Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/BSijhpl65iEepzwol526MicB84k.roa
File: BSijhpl65iEepzwol526MicB84k.roa (raw, json)
Hash identifier: f+s0+HP+viidp6yzP/jrLQk0YqdOzpqmvbuOMrFQBOk=
Subject key identifier: 05:28:A3:86:99:7A:E6:21:1E:A7:3C:28:97:9D:BA:32:27:01:F3:89
Certificate issuer: /CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Certificate serial: 018CEF0A53E16820B03A29C44846EBDA20EF
Authority key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/BSijhpl65iEepzwol526MicB84k.roa
Signing time: Tue 09 Jan 2024 16:24:40 +0000
ROA not before: Tue 09 Jan 2024 16:24:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38984
IP address blocks: 195.135.237.254/31 maxlen: 31
Validation: Failed, certificate revoked on Wed 10 Jan 2024 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ef:0a:53:e1:68:20:b0:3a:29:c4:48:46:eb:da:20:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Validity
Not Before: Jan 9 16:24:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0528a386997ae6211ea73c28979dba322701f389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a2:af:fe:91:4c:57:38:81:c1:c0:5d:58:64:
76:f8:b5:af:c3:67:a5:73:87:78:d2:1f:c5:62:db:
cf:11:99:33:7d:b1:3a:08:85:4d:64:9d:b5:e5:9f:
ec:2c:d5:c4:8c:3d:1b:70:69:f7:67:58:0a:6a:c2:
99:53:f9:ba:2c:8e:6c:29:95:45:32:74:df:93:9f:
32:27:40:ce:a3:6d:12:0d:26:fe:1c:09:8b:99:b2:
bc:56:cb:3a:27:a8:de:94:34:75:96:37:78:ab:7f:
d9:45:29:0a:e5:41:f3:c9:1f:8d:3d:3a:2c:a2:de:
b8:54:4a:e5:6a:70:90:96:6b:99:04:27:ed:37:9f:
1d:f7:88:76:ba:47:6b:52:63:62:82:3d:81:a7:47:
1b:b7:5e:e7:1f:b2:cb:97:d1:45:8f:d2:4d:04:84:
a4:23:f3:29:e9:14:78:49:69:09:08:ef:88:36:6c:
86:a0:76:db:01:a5:b2:27:90:35:4c:95:d6:12:7c:
d8:ac:ee:3c:e2:68:3e:de:11:4e:cc:a6:f5:f8:8b:
68:a7:5b:cd:64:d9:c4:7e:02:14:14:12:a4:35:d8:
1f:4e:18:57:84:b3:82:ed:91:76:3a:15:37:d7:ff:
cf:51:4b:3a:42:8d:ad:ed:bc:0a:5b:2b:9b:7d:8b:
30:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:28:A3:86:99:7A:E6:21:1E:A7:3C:28:97:9D:BA:32:27:01:F3:89
X509v3 Authority Key Identifier:
keyid:5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/BSijhpl65iEepzwol526MicB84k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.135.237.254/31
Signature Algorithm: sha256WithRSAEncryption
b2:5b:a8:73:ba:af:63:46:fc:36:f2:bd:ff:fe:5a:31:c5:1f:
37:b3:50:e2:9e:0c:65:e9:cd:41:ad:26:e1:17:79:35:5f:40:
ad:42:d6:7d:83:63:dc:ce:b7:2e:aa:d8:82:0c:43:f9:46:b2:
e3:6a:1b:2f:31:d3:11:4c:d8:d8:9b:92:da:00:70:b5:d9:18:
81:69:87:9a:da:a3:9d:0e:a3:fd:16:d3:d1:84:bd:cb:47:59:
86:55:06:59:8f:12:8f:04:18:3c:d5:95:f9:0a:5a:bc:0f:b8:
17:97:61:1e:5c:41:55:87:a6:fe:f7:1d:43:55:b3:89:16:86:
56:41:9e:c9:bb:14:99:1e:bd:a5:6c:6e:0d:8a:b0:9c:55:b2:
c4:4b:90:e8:b3:20:c8:00:38:90:79:83:55:4d:a4:b7:97:57:
e9:21:c6:1b:3a:ac:d7:14:7c:0b:8b:4c:fd:ff:18:48:d3:77:
cd:a5:6b:f5:cc:27:53:d9:98:d5:3a:28:ad:7d:ff:9b:1c:79:
88:ec:ee:95:14:c6:c1:cf:56:1e:27:34:32:98:d8:97:09:28:
2d:95:d2:8f:af:19:a0:fb:bf:59:6d:d2:de:79:bf:5c:91:e0:
70:99:03:fd:52:0e:52:c5:f9:80:5c:72:0d:f4:c8:0a:77:e4:
a5:c6:68:02
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzvClPhaCCwOinESEbr2iDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzYyNDVjYTgyMDg5OWQ3ZWI0MTQwMzAyYzIxMDQxYjVk
YmNhMDYwHhcNMjQwMTA5MTYyNDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTI4YTM4Njk5N2FlNjIxMWVhNzNjMjg5NzlkYmEzMjI3MDFmMzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Kv/pFMVziBwcBdWGR2+LWvw2el
c4d40h/FYtvPEZkzfbE6CIVNZJ215Z/sLNXEjD0bcGn3Z1gKasKZU/m6LI5sKZVF
MnTfk58yJ0DOo20SDSb+HAmLmbK8Vss6J6jelDR1ljd4q3/ZRSkK5UHzyR+NPTos
ot64VErlanCQlmuZBCftN58d94h2ukdrUmNigj2Bp0cbt17nH7LLl9FFj9JNBISk
I/Mp6RR4SWkJCO+INmyGoHbbAaWyJ5A1TJXWEnzYrO484mg+3hFOzKb1+Itop1vN
ZNnEfgIUFBKkNdgfThhXhLOC7ZF2OhU31//PUUs6Qo2t7bwKWyubfYsw1wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFAUoo4aZeuYhHqc8KJedujInAfOJMB8GA1UdIwQY
MBaAFF3GJFyoIImdfrQUAwLCEEG128oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDkt
MDc0ZWQ3MGI0NjczLzEvQlNpamhwbDY1aUVlcHp3b2w1MjZNaWNCODRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDktMDc0ZWQ3MGI0Njcz
LzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUBw4ft/jAN
BgkqhkiG9w0BAQsFAAOCAQEAsluoc7qvY0b8NvK9//5aMcUfN7NQ4p4MZenNQa0m
4Rd5NV9ArULWfYNj3M63LqrYggxD+Uay42obLzHTEUzY2JuS2gBwtdkYgWmHmtqj
nQ6j/RbT0YS9y0dZhlUGWY8SjwQYPNWV+QpavA+4F5dhHlxBVYem/vcdQ1WziRaG
VkGeybsUmR69pWxuDYqwnFWyxEuQ6LMgyAA4kHmDVU2kt5dX6SHGGzqs1xR8C4tM
/f8YSNN3zaVr9cwnU9mY1ToorX3/mxx5iOzulRTGwc9WHic0MpjYlwkoLZXSj68Z
oPu/WW3S3nm/XJHgcJkD/VIOUsX5gFxyDfTICnfkpcZoAg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:04 2024 by rpki-client on console-fra.rpki-client.org