Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/B-0tyO4VTO__fEAxQ-BPVt1ytUk.roa
File: B-0tyO4VTO__fEAxQ-BPVt1ytUk.roa (raw, json)
Hash identifier: coVg769wRRri9mC/M8fSXY4cmv3atJj7HDcsp++nsDA=
Subject key identifier: 07:ED:2D:C8:EE:15:4C:EF:FF:7C:40:31:43:E0:4F:56:DD:72:B5:49
Certificate issuer: /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial: 018CCA2B32C55A94BED03808D9B53C2AC7FB
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/B-0tyO4VTO__fEAxQ-BPVt1ytUk.roa
Signing time: Tue 02 Jan 2024 12:34:37 +0000
ROA not before: Tue 02 Jan 2024 12:34:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8405
IP address blocks: 193.36.3.0/24 maxlen: 24
193.36.42.0/24 maxlen: 24
193.35.216.0/24 maxlen: 24
193.36.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 15:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:32:c5:5a:94:be:d0:38:08:d9:b5:3c:2a:c7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
Validity
Not Before: Jan 2 12:34:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07ed2dc8ee154cefff7c403143e04f56dd72b549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:19:66:c8:71:87:0c:c5:6c:76:44:88:85:
b4:57:b1:e6:45:55:e7:73:77:90:75:b4:d6:a0:9e:
49:70:7b:3a:48:50:41:49:50:87:69:46:ff:80:c4:
84:1c:e5:6d:3a:f4:40:3e:fe:83:77:bc:95:a1:bb:
07:31:e8:6c:ad:ea:ac:6d:1c:a6:61:b3:f9:1f:8c:
fa:14:34:ae:07:5b:c3:f2:e4:5e:d9:78:3d:5b:5b:
bb:71:30:e8:41:79:1b:d1:24:93:40:cc:44:5d:37:
ed:c0:ef:06:1e:87:2e:b4:82:f3:6f:ec:ba:7c:ff:
8d:94:c3:ca:f4:dc:47:ad:3d:bf:8a:93:3f:37:13:
d6:8d:e1:85:ea:7b:80:5c:6b:7f:d2:0b:ff:7e:dc:
30:f4:ed:ad:74:2e:fa:be:09:88:a8:74:28:fb:c9:
4c:63:f2:45:28:0f:d5:3d:4f:9a:12:6f:f0:b2:62:
6e:c3:79:02:76:06:8d:74:27:21:45:12:b6:fc:8e:
97:e9:9b:d3:9d:04:90:d7:1e:b8:43:44:bf:b7:4f:
d7:b8:91:39:89:85:40:55:89:8b:32:8b:ca:37:01:
8a:1f:f1:a7:2b:92:7f:ca:76:16:76:c3:cb:07:ed:
77:96:24:b2:6a:b3:6d:75:c4:10:52:04:ec:f2:bf:
f7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:ED:2D:C8:EE:15:4C:EF:FF:7C:40:31:43:E0:4F:56:DD:72:B5:49
X509v3 Authority Key Identifier:
keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/B-0tyO4VTO__fEAxQ-BPVt1ytUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.216.0/24
193.36.3.0/24
193.36.42.0/24
193.36.74.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:10:f3:81:ad:c1:75:d0:c4:a7:f7:c2:44:4a:90:de:ec:92:
4e:70:2d:0c:50:68:40:df:91:0f:e8:f3:d0:64:d7:cc:38:8f:
1f:79:d7:c2:d5:72:34:c3:80:78:c3:79:d1:ba:56:1a:87:3f:
2f:ee:ed:a9:b3:b4:bd:9a:aa:50:24:83:27:53:f6:c5:1a:c7:
4d:b4:aa:03:45:6d:ce:15:ad:13:8a:76:c0:99:82:84:59:86:
e7:1c:9f:df:f1:73:18:12:5f:28:60:f6:5b:f8:2f:db:56:9d:
f6:28:8b:f3:1f:3a:af:ea:f4:db:35:36:fb:d3:05:20:aa:dd:
df:05:50:8e:74:a8:ea:9d:05:0d:98:a5:16:79:e2:4e:f8:37:
01:f7:b4:03:d2:01:3d:99:23:9a:bb:f0:c2:41:c6:a8:bc:2e:
70:6b:3b:29:4f:c8:96:2e:21:3a:10:3a:28:10:18:21:e9:3a:
35:d8:62:6e:e9:bf:5e:a0:1a:5b:50:d6:14:15:7f:cb:b0:10:
82:a2:e2:91:7c:db:fb:0e:6b:a3:8a:24:6e:8b:b1:36:2c:a6:
ad:d7:ae:03:07:66:56:1d:f1:d6:be:fc:84:09:f8:7e:0d:a4:
08:ea:9a:20:53:6d:dd:d4:7d:93:e7:4b:99:23:0c:4f:52:b9:
be:6c:4d:39
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzKKzLFWpS+0DgI2bU8Ksf7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjY2Q1MmE2YTdmOTU3MTcxYjE1ZjdiZTVlMjA5MTY0Mjgz
Njk0MDEwHhcNMjQwMTAyMTIzNDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2VkMmRjOGVlMTU0Y2VmZmY3YzQwMzE0M2UwNGY1NmRkNzJiNTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz0ZZshxhwzFbHZEiIW0V7HmRVXn
c3eQdbTWoJ5JcHs6SFBBSVCHaUb/gMSEHOVtOvRAPv6Dd7yVobsHMehsreqsbRym
YbP5H4z6FDSuB1vD8uRe2Xg9W1u7cTDoQXkb0SSTQMxEXTftwO8GHocutILzb+y6
fP+NlMPK9NxHrT2/ipM/NxPWjeGF6nuAXGt/0gv/ftww9O2tdC76vgmIqHQo+8lM
Y/JFKA/VPU+aEm/wsmJuw3kCdgaNdCchRRK2/I6X6ZvTnQSQ1x64Q0S/t0/XuJE5
iYVAVYmLMovKNwGKH/GnK5J/ynYWdsPLB+13liSyarNtdcQQUgTs8r/3AwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAftLcjuFUzv/3xAMUPgT1bdcrVJMB8GA1UdIwQY
MBaAFLzNUqan+VcXGxX3vl4gkWQoNpQBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk0xU3BxZjVWeGNiRmZlLVhpQ1JaQ2cybEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lZWFiOWEtZDIwNy00YjJlLWE1MjUt
ZTgyM2UxN2JiNWNjLzEvQi0wdHlPNFZUT19fZkVBeFEtQlBWdDF5dFVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9lZWFiOWEtZDIwNy00YjJlLWE1MjUtZTgyM2UxN2JiNWNj
LzEvdk0xU3BxZjVWeGNiRmZlLVhpQ1JaQ2cybEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwSPYAwQA
wSQDAwQAwSQqAwQAwSRKMA0GCSqGSIb3DQEBCwUAA4IBAQA8EPOBrcF10MSn98JE
SpDe7JJOcC0MUGhA35EP6PPQZNfMOI8fedfC1XI0w4B4w3nRulYahz8v7u2ps7S9
mqpQJIMnU/bFGsdNtKoDRW3OFa0TinbAmYKEWYbnHJ/f8XMYEl8oYPZb+C/bVp32
KIvzHzqv6vTbNTb70wUgqt3fBVCOdKjqnQUNmKUWeeJO+DcB97QD0gE9mSOau/DC
QcaovC5wazspT8iWLiE6EDooEBgh6To12GJu6b9eoBpbUNYUFX/LsBCCouKRfNv7
DmujiiRui7E2LKat164DB2ZWHfHWvvyECfh+DaQI6pogU23d1H2T50uZIwxPUrm+
bE05
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:59 2024 by rpki-client on console-ams.rpki-client.org