Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/bbcRQxQOlsWNUb2PiM5sl8KVyfQ.roa
File: bbcRQxQOlsWNUb2PiM5sl8KVyfQ.roa (raw, json)
Hash identifier: Qubhr0NHSTqDnqkWL9e6YF5PWKhwMAOWBX/Hi5msrWk=
Subject key identifier: 6D:B7:11:43:14:0E:96:C5:8D:51:BD:8F:88:CE:6C:97:C2:95:C9:F4
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 018AB2B9847C4450333F16B428DCA8B7D841
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/bbcRQxQOlsWNUb2PiM5sl8KVyfQ.roa
Signing time: Wed 20 Sep 2023 13:13:37 +0000
ROA not before: Wed 20 Sep 2023 13:13:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64441
IP address blocks: 91.212.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:b9:84:7c:44:50:33:3f:16:b4:28:dc:a8:b7:d8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Sep 20 13:13:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6db71143140e96c58d51bd8f88ce6c97c295c9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:01:27:20:18:4f:83:4d:db:c8:24:6f:5d:
c3:e2:09:f4:d3:e4:f0:f1:06:bb:7a:83:9c:fd:a5:
21:61:ce:53:1c:ef:1a:d6:ba:8d:84:cb:7b:1e:ae:
65:32:87:11:48:2e:32:ed:1b:1b:f0:01:4a:79:4e:
7c:43:ce:5d:92:6e:3a:84:fc:db:5a:ab:d5:ba:3f:
86:d3:97:d3:40:2e:55:44:cc:20:2d:b1:50:be:f5:
e2:7b:ae:69:ca:05:65:6e:bd:94:38:a9:d5:7f:d3:
45:7e:ca:fc:b7:d7:0e:2b:56:9e:51:c4:63:6f:17:
4f:39:a4:25:9a:e2:1a:e8:49:f8:08:24:29:04:18:
61:f4:a5:78:b1:17:60:16:69:08:e3:9f:68:bb:06:
9a:84:11:6f:ec:09:cd:bb:a8:da:72:4f:85:59:7f:
50:7a:6b:6c:21:99:79:42:dc:66:cc:44:2c:7a:3f:
09:97:b2:fb:27:d1:9f:9f:16:25:15:08:a0:97:3d:
25:f7:77:21:63:dc:ba:65:e7:3e:31:c1:36:9b:05:
4c:2d:6e:02:18:d4:ca:2b:ff:87:a1:71:66:91:65:
55:7f:d1:83:fe:9c:43:b0:c2:d2:b6:ac:cc:89:52:
66:75:b2:42:2d:78:e0:17:55:78:6a:5e:94:0d:22:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B7:11:43:14:0E:96:C5:8D:51:BD:8F:88:CE:6C:97:C2:95:C9:F4
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/bbcRQxQOlsWNUb2PiM5sl8KVyfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.227.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:19:97:db:73:41:62:0f:0b:78:dc:3c:97:01:2a:b0:60:89:
09:50:ed:0a:91:e3:25:9a:bb:d9:7b:25:2c:01:01:ef:3b:1f:
b9:2e:70:40:f5:28:c6:6f:d8:ee:74:47:14:58:f9:74:45:dd:
e1:c0:2d:7b:61:9f:e2:d8:a7:16:e3:d7:29:40:4d:70:b9:bb:
f7:10:e9:45:7a:7c:74:48:94:55:fc:f6:d0:27:c8:f3:23:b2:
4b:be:24:e0:ac:35:6c:4f:c2:2d:de:e2:74:93:68:8b:3b:23:
ba:ce:8f:f6:ed:8e:49:76:22:31:fb:40:e2:01:f6:ee:b2:cb:
76:01:d4:76:cc:3c:bf:76:19:65:ba:36:9a:5d:8c:34:74:e4:
95:c0:fa:3e:88:f6:dc:24:90:cb:58:c5:f7:6b:2d:b0:f0:08:
24:7f:ac:dc:54:62:95:eb:04:8c:60:66:cd:41:31:63:a2:44:
4d:12:46:ce:92:19:ad:2a:3b:b6:f9:45:c0:e9:32:41:09:39:
9f:74:ab:36:c0:ee:19:81:18:5b:18:55:a3:25:fe:40:ea:89:
2f:d7:f0:74:d2:d3:e1:25:61:82:36:44:43:b9:f9:65:48:9d:
f5:3b:2d:9d:de:4d:e2:7a:c8:81:5a:7a:0c:c3:7b:e0:d1:01:
47:86:be:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqyuYR8RFAzPxa0KNyot9hBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWQ3YzU3NzE0ZWY0MGZkYjAxNjVkYzE5ODQ1ODBjZTFk
NTkwNmIwHhcNMjMwOTIwMTMxMzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGI3MTE0MzE0MGU5NmM1OGQ1MWJkOGY4OGNlNmM5N2MyOTVjOWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/gBJyAYT4NN28gkb13D4gn00+Tw
8Qa7eoOc/aUhYc5THO8a1rqNhMt7Hq5lMocRSC4y7Rsb8AFKeU58Q85dkm46hPzb
WqvVuj+G05fTQC5VRMwgLbFQvvXie65pygVlbr2UOKnVf9NFfsr8t9cOK1aeUcRj
bxdPOaQlmuIa6En4CCQpBBhh9KV4sRdgFmkI459ouwaahBFv7AnNu6jack+FWX9Q
emtsIZl5QtxmzEQsej8Jl7L7J9GfnxYlFQiglz0l93chY9y6Zec+McE2mwVMLW4C
GNTKK/+HoXFmkWVVf9GD/pxDsMLStqzMiVJmdbJCLXjgF1V4al6UDSJaHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG23EUMUDpbFjVG9j4jObJfClcn0MB8GA1UdIwQY
MBaAFNudfFdxTvQP2wFl3BmEWAzh1ZBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUt
ZjA3ODFhNjNlNDQwLzEvYmJjUlF4UU9sc1dOVWIyUGlNNXNsOEtWeWZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUtZjA3ODFhNjNlNDQw
LzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9TjMA0G
CSqGSIb3DQEBCwUAA4IBAQANGZfbc0FiDwt43DyXASqwYIkJUO0KkeMlmrvZeyUs
AQHvOx+5LnBA9SjGb9judEcUWPl0Rd3hwC17YZ/i2KcW49cpQE1wubv3EOlFenx0
SJRV/PbQJ8jzI7JLviTgrDVsT8It3uJ0k2iLOyO6zo/27Y5JdiIx+0DiAfbusst2
AdR2zDy/dhllujaaXYw0dOSVwPo+iPbcJJDLWMX3ay2w8Agkf6zcVGKV6wSMYGbN
QTFjokRNEkbOkhmtKju2+UXA6TJBCTmfdKs2wO4ZgRhbGFWjJf5A6okv1/B00tPh
JWGCNkRDufllSJ31Oy2d3k3iesiBWnoMw3vg0QFHhr5M
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:40 2024 by rpki-client on console-fra.rpki-client.org