Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/BSeF2QjloQlZN6QLQ6nn7iJoirM.roa
File: BSeF2QjloQlZN6QLQ6nn7iJoirM.roa (raw, json)
Hash identifier: w/6yeC46CDF4AvByMe/hHeUxS5LXCoiFgo+sCNnZrqQ=
Subject key identifier: 05:27:85:D9:08:E5:A1:09:59:37:A4:0B:43:A9:E7:EE:22:68:8A:B3
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0192AF0D1D2656A4BDF870C8118F085FC3BB
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/BSeF2QjloQlZN6QLQ6nn7iJoirM.roa
Signing time: Mon 21 Oct 2024 12:28:45 +0000
ROA not before: Mon 21 Oct 2024 12:28:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44989
IP address blocks: 212.163.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:0d:1d:26:56:a4:bd:f8:70:c8:11:8f:08:5f:c3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Oct 21 12:28:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=052785d908e5a1095937a40b43a9e7ee22688ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:59:71:76:5c:ca:83:3c:d5:78:de:75:ee:
1e:87:b0:1a:30:fd:85:b4:0f:e2:39:04:e7:4c:78:
4f:7c:e7:f4:53:73:19:63:03:fb:c6:b8:ce:23:16:
0b:a7:f4:ca:a2:51:13:f9:10:2d:51:fa:42:f2:35:
c5:95:21:8a:b2:9f:87:d5:b2:97:ed:28:d8:df:61:
38:99:48:4f:4a:26:00:4b:09:61:5d:77:f2:bd:95:
aa:be:c9:78:be:c3:ca:77:a2:b0:17:7b:80:26:0b:
23:82:3e:9a:c0:5a:36:b7:00:88:ad:36:02:b9:10:
0f:57:59:89:61:5b:80:d6:6e:eb:d6:88:fd:b3:67:
f1:98:6b:73:e6:4d:ee:51:ec:ff:8a:2a:ba:cf:86:
d4:b0:bf:e2:1d:06:05:53:34:ee:4d:6b:d0:33:47:
d6:dd:d0:a9:57:90:d8:0b:90:e7:20:21:7f:55:84:
e5:4b:87:9b:71:33:59:46:3b:5e:11:63:92:10:f4:
67:8f:24:f1:f7:08:5b:9a:a4:70:8a:9f:a9:3b:80:
e3:0f:e2:f8:8f:3b:06:bb:a0:3e:b8:78:ef:64:51:
ff:aa:6c:33:8b:da:99:4e:4b:6c:41:64:e8:0b:9c:
1e:d7:13:77:65:5c:70:81:21:3a:ce:3f:99:d8:96:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:27:85:D9:08:E5:A1:09:59:37:A4:0B:43:A9:E7:EE:22:68:8A:B3
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/BSeF2QjloQlZN6QLQ6nn7iJoirM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.163.144.0/24
Signature Algorithm: sha256WithRSAEncryption
84:98:ed:3a:2e:ac:33:68:3c:77:42:19:57:ec:86:73:d4:f7:
db:40:e7:fc:fd:b1:cc:50:e8:c2:17:0f:52:87:60:e8:f5:77:
63:8a:46:da:f7:28:b6:1b:f3:de:25:12:21:a4:c4:a5:e0:9b:
09:db:77:23:0f:bd:2b:13:54:6e:22:8f:89:4f:1e:b2:3f:d2:
6a:30:1f:6e:3a:74:32:7f:28:7f:5c:8e:b6:87:11:36:43:95:
c5:f0:53:b4:99:f1:96:c1:8d:ce:4f:0a:40:ef:03:bd:51:c3:
8d:81:3a:06:05:e9:d4:07:bf:4e:46:3a:58:f7:f3:a0:dc:2f:
bf:17:5c:ef:1d:b4:cd:88:0a:13:66:c9:8b:d2:01:6b:d9:50:
b0:cf:8b:3c:5d:45:ae:35:95:6e:8d:80:d2:91:66:fd:75:6c:
1e:d1:2c:37:8a:d4:0a:36:d3:6c:79:8f:3d:11:aa:86:3e:20:
8a:19:bf:f1:4b:8d:4c:f1:3d:36:bf:d4:05:11:56:dd:1b:ec:
82:6a:d4:ab:85:ac:5d:c2:30:16:a2:72:5f:c8:34:cf:cc:0d:
2a:77:71:9d:83:a0:30:bb:e2:47:f1:62:ab:1a:63:81:8b:38:
1b:dd:54:7d:99:47:5f:d1:92:93:b5:4a:ce:66:91:f1:14:e0:
8c:fe:a2:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKvDR0mVqS9+HDIEY8IX8O7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx
ZDA5OWIwHhcNMjQxMDIxMTIyODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTI3ODVkOTA4ZTVhMTA5NTkzN2E0MGI0M2E5ZTdlZTIyNjg4YWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrpZcXZcyoM81Xjede4eh7AaMP2F
tA/iOQTnTHhPfOf0U3MZYwP7xrjOIxYLp/TKolET+RAtUfpC8jXFlSGKsp+H1bKX
7SjY32E4mUhPSiYASwlhXXfyvZWqvsl4vsPKd6KwF3uAJgsjgj6awFo2twCIrTYC
uRAPV1mJYVuA1m7r1oj9s2fxmGtz5k3uUez/iiq6z4bUsL/iHQYFUzTuTWvQM0fW
3dCpV5DYC5DnICF/VYTlS4ebcTNZRjteEWOSEPRnjyTx9whbmqRwip+pO4DjD+L4
jzsGu6A+uHjvZFH/qmwzi9qZTktsQWToC5we1xN3ZVxwgSE6zj+Z2Jbe+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAUnhdkI5aEJWTekC0Op5+4iaIqzMB8GA1UdIwQY
MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt
Mjc0NzNjYTYxMmRlLzEvQlNlRjJRamxvUWxaTjZRTFE2bm43aUpvaXJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl
LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1KOQMA0G
CSqGSIb3DQEBCwUAA4IBAQCEmO06LqwzaDx3QhlX7IZz1PfbQOf8/bHMUOjCFw9S
h2Do9Xdjikba9yi2G/PeJRIhpMSl4JsJ23cjD70rE1RuIo+JTx6yP9JqMB9uOnQy
fyh/XI62hxE2Q5XF8FO0mfGWwY3OTwpA7wO9UcONgToGBenUB79ORjpY9/Og3C+/
F1zvHbTNiAoTZsmL0gFr2VCwz4s8XUWuNZVujYDSkWb9dWwe0Sw3itQKNtNseY89
EaqGPiCKGb/xS41M8T02v9QFEVbdG+yCatSrhaxdwjAWonJfyDTPzA0qd3Gdg6Aw
u+JH8WKrGmOBizgb3VR9mUdf0ZKTtUrOZpHxFOCM/qKq
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:29:41 2025 by rpki-client