Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Bc8wH_tbs9HqxGcW3zx1VhfvVAo.roa
File: Bc8wH_tbs9HqxGcW3zx1VhfvVAo.roa (raw, json)
Hash identifier: XNI8TVyeOluEodmtx+L8dLinkgpkqKDax33UKwSOlmo=
Subject key identifier: 05:CF:30:1F:FB:5B:B3:D1:EA:C4:67:16:DF:3C:75:56:17:EF:54:0A
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018E76081629BB8121E1B34A2108CA7A0329
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Bc8wH_tbs9HqxGcW3zx1VhfvVAo.roa
Signing time: Mon 25 Mar 2024 14:33:45 +0000
ROA not before: Mon 25 Mar 2024 14:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52041
IP address blocks: 82.215.64.0/24 maxlen: 24
185.248.134.0/24 maxlen: 24
2a12:bec0:d0::/44 maxlen: 48
2a12:bec0:e40::/44 maxlen: 44
2a12:bec0:7000::/48 maxlen: 48
2a12:bec0:7001::/48 maxlen: 48
2a12:bec0:7002::/48 maxlen: 48
2a12:bec0:7003::/48 maxlen: 48
2a12:bec0:7004::/48 maxlen: 48
2a12:bec0:7006::/48 maxlen: 48
2a12:bec0:7007::/48 maxlen: 48
2a12:bec0:7008::/48 maxlen: 48
2a12:bec0:b00b::/48 maxlen: 48
2a12:bec1:b00b::/48 maxlen: 48
2a12:bec2::/32 maxlen: 32
2a12:bec2:b00b::/48 maxlen: 48
2a12:bec3:b00b::/48 maxlen: 48
2a12:bec4:100::/44 maxlen: 44
2a12:bec4:1120::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 08 Apr 2024 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:76:08:16:29:bb:81:21:e1:b3:4a:21:08:ca:7a:03:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 25 14:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05cf301ffb5bb3d1eac46716df3c755617ef540a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:d8:ac:8f:5e:6c:a9:f8:10:f0:64:7a:80:
16:a8:43:c0:93:a2:63:37:4a:3d:85:d2:9c:d1:66:
56:67:2b:e3:ad:a0:13:e6:e7:01:52:0d:26:37:82:
de:08:25:a5:25:92:6f:26:57:9b:c8:3a:96:92:ed:
ce:bc:1b:20:26:6c:8b:22:96:b3:60:80:9f:3c:f3:
b1:7c:e1:0f:4b:99:fc:61:ce:8d:28:e9:40:7f:4f:
3c:e3:5c:a7:95:dd:d3:fe:ef:a7:5e:f7:7f:de:af:
92:e6:2a:c8:3d:44:d3:c0:74:f3:3f:44:f2:b6:91:
36:74:cd:72:e7:ec:80:a7:d0:fe:25:3d:39:f2:66:
fd:c1:9a:be:9c:ae:cc:47:cb:5f:4d:5c:2d:40:b2:
bb:7d:59:14:3a:ba:e6:78:7c:46:d5:72:6d:2c:30:
a8:10:78:6e:eb:ee:94:8f:60:ed:e5:fb:dd:2f:ed:
b9:88:a4:ec:40:63:63:be:e3:dd:6e:fb:42:f8:75:
12:45:23:12:44:94:4a:b6:e2:90:50:ff:67:c0:5f:
4a:72:a0:6f:2e:ae:23:1a:57:92:8e:48:df:15:62:
1a:85:82:f8:0a:ea:1d:4f:f9:0e:be:84:6f:9e:46:
15:d8:4c:23:4b:05:40:d8:e6:f4:c3:e8:72:f4:a6:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CF:30:1F:FB:5B:B3:D1:EA:C4:67:16:DF:3C:75:56:17:EF:54:0A
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Bc8wH_tbs9HqxGcW3zx1VhfvVAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.64.0/24
185.248.134.0/24
IPv6:
2a12:bec0:d0::/44
2a12:bec0:e40::/44
2a12:bec0:7000::-2a12:bec0:7004:ffff:ffff:ffff:ffff:ffff
2a12:bec0:7006::-2a12:bec0:7008:ffff:ffff:ffff:ffff:ffff
2a12:bec0:b00b::/48
2a12:bec1:b00b::/48
2a12:bec2::/32
2a12:bec3:b00b::/48
2a12:bec4:100::/44
2a12:bec4:1120::/44
Signature Algorithm: sha256WithRSAEncryption
2e:03:06:82:d2:f4:f5:5c:0d:b3:73:aa:04:c3:c2:bf:90:14:
19:71:61:8e:9d:e9:e3:6f:68:14:72:a0:0f:8d:e1:c8:13:ae:
29:42:50:7f:22:62:fe:f8:4d:64:39:11:7e:d6:9c:6c:0a:ec:
18:af:6b:9a:cf:dd:f9:8e:08:2f:3c:de:22:ce:73:77:02:9d:
e8:9a:c6:2c:37:f9:0e:61:74:b8:ba:14:b8:78:74:38:c8:6b:
5f:23:bf:c9:c3:87:b8:b1:1d:00:08:24:f4:3c:9a:97:2b:ba:
71:63:f4:7c:7d:99:07:84:31:90:b3:e4:ee:16:bc:ee:11:48:
4a:af:a1:f5:cc:7e:36:d6:5c:08:c2:05:0c:c5:2a:e8:06:d5:
7c:83:d3:89:15:cf:8f:b7:81:6e:d6:54:6d:43:56:ff:a2:bf:
d0:51:12:ec:83:1d:88:ee:4f:9d:18:6c:0f:05:cc:0a:a9:2b:
d6:1e:11:06:d8:f7:05:a2:86:a1:43:13:fc:f3:7d:71:8b:e8:
88:e0:73:f5:48:5a:6d:7e:4a:ed:03:c9:0f:da:94:eb:20:b3:
00:0a:bd:4f:a5:1e:b3:56:76:f1:33:aa:26:30:30:50:31:2d:
2d:e0:2d:7b:21:f6:17:7f:22:ea:c5:ea:39:b7:06:16:45:78:
ea:02:15:23
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAY52CBYpu4Eh4bNKIQjKegMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjQwMzI1MTQzMzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWNmMzAxZmZiNWJiM2QxZWFjNDY3MTZkZjNjNzU1NjE3ZWY1NDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFjYrI9ebKn4EPBkeoAWqEPAk6Jj
N0o9hdKc0WZWZyvjraAT5ucBUg0mN4LeCCWlJZJvJlebyDqWku3OvBsgJmyLIpaz
YICfPPOxfOEPS5n8Yc6NKOlAf08841ynld3T/u+nXvd/3q+S5irIPUTTwHTzP0Ty
tpE2dM1y5+yAp9D+JT058mb9wZq+nK7MR8tfTVwtQLK7fVkUOrrmeHxG1XJtLDCo
EHhu6+6Uj2Dt5fvdL+25iKTsQGNjvuPdbvtC+HUSRSMSRJRKtuKQUP9nwF9KcqBv
Lq4jGleSjkjfFWIahYL4CuodT/kOvoRvnkYV2EwjSwVA2Ob0w+hy9KbRvQIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFAXPMB/7W7PR6sRnFt88dVYX71QKMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvQmM4d0hfdGJzOUhxeEdjVzN6eDFWaGZ2VkFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTASBAIAATAMAwQAUtdA
AwQAufiGMHMEAgACMG0DBwQqEr7AANADBwQqEr7ADkAwEQMGBCoSvsBwAwcAKhK+
wHAEMBIDBwEqEr7AcAYDBwAqEr7AcAgDBwAqEr7AsAsDBwAqEr7BsAsDBQAqEr7C
AwcAKhK+w7ALAwcEKhK+xAEAAwcEKhK+xBEgMA0GCSqGSIb3DQEBCwUAA4IBAQAu
AwaC0vT1XA2zc6oEw8K/kBQZcWGOnenjb2gUcqAPjeHIE64pQlB/ImL++E1kORF+
1pxsCuwYr2uaz935jggvPN4iznN3Ap3omsYsN/kOYXS4uhS4eHQ4yGtfI7/Jw4e4
sR0ACCT0PJqXK7pxY/R8fZkHhDGQs+TuFrzuEUhKr6H1zH421lwIwgUMxSroBtV8
g9OJFc+Pt4Fu1lRtQ1b/or/QURLsgx2I7k+dGGwPBcwKqSvWHhEG2PcFooahQxP8
831xi+iI4HP1SFptfkrtA8kP2pTrILMACr1PpR6zVnbxM6omMDBQMS0t4C17IfYX
fyLqxeo5twYWRXjqAhUj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org