Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/Bjbxu_UTv2DE6bhA8j60aM783_4.roa
File: Bjbxu_UTv2DE6bhA8j60aM783_4.roa (raw, json)
Hash identifier: JKjLuc0jiU3tUuZak8w/Ks96X8UA25alOWbIUR2dbfw=
Subject key identifier: 06:36:F1:BB:F5:13:BF:60:C4:E9:B8:40:F2:3E:B4:68:CE:FC:DF:FE
Certificate issuer: /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Certificate serial: 018EA36B3BAA21AFB3CF638135C420315198
Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/Bjbxu_UTv2DE6bhA8j60aM783_4.roa
Signing time: Wed 03 Apr 2024 10:04:57 +0000
ROA not before: Wed 03 Apr 2024 10:04:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34407
IP address blocks: 185.162.100.0/22 maxlen: 22
195.8.96.0/24 maxlen: 24
2a07:c400::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 May 2024 12:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:6b:3b:aa:21:af:b3:cf:63:81:35:c4:20:31:51:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Validity
Not Before: Apr 3 10:04:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0636f1bbf513bf60c4e9b840f23eb468cefcdffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:7d:27:25:bf:24:ce:11:88:94:d0:2a:e2:
76:d7:b3:c8:17:39:ed:c1:bc:1a:5b:c2:7c:65:4b:
d0:f2:ab:e2:93:c1:fc:c6:4a:62:37:63:bb:2c:3c:
0b:6d:64:19:9b:7c:c9:80:ca:38:e0:4a:de:18:b4:
48:4f:db:cf:29:cb:32:37:6f:6e:64:1f:da:75:be:
9a:be:1b:1e:53:ff:94:7b:ea:81:4b:99:46:fa:b8:
78:79:6f:86:ea:b4:29:5f:37:a4:c5:89:32:73:c9:
08:90:af:84:af:37:8c:4b:17:c4:d4:00:0f:ae:ba:
5e:8b:2a:9b:67:06:a6:91:b9:0a:cb:98:3f:ad:a5:
2e:de:36:76:78:41:cf:15:f3:22:7a:82:bf:6b:ac:
a9:13:36:d4:21:99:29:94:2e:c4:70:4d:26:31:80:
8c:74:d0:e9:ce:f4:08:60:ec:de:3d:da:39:75:db:
47:db:b0:12:95:fc:d2:f6:b6:6e:a3:49:74:68:9a:
ec:ce:39:45:05:59:1b:71:18:65:84:6a:ee:5c:98:
b1:72:16:1d:bd:fb:eb:ca:23:7b:a9:43:dc:12:52:
db:7d:45:38:e9:97:1d:91:fa:1f:e3:8c:56:d5:1d:
7f:df:47:48:51:1d:d9:f7:be:9e:58:d4:fe:46:f6:
35:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:36:F1:BB:F5:13:BF:60:C4:E9:B8:40:F2:3E:B4:68:CE:FC:DF:FE
X509v3 Authority Key Identifier:
keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/Bjbxu_UTv2DE6bhA8j60aM783_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.100.0/22
195.8.96.0/24
IPv6:
2a07:c400::/29
Signature Algorithm: sha256WithRSAEncryption
68:b3:30:50:e6:7b:92:38:a0:98:e9:f5:e7:01:52:33:f9:15:
f1:a2:ea:c3:b6:70:7a:51:22:e4:ea:19:90:03:d1:d3:57:5e:
df:61:59:85:02:d6:48:b9:52:33:6d:75:98:ae:19:cd:1a:ef:
20:71:46:5e:6b:64:51:60:27:63:48:34:46:43:7e:7e:88:8b:
39:55:b0:fd:48:7f:54:60:46:24:10:d8:82:19:ac:a4:bd:17:
47:78:03:a9:5e:18:a0:c3:74:3d:44:29:73:53:bf:f5:ce:ad:
6d:37:db:91:bb:00:6a:70:0f:03:23:e8:12:11:41:77:07:fd:
ad:05:0e:e9:23:eb:08:4e:56:3a:d3:ed:e8:35:61:18:30:d8:
d0:7f:09:ad:85:53:b4:b1:b5:20:e0:24:eb:9f:6f:3d:9a:95:
93:c8:a2:31:ab:48:4d:c5:d7:42:87:2a:6b:bb:23:35:62:65:
5f:cf:f8:92:e9:c3:fb:cf:2d:08:f1:10:4f:5f:ff:05:e4:f0:
f1:ea:70:02:54:d5:33:37:97:e8:e7:5c:8f:77:8d:73:6c:d5:
e4:08:29:e6:ee:4d:0b:45:d0:ef:2c:34:e1:b6:8f:ce:ca:70:
4e:be:3a:b7:dc:e1:14:1e:01:27:a3:61:3c:fa:6a:12:7f:e8:
bb:04:c9:ab
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAY6jazuqIa+zz2OBNcQgMVGYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODA3YTNkY2JjMDI1YWNmNjk3YmVmODFlNDAzYjRhOTZj
ZmJiNTEwHhcNMjQwNDAzMTAwNDU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjM2ZjFiYmY1MTNiZjYwYzRlOWI4NDBmMjNlYjQ2OGNlZmNkZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6F9JyW/JM4RiJTQKuJ217PIFznt
wbwaW8J8ZUvQ8qvik8H8xkpiN2O7LDwLbWQZm3zJgMo44EreGLRIT9vPKcsyN29u
ZB/adb6avhseU/+Ue+qBS5lG+rh4eW+G6rQpXzekxYkyc8kIkK+ErzeMSxfE1AAP
rrpeiyqbZwamkbkKy5g/raUu3jZ2eEHPFfMieoK/a6ypEzbUIZkplC7EcE0mMYCM
dNDpzvQIYOzePdo5ddtH27ASlfzS9rZuo0l0aJrszjlFBVkbcRhlhGruXJixchYd
vfvryiN7qUPcElLbfUU46Zcdkfof44xW1R1/30dIUR3Z976eWNT+RvY1hwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAY28bv1E79gxOm4QPI+tGjO/N/+MB8GA1UdIwQY
MBaAFFWAej3LwCWs9pe++B5AO0qWz7tRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTct
N2UyMTdiZWYyZDllLzEvQmpieHVfVVR2MkRFNmJoQThqNjBhTTc4M180LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTctN2UyMTdiZWYyZDll
LzEvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuaJkAwQA
wwhgMA0EAgACMAcDBQMqB8QAMA0GCSqGSIb3DQEBCwUAA4IBAQBoszBQ5nuSOKCY
6fXnAVIz+RXxourDtnB6USLk6hmQA9HTV17fYVmFAtZIuVIzbXWYrhnNGu8gcUZe
a2RRYCdjSDRGQ35+iIs5VbD9SH9UYEYkENiCGaykvRdHeAOpXhigw3Q9RClzU7/1
zq1tN9uRuwBqcA8DI+gSEUF3B/2tBQ7pI+sITlY60+3oNWEYMNjQfwmthVO0sbUg
4CTrn289mpWTyKIxq0hNxddChypruyM1YmVfz/iS6cP7zy0I8RBPX/8F5PDx6nAC
VNUzN5fo51yPd41zbNXkCCnm7k0LRdDvLDThto/OynBOvjq33OEUHgEno2E8+moS
f+i7BMmr
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:17 2024 by rpki-client on console-ams.rpki-client.org