Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/BebCkPrmGaC5AMQbvWwg1Fu-Qx8.roa
File: BebCkPrmGaC5AMQbvWwg1Fu-Qx8.roa (raw, json)
Hash identifier: 813bk4ZwrNZfRGuWUs7r5mBPZUctrpcIY5dwzlVtRXA=
Subject key identifier: 05:E6:C2:90:FA:E6:19:A0:B9:00:C4:1B:BD:6C:20:D4:5B:BE:43:1F
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018571C32746B51B4AA5985E7C4D005F9C03
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/BebCkPrmGaC5AMQbvWwg1Fu-Qx8.roa
Signing time: Mon 02 Jan 2023 09:14:52 +0000
ROA not before: Mon 02 Jan 2023 09:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209864
IP address blocks: 2a06:e881:5500::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:27:46:b5:1b:4a:a5:98:5e:7c:4d:00:5f:9c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 09:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05e6c290fae619a0b900c41bbd6c20d45bbe431f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:c2:45:07:49:da:64:23:8f:98:7d:a3:c6:
e4:f2:80:34:21:6e:8c:2b:65:f4:68:b2:1c:13:e6:
05:47:4f:a6:62:cf:df:cf:af:57:42:69:9e:21:c6:
6a:52:30:0e:6f:1f:52:6d:70:60:77:52:9c:68:66:
4e:29:d8:dd:05:60:60:85:e3:fd:45:9b:84:fe:a9:
a7:1e:27:f5:0c:85:3e:7d:cc:49:8f:a9:e4:14:ed:
0f:d3:79:12:3e:6c:f5:66:57:37:f1:89:fb:19:4e:
d3:a2:3d:0f:ab:fa:c2:0c:bd:a1:46:79:2c:85:4b:
fe:50:c0:2e:fa:a8:4a:5c:cb:9d:40:8c:ce:13:53:
94:d3:13:dc:80:33:ac:f9:d1:a0:06:17:2a:a6:aa:
9d:52:e3:78:ab:69:89:1e:12:53:bb:8a:7c:ff:3b:
2a:b7:dd:ab:07:16:9d:b6:81:e9:7b:13:c5:75:e6:
9b:ee:9a:73:a3:a0:dd:1b:1b:83:95:7b:c9:22:f3:
2f:67:8d:b3:29:f7:ac:e5:a9:aa:bf:c0:f9:1a:82:
b2:97:a8:56:c1:02:d6:d7:a2:a0:54:8e:0f:f3:e2:
69:20:6e:bf:1c:19:b0:41:2d:03:83:08:80:f6:d3:
82:8d:83:ce:97:86:64:3c:e8:09:c7:5b:df:6f:0e:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E6:C2:90:FA:E6:19:A0:B9:00:C4:1B:BD:6C:20:D4:5B:BE:43:1F
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/BebCkPrmGaC5AMQbvWwg1Fu-Qx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:5500::/44
Signature Algorithm: sha256WithRSAEncryption
3e:a4:18:9f:28:73:19:97:48:dd:56:dc:69:5d:d1:2b:c4:80:
91:f2:f8:29:12:92:99:93:73:be:3c:b5:4d:f4:d5:48:53:82:
0e:cc:a9:45:f0:dd:44:c3:79:f7:bb:71:22:79:e4:3c:4e:18:
ec:87:d9:58:03:9d:53:db:e8:81:02:a1:7b:0c:f7:61:d5:1a:
b9:23:86:8a:5b:3c:46:98:aa:1a:17:cd:bc:ec:e9:0a:80:52:
f8:92:90:7e:6b:97:1b:56:24:d6:e6:36:7d:56:41:ee:fc:95:
d5:c9:87:90:18:96:61:3e:2a:ff:cf:ea:e0:05:04:2b:7d:41:
6b:26:0b:d2:07:01:da:96:1e:f9:23:c0:fc:6c:78:21:17:af:
a2:dc:b5:ad:49:18:27:ad:7c:bf:cb:22:fe:4c:7f:95:d6:32:
cb:ae:cf:43:50:fd:ce:83:b5:98:4a:d4:73:58:06:ec:54:86:
2e:c1:2d:ac:fe:cb:a9:f7:a7:5b:dd:3f:8b:92:37:06:22:57:
b3:f9:50:f6:62:9d:67:af:5d:d0:64:05:96:59:89:8d:fb:f9:
6b:34:2c:e7:f9:fa:42:9f:00:1a:bf:6d:6e:81:b3:f2:3f:96:
97:53:61:29:76:4a:63:0e:dc:67:1e:28:11:df:ec:98:87:4a:
93:95:2b:43
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxwydGtRtKpZhefE0AX5wDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjMwMTAyMDkxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWU2YzI5MGZhZTYxOWEwYjkwMGM0MWJiZDZjMjBkNDViYmU0MzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVTCRQdJ2mQjj5h9o8bk8oA0IW6M
K2X0aLIcE+YFR0+mYs/fz69XQmmeIcZqUjAObx9SbXBgd1KcaGZOKdjdBWBgheP9
RZuE/qmnHif1DIU+fcxJj6nkFO0P03kSPmz1Zlc38Yn7GU7Toj0Pq/rCDL2hRnks
hUv+UMAu+qhKXMudQIzOE1OU0xPcgDOs+dGgBhcqpqqdUuN4q2mJHhJTu4p8/zsq
t92rBxadtoHpexPFdeab7ppzo6DdGxuDlXvJIvMvZ42zKfes5amqv8D5GoKyl6hW
wQLW16KgVI4P8+JpIG6/HBmwQS0DgwiA9tOCjYPOl4ZkPOgJx1vfbw7cuwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAXmwpD65hmguQDEG71sINRbvkMfMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvQmViQ2tQcm1HYUM1QU1RYnZXd2cxRnUtUXg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbogVUA
MA0GCSqGSIb3DQEBCwUAA4IBAQA+pBifKHMZl0jdVtxpXdErxICR8vgpEpKZk3O+
PLVN9NVIU4IOzKlF8N1Ew3n3u3EieeQ8Thjsh9lYA51T2+iBAqF7DPdh1Rq5I4aK
WzxGmKoaF8287OkKgFL4kpB+a5cbViTW5jZ9VkHu/JXVyYeQGJZhPir/z+rgBQQr
fUFrJgvSBwHalh75I8D8bHghF6+i3LWtSRgnrXy/yyL+TH+V1jLLrs9DUP3Og7WY
StRzWAbsVIYuwS2s/sup96db3T+LkjcGIlez+VD2Yp1nr13QZAWWWYmN+/lrNCzn
+fpCnwAav21ugbPyP5aXU2EpdkpjDtxnHigR3+yYh0qTlStD
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:16 2024 by rpki-client on console-fra.rpki-client.org