Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/BNuUQnWvC9dbi1o2PfDETvN9qew.roa
File: BNuUQnWvC9dbi1o2PfDETvN9qew.roa (raw, json)
Hash identifier: B3DoKoSgxBwjV1+jMmMGlQEu2W4b4UW5ZQMudOVaJhI=
Subject key identifier: 04:DB:94:42:75:AF:0B:D7:5B:8B:5A:36:3D:F0:C4:4E:F3:7D:A9:EC
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 018CC94E3391914F90D1E6EF8272CEC0BC24
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/BNuUQnWvC9dbi1o2PfDETvN9qew.roa
Signing time: Tue 02 Jan 2024 08:33:14 +0000
ROA not before: Tue 02 Jan 2024 08:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8352
IP address blocks: 185.65.141.0/24 maxlen: 24
91.213.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:33:91:91:4f:90:d1:e6:ef:82:72:ce:c0:bc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Jan 2 08:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04db944275af0bd75b8b5a363df0c44ef37da9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:f8:4d:70:f9:1a:dc:0f:1b:53:4b:35:fd:
fa:71:fd:f5:c4:11:9c:48:1a:e6:99:ef:47:fe:ab:
71:af:45:0d:08:18:99:0a:08:d7:e4:74:d0:b0:de:
62:b2:4d:ff:12:12:c1:04:a8:aa:57:b0:36:bc:a9:
dc:8b:ef:8a:75:c1:f4:b7:42:b6:d3:5e:b9:a2:01:
33:26:d6:1d:73:78:b2:5b:11:05:49:68:7f:6b:51:
83:b8:6a:81:54:60:58:0d:c6:db:ee:b8:d7:86:dc:
04:2b:3a:25:aa:1c:10:13:0a:2c:e4:4f:57:c6:2f:
73:1b:81:24:21:86:ac:c3:d2:c8:75:e3:86:ec:d9:
40:8c:15:f8:74:af:a4:32:8d:88:c4:8c:59:0e:5f:
7c:15:93:03:f8:1d:2d:90:48:21:15:21:68:40:77:
58:14:e5:01:96:96:04:7d:0b:43:48:a1:2a:39:f1:
72:34:45:59:c6:df:6b:3e:d4:36:41:03:b4:e6:aa:
fc:b5:ce:1c:32:5a:07:95:81:d9:62:20:8c:8d:99:
fb:65:28:79:9b:f7:10:a6:2e:89:51:5e:35:2b:4c:
96:0a:8e:77:5b:67:2e:33:44:46:38:2a:96:b6:0c:
5b:de:c5:d5:54:38:3d:f7:b1:b2:77:98:67:8e:f7:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DB:94:42:75:AF:0B:D7:5B:8B:5A:36:3D:F0:C4:4E:F3:7D:A9:EC
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/BNuUQnWvC9dbi1o2PfDETvN9qew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.148.0/24
185.65.141.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:74:39:8d:b7:2b:71:83:c9:c7:8f:e5:34:49:61:a6:71:fe:
ed:26:07:d9:5f:0c:02:77:3c:fa:b6:e6:c5:02:70:99:34:41:
73:3d:c8:b0:bf:c9:b8:99:62:0f:b9:20:cd:f9:83:3a:37:1b:
1c:3d:20:29:dd:40:6c:5a:d8:4b:3b:03:66:f6:17:f9:19:30:
69:33:f7:d5:4c:d0:0e:73:d1:1d:8c:5a:36:dc:cd:5d:ed:04:
83:05:dd:93:79:ff:d6:84:2d:6d:b6:ca:64:68:c7:69:16:5f:
97:a6:6a:28:dd:f6:51:ea:67:8f:d4:b2:3e:ea:46:97:d1:22:
70:c7:2f:a3:5d:4a:5a:45:e1:f7:da:12:9e:aa:38:8e:97:87:
d2:3a:5b:e7:d1:20:de:ec:60:fb:2a:11:37:8b:8d:fa:85:7d:
bf:8f:c3:7e:ef:0e:9b:b0:e0:1a:ad:9d:03:b2:ae:e9:84:a0:
45:c4:9b:37:98:30:58:a0:62:bf:30:f2:70:0d:9e:9e:7d:17:
8d:e6:be:54:d1:a3:68:c7:e1:0e:91:ed:7b:49:42:c3:91:87:
be:d3:78:b1:9a:9b:8b:78:6c:d9:2f:54:0c:bc:f0:d9:de:4f:
9d:ff:78:67:ae:73:a0:c5:ce:1c:87:4c:73:77:30:96:c6:39:
dc:d4:e7:6a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJTjORkU+Q0ebvgnLOwLwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2E2ZTA2YzY4MjRiZDFiODExMTgzZTBlMTdmYTE5NDk2
ZDI2MWMwHhcNMjQwMTAyMDgzMzE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGRiOTQ0Mjc1YWYwYmQ3NWI4YjVhMzYzZGYwYzQ0ZWYzN2RhOWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZb4TXD5GtwPG1NLNf36cf31xBGc
SBrmme9H/qtxr0UNCBiZCgjX5HTQsN5isk3/EhLBBKiqV7A2vKnci++KdcH0t0K2
0165ogEzJtYdc3iyWxEFSWh/a1GDuGqBVGBYDcbb7rjXhtwEKzolqhwQEwos5E9X
xi9zG4EkIYasw9LIdeOG7NlAjBX4dK+kMo2IxIxZDl98FZMD+B0tkEghFSFoQHdY
FOUBlpYEfQtDSKEqOfFyNEVZxt9rPtQ2QQO05qr8tc4cMloHlYHZYiCMjZn7ZSh5
m/cQpi6JUV41K0yWCo53W2cuM0RGOCqWtgxb3sXVVDg997Gyd5hnjvf0zQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFATblEJ1rwvXW4taNj3wxE7zfansMB8GA1UdIwQY
MBaAFA7KbgbGgkvRuBEYPg4X+hlJbSYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTct
Y2ZkM2ZmOWZkZjdiLzEvQk51VVFuV3ZDOWRiaTFvMlBmREVUdk45cWV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTctY2ZkM2ZmOWZkZjdi
LzEvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9WUAwQA
uUGNMA0GCSqGSIb3DQEBCwUAA4IBAQAOdDmNtytxg8nHj+U0SWGmcf7tJgfZXwwC
dzz6tubFAnCZNEFzPciwv8m4mWIPuSDN+YM6NxscPSAp3UBsWthLOwNm9hf5GTBp
M/fVTNAOc9EdjFo23M1d7QSDBd2Tef/WhC1ttspkaMdpFl+Xpmoo3fZR6meP1LI+
6kaX0SJwxy+jXUpaReH32hKeqjiOl4fSOlvn0SDe7GD7KhE3i436hX2/j8N+7w6b
sOAarZ0Dsq7phKBFxJs3mDBYoGK/MPJwDZ6efReN5r5U0aNox+EOke17SULDkYe+
03ixmpuLeGzZL1QMvPDZ3k+d/3hnrnOgxc4ch0xzdzCWxjnc1Odq
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:48 2025 by rpki-client