Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/bGJZyPwxd8F5SjMyXD9jh9YZ9X4.roa
File: bGJZyPwxd8F5SjMyXD9jh9YZ9X4.roa (raw, json)
Hash identifier: MdJ4oMKhVIq8yk+qG7aJ/sPElfM+tLU1aDME3t61NtE=
Subject key identifier: 6C:62:59:C8:FC:31:77:C1:79:4A:33:32:5C:3F:63:87:D6:19:F5:7E
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F0F78F454344DDD5FBD11808F5AB72
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/bGJZyPwxd8F5SjMyXD9jh9YZ9X4.roa
Signing time: Mon 02 Jan 2023 10:04:55 +0000
ROA not before: Mon 02 Jan 2023 10:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48990
IP address blocks: 78.136.74.0/24 maxlen: 24
78.136.72.0/24 maxlen: 24
78.136.73.0/24 maxlen: 24
78.136.78.0/24 maxlen: 24
88.148.65.0/24 maxlen: 24
94.76.185.0/24 maxlen: 24
84.236.194.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:f7:8f:45:43:44:dd:d5:fb:d1:18:08:f5:ab:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c6259c8fc3177c1794a33325c3f6387d619f57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:03:f7:f2:08:ba:bd:d6:2c:2c:f3:85:b5:bd:
64:10:72:0f:9f:1c:62:8f:5e:6a:a4:c7:e9:4f:43:
52:da:e8:28:8b:ab:8f:28:ad:54:a6:a4:86:72:be:
c3:63:42:21:c6:b0:8c:cd:dd:f1:94:fc:ae:0b:c9:
6a:0c:ff:bf:ad:e5:a7:4a:a9:ae:54:9e:81:6c:5c:
09:a6:b1:8f:98:01:d2:ff:bd:7d:80:0b:2c:d4:2b:
65:52:65:ef:9b:6a:b4:da:0b:9c:d1:55:e2:68:7b:
92:13:ec:20:27:eb:c5:7e:df:fe:ab:a8:ad:b5:57:
63:12:36:b5:0f:75:8c:3a:12:ab:b6:5c:51:e5:0e:
d4:48:c2:0d:77:cd:af:6c:c1:a7:6e:6c:cd:b6:5a:
d5:88:01:ee:77:c0:4d:a5:53:2a:5e:db:ab:f7:11:
55:67:d0:ed:c2:2a:f3:71:20:f2:a1:4c:82:95:58:
1b:0c:22:c3:09:c8:b8:cc:af:9e:86:77:d4:a2:2f:
43:8b:3f:a3:b1:56:ff:a4:62:4a:59:0e:4e:c6:44:
f0:02:dd:e0:5b:7b:ad:74:bc:1e:b2:89:94:7f:fc:
72:70:e5:5b:b8:fd:40:53:b6:dd:af:2b:d6:26:c7:
06:d3:29:74:38:a2:69:d7:a7:6f:46:3b:ca:b2:aa:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:62:59:C8:FC:31:77:C1:79:4A:33:32:5C:3F:63:87:D6:19:F5:7E
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/bGJZyPwxd8F5SjMyXD9jh9YZ9X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.72.0-78.136.74.255
78.136.78.0/24
84.236.194.0/23
88.148.65.0/24
94.76.185.0/24
Signature Algorithm: sha256WithRSAEncryption
08:16:a8:10:f7:23:d9:80:e1:e1:19:44:cd:ef:17:d5:0b:08:
0f:ab:9c:b6:de:8c:95:b7:0c:c8:dc:29:6a:18:82:fd:a6:f5:
f8:e8:3a:d8:15:91:49:fb:67:e8:1b:e6:ea:a4:8f:ce:c5:de:
27:19:f7:be:ff:13:05:71:e3:5f:76:2f:54:d4:45:79:d6:73:
e1:2d:b9:2d:60:81:bc:93:b5:7b:68:f6:22:8e:3d:84:68:f5:
d6:12:61:b1:4f:6d:a3:b6:12:37:4e:d9:6d:ca:a5:05:8d:25:
87:9d:ac:77:46:0d:7a:0a:03:b9:f5:03:e9:84:f0:3f:f2:29:
f9:f2:70:c5:ff:0a:7f:e5:3a:c9:40:5d:22:f9:95:6b:74:bd:
26:ff:96:98:d4:7f:52:40:65:2e:ec:7c:ee:fe:fe:67:46:c6:
c6:8d:69:eb:1f:5d:af:75:10:51:01:7c:0c:2c:23:92:fc:82:
92:b7:34:fa:40:d3:60:3e:0b:7b:77:77:8a:e4:36:ae:c3:18:
53:38:ae:58:59:2a:c5:03:c1:94:db:88:86:2e:b2:98:39:61:
8d:51:ce:3a:0e:6d:1d:90:fd:05:1e:e4:91:80:e3:9f:34:36:
06:7f:09:b2:d4:4e:d2:d1:f6:4d:32:62:56:42:6c:7a:b5:df:
ad:1c:cc:55
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYVx8PePRUNE3dX70RgI9atyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjMwMTAyMTAwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzYyNTljOGZjMzE3N2MxNzk0YTMzMzI1YzNmNjM4N2Q2MTlmNTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwP38gi6vdYsLPOFtb1kEHIPnxxi
j15qpMfpT0NS2ugoi6uPKK1UpqSGcr7DY0IhxrCMzd3xlPyuC8lqDP+/reWnSqmu
VJ6BbFwJprGPmAHS/719gAss1CtlUmXvm2q02guc0VXiaHuSE+wgJ+vFft/+q6it
tVdjEja1D3WMOhKrtlxR5Q7USMINd82vbMGnbmzNtlrViAHud8BNpVMqXtur9xFV
Z9DtwirzcSDyoUyClVgbDCLDCci4zK+ehnfUoi9Diz+jsVb/pGJKWQ5OxkTwAt3g
W3utdLwesomUf/xycOVbuP1AU7bdryvWJscG0yl0OKJp16dvRjvKsqpNvQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFGxiWcj8MXfBeUozMlw/Y4fWGfV+MB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvYkdKWnlQd3hkOEY1U2pNeVhEOWpoOVlaOVg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBANOiEgD
BABOiEoDBABOiE4DBAFU7MIDBABYlEEDBABeTLkwDQYJKoZIhvcNAQELBQADggEB
AAgWqBD3I9mA4eEZRM3vF9ULCA+rnLbejJW3DMjcKWoYgv2m9fjoOtgVkUn7Z+gb
5uqkj87F3icZ977/EwVx4192L1TURXnWc+EtuS1ggbyTtXto9iKOPYRo9dYSYbFP
baO2EjdO2W3KpQWNJYedrHdGDXoKA7n1A+mE8D/yKfnycMX/Cn/lOslAXSL5lWt0
vSb/lpjUf1JAZS7sfO7+/mdGxsaNaesfXa91EFEBfAwsI5L8gpK3NPpA02A+C3t3
d4rkNq7DGFM4rlhZKsUDwZTbiIYuspg5YY1RzjoObR2Q/QUe5JGA4580NgZ/CbLU
TtLR9k0yYlZCbHq1360czFU=
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:36 2024 by rpki-client on console-fra.rpki-client.org