Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/JBvvfS5g9zkmWDPNFt_BAPUts30.roa
File: JBvvfS5g9zkmWDPNFt_BAPUts30.roa (raw, json)
Hash identifier: OYQc7VLagb/V3tkP0ewg1JBKRBoTPiJZWuB+BAvu4qQ=
Subject key identifier: 24:1B:EF:7D:2E:60:F7:39:26:58:33:CD:16:DF:C1:00:F5:2D:B3:7D
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018C6C968635E132B34B724A7C5EB6D31479
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/JBvvfS5g9zkmWDPNFt_BAPUts30.roa
Signing time: Fri 15 Dec 2023 08:27:33 +0000
ROA not before: Fri 15 Dec 2023 08:27:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 91.193.253.0/24 maxlen: 24
93.89.211.0/24 maxlen: 24
193.109.160.0/22 maxlen: 24
93.89.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:96:86:35:e1:32:b3:4b:72:4a:7c:5e:b6:d3:14:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Dec 15 08:27:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=241bef7d2e60f739265833cd16dfc100f52db37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:45:20:8b:d8:a6:31:60:7c:bc:ce:41:6a:
5b:71:01:9a:89:ca:79:ba:93:24:23:5c:04:59:5d:
8a:1c:a0:92:c5:46:41:d2:42:33:40:d2:24:dc:06:
fa:cc:2a:2a:c1:34:96:00:45:52:5e:d0:b3:bc:a1:
40:88:f8:81:ec:d4:11:25:8d:ec:0f:0b:4c:10:2c:
01:fb:5b:02:13:7f:c5:2f:31:7f:56:d0:12:1e:99:
af:05:d6:44:36:58:55:a3:0f:b1:bd:a9:a4:a1:b0:
be:ff:d5:33:c5:f8:ad:05:1b:ef:74:6b:17:01:7a:
90:d9:2c:10:8c:6f:9e:32:20:b8:fc:21:4a:16:39:
1d:07:1a:b3:8b:ec:25:2d:46:d9:f7:da:1c:28:e8:
a9:01:99:22:65:60:aa:66:f7:5c:49:e4:34:c0:77:
10:08:f6:54:4f:82:1c:44:12:90:1d:a5:6e:f0:1b:
6e:4a:45:6d:a9:83:40:8d:b0:c0:1c:6d:d0:d0:88:
11:d1:97:5a:b0:b8:52:8e:7f:c8:76:7a:63:88:e0:
31:83:8d:4c:dd:cd:de:63:40:63:58:66:38:4b:66:
cd:27:aa:ca:2c:4a:f0:26:dd:9c:30:08:dc:54:a1:
c2:9e:9b:88:c4:08:b4:ac:bc:5b:98:31:e6:d7:78:
54:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1B:EF:7D:2E:60:F7:39:26:58:33:CD:16:DF:C1:00:F5:2D:B3:7D
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/JBvvfS5g9zkmWDPNFt_BAPUts30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.253.0/24
93.89.211.0/24
93.89.217.0/24
193.109.160.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:11:fb:1d:4b:1f:76:a3:79:7d:34:27:02:f3:2b:a0:59:7a:
f9:8d:2f:04:7d:a0:5a:d5:a7:6b:de:b1:0b:a8:49:ac:ed:b3:
38:9c:2b:1c:f7:86:6a:db:0b:3f:4e:13:9e:4d:ca:fd:e3:15:
88:5f:b2:29:d0:3a:53:7b:a7:9c:7e:36:a7:91:e0:fb:b6:99:
39:e4:ae:03:a2:0a:2a:ec:8e:96:11:ac:c6:fa:88:90:f1:37:
69:78:0b:0d:45:b9:b8:b1:aa:05:7f:bb:63:b7:04:ad:c8:af:
45:d1:50:05:f5:56:b8:bb:5b:39:1e:37:e8:d9:25:7b:59:bc:
45:e4:2a:5d:54:7c:ad:a6:5d:41:bf:d6:bc:f2:c0:26:33:a3:
6d:76:6f:ed:de:6c:2c:08:f0:20:a6:1f:d1:ef:01:e2:ee:f5:
eb:7e:7d:d2:38:87:d8:df:ec:ff:ff:44:c0:76:73:ff:90:d1:
6f:8c:17:0f:af:4f:32:e0:8b:7c:de:6b:93:cb:e6:d6:93:23:
73:86:43:5c:b6:cc:ab:51:1e:63:72:3b:fc:8b:c1:f5:71:40:
ac:8c:64:3d:38:91:0e:f8:a7:bd:34:0e:3e:33:6b:b6:76:07:
4d:3d:eb:6d:04:37:45:6f:1f:94:60:4f:52:90:52:57:a8:96:
b7:e3:a4:d2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYxsloY14TKzS3JKfF620xR5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjMxMjE1MDgyNzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDFiZWY3ZDJlNjBmNzM5MjY1ODMzY2QxNmRmYzEwMGY1MmRiMzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmxFIIvYpjFgfLzOQWpbcQGaicp5
upMkI1wEWV2KHKCSxUZB0kIzQNIk3Ab6zCoqwTSWAEVSXtCzvKFAiPiB7NQRJY3s
DwtMECwB+1sCE3/FLzF/VtASHpmvBdZENlhVow+xvamkobC+/9UzxfitBRvvdGsX
AXqQ2SwQjG+eMiC4/CFKFjkdBxqzi+wlLUbZ99ocKOipAZkiZWCqZvdcSeQ0wHcQ
CPZUT4IcRBKQHaVu8BtuSkVtqYNAjbDAHG3Q0IgR0ZdasLhSjn/IdnpjiOAxg41M
3c3eY0BjWGY4S2bNJ6rKLErwJt2cMAjcVKHCnpuIxAi0rLxbmDHm13hUGQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCQb730uYPc5JlgzzRbfwQD1LbN9MB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvSkJ2dmZTNWc5emttV0RQTkZ0X0JBUFV0czMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW8H9AwQA
XVnTAwQAXVnZAwQCwW2gMA0GCSqGSIb3DQEBCwUAA4IBAQC5EfsdSx92o3l9NCcC
8yugWXr5jS8EfaBa1adr3rELqEms7bM4nCsc94Zq2ws/ThOeTcr94xWIX7Ip0DpT
e6ecfjankeD7tpk55K4Dogoq7I6WEazG+oiQ8TdpeAsNRbm4saoFf7tjtwStyK9F
0VAF9Va4u1s5Hjfo2SV7WbxF5CpdVHytpl1Bv9a88sAmM6Ntdm/t3mwsCPAgph/R
7wHi7vXrfn3SOIfY3+z//0TAdnP/kNFvjBcPr08y4It83muTy+bWkyNzhkNctsyr
UR5jcjv8i8H1cUCsjGQ9OJEO+Ke9NA4+M2u2dgdNPettBDdFbx+UYE9SkFJXqJa3
46TS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org