROA not before: Fri 08 Dec 2023 14:09:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49532
IP address blocks: 147.45.124.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:c3:3c:0a:24:c3:05:e0:65:e9:05:87:4a:cc:5d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Dec 8 14:09:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e6a885c34c3de3f8acc57ce96209bbea2bed477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:a3:57:cd:0c:fc:0e:c2:c8:3a:6a:24:db:
8d:3e:70:c6:a7:09:30:5b:85:88:fe:e5:e4:a9:5c:
0a:23:e0:60:5a:43:6a:ff:88:1f:bc:0b:98:e3:2b:
c2:50:f5:36:5d:42:96:fd:24:8e:85:dd:25:73:8b:
29:eb:c2:72:80:5d:20:45:2b:e3:89:b9:50:e2:6b:
49:22:d0:03:a3:ab:c7:64:0e:92:1b:1c:27:b7:10:
86:f4:2f:d3:8b:37:2b:68:ff:a7:ab:8b:3c:01:62:
74:fb:00:b9:a5:54:55:22:80:7e:24:e9:bd:ce:e0:
92:c5:31:1e:d9:f1:dd:61:4d:00:9d:4d:9e:af:2d:
51:bb:f5:09:cc:34:c8:be:20:10:14:b9:62:3a:e5:
72:43:45:5d:b5:8c:9b:c3:d5:8f:a9:32:a0:3b:56:
5b:d8:e4:07:e1:07:13:cd:29:69:4d:a1:5c:ce:8e:
fa:f9:13:95:cc:e7:38:2d:a4:49:9e:56:6d:cb:9e:
3c:7e:89:5f:8d:47:18:54:51:5e:29:3f:94:4c:e5:
78:27:ec:56:51:d4:5f:59:6a:b3:9d:39:57:f9:33:
5f:fc:03:cf:b5:7e:83:7b:b0:a6:58:48:dc:dd:25:
3b:e2:9c:31:9b:4a:bb:03:c6:19:9b:47:58:39:75:
a6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6A:88:5C:34:C3:DE:3F:8A:CC:57:CE:96:20:9B:BE:A2:BE:D4:77
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bmqIXDTD3j-KzFfOliCbvqK-1Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:05:6a:4d:13:d6:54:a3:83:96:ed:36:61:9d:ad:00:2f:a8:
25:eb:6d:9c:52:b3:b4:a0:ba:9d:ff:29:8f:11:6c:d8:be:50:
cb:19:9b:43:5c:f8:74:1b:ce:57:65:32:86:55:5c:68:cb:ff:
4e:ee:8b:20:db:ee:5c:2d:92:2f:3a:3a:c8:44:0e:77:80:39:
d0:1b:58:ed:a9:44:e8:d1:da:3f:02:70:b5:d6:f1:10:a0:64:
44:02:48:8e:3d:66:fe:65:eb:3b:11:3b:2c:d8:ab:1f:fb:a4:
8b:18:d0:7a:38:db:52:6f:ab:9c:4a:1e:38:38:45:b5:b2:f0:
bc:42:34:3f:6b:ec:b1:4e:e3:e9:f1:89:71:45:10:97:78:0b:
3c:da:3e:30:6e:d7:46:16:ef:f9:95:93:2d:db:74:e1:5e:78:
1f:d5:aa:2e:a2:9a:99:6b:4a:1a:07:b0:8e:60:79:aa:80:88:
83:f3:1e:2e:db:04:53:df:36:f0:a2:04:ba:c7:5d:a5:e5:9d:
8b:f2:12:a4:f7:22:83:8c:30:2e:5a:71:0e:1a:58:72:26:13:
78:18:38:c2:fc:b1:91:c9:8b:cb:c4:c4:fb:e8:b3:cf:37:b4:
16:52:5c:5c:1a:8f:61:1e:71:7e:36:89:0d:a6:36:70:f9:87:
b8:3d:81:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxJwzwKJMMF4GXpBYdKzF2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjMxMjA4MTQwOTQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTZhODg1YzM0YzNkZTNmOGFjYzU3Y2U5NjIwOWJiZWEyYmVkNDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknujV80M/A7CyDpqJNuNPnDGpwkw
W4WI/uXkqVwKI+BgWkNq/4gfvAuY4yvCUPU2XUKW/SSOhd0lc4sp68JygF0gRSvj
iblQ4mtJItADo6vHZA6SGxwntxCG9C/TizcraP+nq4s8AWJ0+wC5pVRVIoB+JOm9
zuCSxTEe2fHdYU0AnU2ery1Ru/UJzDTIviAQFLliOuVyQ0VdtYybw9WPqTKgO1Zb
2OQH4QcTzSlpTaFczo76+ROVzOc4LaRJnlZty548folfjUcYVFFeKT+UTOV4J+xW
UdRfWWqznTlX+TNf/APPtX6De7CmWEjc3SU74pwxm0q7A8YZm0dYOXWmRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG5qiFw0w94/isxXzpYgm76ivtR3MB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvYm1xSVhEVEQzai1LekZmT2xpQ2J2cUstMUhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCky18MA0G
CSqGSIb3DQEBCwUAA4IBAQCaBWpNE9ZUo4OW7TZhna0AL6gl622cUrO0oLqd/ymP
EWzYvlDLGZtDXPh0G85XZTKGVVxoy/9O7osg2+5cLZIvOjrIRA53gDnQG1jtqUTo
0do/AnC11vEQoGREAkiOPWb+Zes7ETss2Ksf+6SLGNB6ONtSb6ucSh44OEW1svC8
QjQ/a+yxTuPp8YlxRRCXeAs82j4wbtdGFu/5lZMt23ThXngf1aouopqZa0oaB7CO
YHmqgIiD8x4u2wRT3zbwogS6x12l5Z2L8hKk9yKDjDAuWnEOGlhyJhN4GDjC/LGR
yYvLxMT76LPPN7QWUlxcGo9hHnF+NokNpjZw+Ye4PYEB
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:05 2024 by rpki-client on console-fra.rpki-client.org