Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Bm19QnlB5fRNGGB_Jqa6PuiPaiI.roa
File: Bm19QnlB5fRNGGB_Jqa6PuiPaiI.roa (raw, json)
Hash identifier: Yi2aywYnAeFUYZqGAwVPccS5NFQ63D7+hHwPzth0FPo=
Subject key identifier: 06:6D:7D:42:79:41:E5:F4:4D:18:60:7F:26:A6:BA:3E:E8:8F:6A:22
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 01926C23184FEE774C331AD732317928001E
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Bm19QnlB5fRNGGB_Jqa6PuiPaiI.roa
Signing time: Tue 08 Oct 2024 12:38:12 +0000
ROA not before: Tue 08 Oct 2024 12:38:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.93.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 11:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:23:18:4f:ee:77:4c:33:1a:d7:32:31:79:28:00:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Oct 8 12:38:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=066d7d427941e5f44d18607f26a6ba3ee88f6a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:30:1d:cd:9b:99:e1:5f:44:44:36:37:d7:
4c:0a:0d:4f:b2:c7:48:06:96:1a:a2:4b:9a:f4:6b:
4c:86:34:88:f9:a1:b7:ca:79:53:1f:2f:97:d5:af:
a5:2d:5a:a3:75:42:51:fe:99:8b:df:e7:3c:00:19:
a8:f4:22:80:80:3d:03:33:d8:74:2b:72:c7:85:f0:
7a:3f:7f:44:cf:28:6f:f5:89:3d:9f:bc:15:d6:47:
d7:95:e4:be:44:e3:a9:be:ab:6d:3c:a3:d1:31:94:
c1:e7:b7:ed:15:64:d9:96:6b:94:e9:62:13:f0:74:
db:5e:94:db:ab:a4:a4:85:80:d6:b4:af:36:21:f6:
3f:e7:82:86:b9:7f:0d:5d:81:42:15:18:b2:a1:ad:
5e:73:ef:f3:94:5e:ff:01:7f:80:83:56:00:cc:fb:
17:89:a3:f8:e0:d4:c2:e8:02:2b:c4:33:c9:8f:34:
b2:49:da:45:6c:f4:52:21:af:a9:a0:90:30:8b:df:
88:50:8f:66:1a:ae:cd:12:b2:78:80:07:ff:13:f9:
e2:41:6a:f5:72:29:e9:5c:68:66:09:df:c0:6f:a0:
e0:4e:01:9b:b8:bf:d8:22:67:80:98:cf:e0:5e:e0:
62:86:79:e6:45:f3:81:72:b7:fc:2f:c3:09:bb:1f:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6D:7D:42:79:41:E5:F4:4D:18:60:7F:26:A6:BA:3E:E8:8F:6A:22
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Bm19QnlB5fRNGGB_Jqa6PuiPaiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.140.0/22
Signature Algorithm: sha256WithRSAEncryption
18:89:69:11:e9:72:f5:76:f6:49:64:02:d6:15:09:b9:d2:0e:
3f:49:93:e1:a5:36:df:6a:07:f5:c2:10:95:99:e6:7e:1e:27:
5e:49:9d:e6:cd:00:d5:2f:be:f6:ba:f4:e7:e9:98:ab:d9:95:
29:c2:f9:a2:d3:db:25:6d:c1:9e:24:2a:86:a5:0e:10:63:13:
80:7f:2f:da:ef:39:76:70:97:4c:bd:a8:81:e5:a4:e8:85:46:
96:c0:5a:b9:aa:15:7a:f2:00:47:41:93:0d:23:7e:bb:45:b5:
19:d7:22:f3:5c:39:22:87:d0:db:aa:37:be:cd:61:52:f8:68:
a4:f3:c8:75:a1:1c:e3:03:4e:2e:a4:d5:b6:fa:b4:91:ad:0b:
12:ab:dd:4a:24:09:65:d1:04:d9:5f:ee:d5:5e:66:b6:b2:80:
cd:cb:af:1c:ec:a6:6d:ae:ad:d3:b9:be:b1:ab:7e:21:54:19:
4d:7d:4f:0f:a4:f9:0b:34:e2:2d:80:f6:27:07:15:4d:dc:2a:
4a:49:04:05:ce:bd:2a:8c:13:25:4f:95:e7:77:e3:2d:61:a6:
bc:b6:49:46:2b:21:38:aa:17:b9:3b:88:55:b5:ad:61:5b:6a:
8b:4e:8f:9b:ab:33:7b:75:62:24:54:65:c8:7a:6e:83:af:ad:
a1:ef:28:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJsIxhP7ndMMxrXMjF5KAAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWEzNDE3ZmJlMjVjMmU0NjdjMTg0ODVjMTgxYTc3NzZm
OTZmZjQwHhcNMjQxMDA4MTIzODEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjZkN2Q0Mjc5NDFlNWY0NGQxODYwN2YyNmE2YmEzZWU4OGY2YTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva0wHc2bmeFfREQ2N9dMCg1PssdI
BpYaokua9GtMhjSI+aG3ynlTHy+X1a+lLVqjdUJR/pmL3+c8ABmo9CKAgD0DM9h0
K3LHhfB6P39Ezyhv9Yk9n7wV1kfXleS+ROOpvqttPKPRMZTB57ftFWTZlmuU6WIT
8HTbXpTbq6SkhYDWtK82IfY/54KGuX8NXYFCFRiyoa1ec+/zlF7/AX+Ag1YAzPsX
iaP44NTC6AIrxDPJjzSySdpFbPRSIa+poJAwi9+IUI9mGq7NErJ4gAf/E/niQWr1
cinpXGhmCd/Ab6DgTgGbuL/YImeAmM/gXuBihnnmRfOBcrf8L8MJux9QQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAZtfUJ5QeX0TRhgfyamuj7oj2oiMB8GA1UdIwQY
MBaAFIpaNBf74lwuRnwYSFwYGnd2+W/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYt
ZDdhYmNkMGVmNjRhLzEvQm0xOVFubEI1ZlJOR0dCX0pxYTZQdWlQYWlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYtZDdhYmNkMGVmNjRh
LzEvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTV2MMA0G
CSqGSIb3DQEBCwUAA4IBAQAYiWkR6XL1dvZJZALWFQm50g4/SZPhpTbfagf1whCV
meZ+HideSZ3mzQDVL772uvTn6Zir2ZUpwvmi09slbcGeJCqGpQ4QYxOAfy/a7zl2
cJdMvaiB5aTohUaWwFq5qhV68gBHQZMNI367RbUZ1yLzXDkih9Dbqje+zWFS+Gik
88h1oRzjA04upNW2+rSRrQsSq91KJAll0QTZX+7VXma2soDNy68c7KZtrq3Tub6x
q34hVBlNfU8PpPkLNOItgPYnBxVN3CpKSQQFzr0qjBMlT5Xnd+MtYaa8tklGKyE4
qhe5O4hVta1hW2qLTo+bqzN7dWIkVGXIem6Dr62h7yga
-----END CERTIFICATE-----
Generated at Mon Nov 4 14:58:13 2024 by rpki-client on console-fra.rpki-client.org