Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/bkiN8RodPtY8DjrH_524cu79FLw.roa
File: bkiN8RodPtY8DjrH_524cu79FLw.roa (raw, json)
Hash identifier: acb8mWWJjJkceIPBBqDXKhy+RwCs61v99nFZXa5EOz4=
Subject key identifier: 6E:48:8D:F1:1A:1D:3E:D6:3C:0E:3A:C7:FF:9D:B8:72:EE:FD:14:BC
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 0185735F06561F4EADD57A4C8B44673E88C8
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/bkiN8RodPtY8DjrH_524cu79FLw.roa
Signing time: Mon 02 Jan 2023 16:44:45 +0000
ROA not before: Mon 02 Jan 2023 16:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50204
IP address blocks: 91.196.60.0/22 maxlen: 22
195.69.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:5f:06:56:1f:4e:ad:d5:7a:4c:8b:44:67:3e:88:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Jan 2 16:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e488df11a1d3ed63c0e3ac7ff9db872eefd14bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:fd:91:71:0f:14:ca:d8:f9:e5:73:92:44:
34:ed:92:fa:d8:5b:92:82:e2:fd:3c:cc:a3:02:31:
14:4c:59:e6:e4:a6:b3:70:76:8c:0c:4e:78:a6:2c:
64:0c:3f:2d:15:8c:48:9a:90:b8:e3:0b:49:5c:d3:
23:48:e8:33:6b:07:36:33:54:59:9e:13:24:0d:87:
4e:67:ed:e1:69:cc:fc:69:a6:52:d3:25:69:a7:3c:
29:c9:9d:0d:ca:b2:b5:5d:0b:f7:1a:17:ca:7b:d8:
9b:a5:d5:4d:67:42:f7:24:1f:7e:4a:f9:43:78:fa:
7c:50:94:6c:aa:90:49:bd:5d:c3:3a:20:8a:a4:33:
76:85:23:53:a0:43:c6:be:1e:d7:53:4f:de:36:b0:
f9:95:60:0e:5e:0d:4b:09:44:35:3f:44:b9:35:09:
a4:55:0f:3c:6c:6f:98:7f:62:1d:17:b4:57:8b:10:
d9:b9:09:94:4a:a8:0e:d6:18:8e:bd:6a:6f:92:f8:
e7:37:0f:b6:41:e6:8c:c7:e3:e5:0a:1a:70:6f:8f:
f1:59:01:87:a3:90:66:2b:e8:14:f5:46:fc:6d:9d:
fb:04:dc:8c:97:99:dd:42:56:1d:61:53:bc:5f:86:
58:06:db:0e:8d:0f:e9:3b:3e:01:bf:fd:be:72:3a:
23:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:48:8D:F1:1A:1D:3E:D6:3C:0E:3A:C7:FF:9D:B8:72:EE:FD:14:BC
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/bkiN8RodPtY8DjrH_524cu79FLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.60.0/22
195.69.248.0/22
Signature Algorithm: sha256WithRSAEncryption
82:a4:35:d0:70:77:0c:85:ae:72:f5:e1:57:e0:77:ce:89:f6:
28:b7:96:ca:a4:6b:12:a7:6c:23:a6:bc:b0:3d:93:2a:13:9c:
8d:27:50:31:5c:2e:fb:41:70:54:4d:22:48:35:7a:b5:1b:f6:
a4:2a:bb:72:04:14:8a:d8:fe:0f:85:f9:58:fd:b9:aa:8c:6d:
51:59:cd:2d:a0:48:04:64:b2:a8:64:e0:d1:7f:b5:74:0f:f0:
91:8e:db:4c:18:7d:90:d5:f1:57:ee:d4:d1:bd:1d:3b:dd:b6:
9f:47:8c:ea:af:e1:4d:4f:a1:6c:78:49:7f:aa:85:48:a1:bc:
08:b5:95:20:d1:54:2b:af:b0:60:f9:b3:e4:0f:cf:88:4b:67:
ec:32:38:62:b9:66:37:b3:18:e3:b4:4e:cc:59:c3:57:30:c8:
c4:b0:cf:0c:38:f9:5a:e7:aa:0c:72:b9:9a:ce:d3:67:20:32:
0e:29:10:d4:c5:93:eb:ac:44:39:eb:99:c3:5b:ce:4d:95:a3:
da:9e:19:d0:5b:d5:45:e7:98:fc:cd:e0:a7:15:9a:11:4e:bc:
19:e6:1e:1c:1b:6b:05:c7:6c:70:77:d8:0b:4e:92:16:f7:cd:
0a:75:51:21:0f:ae:54:23:21:ac:d5:3e:60:83:9d:a4:03:2b:
b5:18:43:f3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVzXwZWH06t1XpMi0RnPojIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZTZlYTgzOTI2YmM0NzhjNzg1NDcxZDgwNWE1YzEyMTBh
OGM5OTMwHhcNMjMwMTAyMTY0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTQ4OGRmMTFhMWQzZWQ2M2MwZTNhYzdmZjlkYjg3MmVlZmQxNGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjD9kXEPFMrY+eVzkkQ07ZL62FuS
guL9PMyjAjEUTFnm5KazcHaMDE54pixkDD8tFYxImpC44wtJXNMjSOgzawc2M1RZ
nhMkDYdOZ+3hacz8aaZS0yVppzwpyZ0NyrK1XQv3GhfKe9ibpdVNZ0L3JB9+SvlD
ePp8UJRsqpBJvV3DOiCKpDN2hSNToEPGvh7XU0/eNrD5lWAOXg1LCUQ1P0S5NQmk
VQ88bG+Yf2IdF7RXixDZuQmUSqgO1hiOvWpvkvjnNw+2QeaMx+PlChpwb4/xWQGH
o5BmK+gU9Ub8bZ37BNyMl5ndQlYdYVO8X4ZYBtsOjQ/pOz4Bv/2+cjojowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG5IjfEaHT7WPA46x/+duHLu/RS8MB8GA1UdIwQY
MBaAFGHm6oOSa8R4x4VHHYBaXBIQqMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWVicWc1SnJ4SGpIaFVjZGdGcGNFaENveVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83NGJmNDEtZDZhNy00ZmI1LTgwMWMt
MzNjYzNhZGIxZTc4LzEvYmtpTjhSb2RQdFk4RGpySF81MjRjdTc5Rkx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83NGJmNDEtZDZhNy00ZmI1LTgwMWMtMzNjYzNhZGIxZTc4
LzEvWWVicWc1SnJ4SGpIaFVjZGdGcGNFaENveVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8Q8AwQC
w0X4MA0GCSqGSIb3DQEBCwUAA4IBAQCCpDXQcHcMha5y9eFX4HfOifYot5bKpGsS
p2wjprywPZMqE5yNJ1AxXC77QXBUTSJINXq1G/akKrtyBBSK2P4PhflY/bmqjG1R
Wc0toEgEZLKoZODRf7V0D/CRjttMGH2Q1fFX7tTRvR073bafR4zqr+FNT6FseEl/
qoVIobwItZUg0VQrr7Bg+bPkD8+IS2fsMjhiuWY3sxjjtE7MWcNXMMjEsM8MOPla
56oMcrmaztNnIDIOKRDUxZPrrEQ565nDW85NlaPanhnQW9VF55j8zeCnFZoRTrwZ
5h4cG2sFx2xwd9gLTpIW980KdVEhD65UIyGs1T5gg52kAyu1GEPz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:17 2024 by rpki-client on console-fra.rpki-client.org