Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/BqdHBR-JJ7-IemZxChaaN6gA6R0.roa
File: BqdHBR-JJ7-IemZxChaaN6gA6R0.roa (raw, json)
Hash identifier: EH+HC08mpancV7fP+B6lCOnaBHm/hfIl/ISsZ9f5sOg=
Subject key identifier: 06:A7:47:05:1F:89:27:BF:88:7A:66:71:0A:16:9A:37:A8:00:E9:1D
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0189B00E2E54E1B52607D44A078390DEE774
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/BqdHBR-JJ7-IemZxChaaN6gA6R0.roa
Signing time: Tue 01 Aug 2023 07:44:26 +0000
ROA not before: Tue 01 Aug 2023 07:44:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 15:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:0e:2e:54:e1:b5:26:07:d4:4a:07:83:90:de:e7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Aug 1 07:44:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06a747051f8927bf887a66710a169a37a800e91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:d1:40:69:9b:92:6d:e8:f5:e3:13:0a:56:
4c:0f:f5:ef:fd:7d:27:03:cb:5d:4c:aa:cc:db:5f:
19:2c:90:df:8b:a5:75:5d:e2:9c:a0:ee:91:a6:2a:
e7:53:d0:ac:3e:9f:2a:01:85:04:d3:df:40:33:8e:
b6:92:d3:44:f5:b0:ec:bf:46:d2:7d:87:da:3e:95:
0c:be:12:cb:90:58:45:ef:d9:5b:42:96:02:b2:05:
88:44:79:d5:7c:bd:2f:fc:da:7b:0c:98:71:37:6f:
36:a4:a5:1e:9e:32:c0:da:bc:d0:e5:9d:6c:e8:38:
be:81:71:97:da:ad:32:6a:f3:a6:a3:9e:38:86:5b:
b8:07:e0:cc:3f:1b:dd:f9:d3:60:c2:4e:05:1f:8c:
31:b2:18:27:c8:16:11:5b:eb:e5:51:7a:0f:eb:ad:
2c:99:08:1b:cf:f0:8c:95:cf:06:34:b0:fe:be:36:
e5:96:46:b5:37:23:a0:8c:55:57:16:01:bd:37:ac:
b7:4f:ba:4f:70:64:7d:16:b8:7f:45:aa:c4:a8:1b:
4c:dd:d4:b2:e6:74:f1:96:d6:23:57:4b:c2:d2:a1:
3b:bd:dc:97:37:4e:3b:8d:19:2f:b9:d8:7a:05:99:
47:26:20:14:00:bc:d8:d1:97:ef:ec:4e:66:e2:6a:
81:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A7:47:05:1F:89:27:BF:88:7A:66:71:0A:16:9A:37:A8:00:E9:1D
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/BqdHBR-JJ7-IemZxChaaN6gA6R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b1:6b:67:e1:04:4e:3a:36:bd:42:91:c0:e5:6e:75:af:5c:
47:9e:4e:db:00:6c:9b:0c:f8:0d:a1:47:20:8c:99:38:0f:3e:
db:22:ba:76:88:fd:3b:53:cb:e9:47:f5:fc:95:65:4a:8e:08:
69:89:70:a7:45:be:62:6c:cd:49:52:8e:ef:0a:0b:de:50:b6:
ba:5b:18:01:cd:e1:8d:a7:57:7a:b3:d9:3d:ee:1c:5b:21:53:
bd:2c:66:70:ad:b7:1f:bf:44:c9:7d:54:9f:45:f8:38:11:8d:
c7:a1:50:b8:bb:01:f3:19:f6:09:5a:e7:8f:fb:fd:a1:6e:fe:
94:da:5c:d4:f6:fd:a9:01:ea:8b:97:52:b3:b8:0c:36:9e:68:
df:f2:b0:93:ea:4b:7b:2e:56:83:09:d4:73:a9:a1:6c:59:bb:
7a:95:c8:36:f7:8c:ec:ab:88:a4:31:6f:3f:99:06:29:59:0b:
a3:33:fe:48:e4:6a:47:c9:4a:d2:c8:62:ec:08:5d:88:00:46:
35:e0:46:dc:2e:da:c1:41:4d:78:b9:3d:e1:ef:95:5b:90:32:
8e:03:6e:df:b7:25:67:74:48:d0:73:6e:dd:cf:39:04:6c:8e:
14:2b:23:1c:c4:3d:25:ee:1c:f2:4e:c1:5b:4e:57:66:76:8e:
24:b2:b7:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmwDi5U4bUmB9RKB4OQ3ud0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMwODAxMDc0NDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmE3NDcwNTFmODkyN2JmODg3YTY2NzEwYTE2OWEzN2E4MDBlOTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphHRQGmbkm3o9eMTClZMD/Xv/X0n
A8tdTKrM218ZLJDfi6V1XeKcoO6RpirnU9CsPp8qAYUE099AM462ktNE9bDsv0bS
fYfaPpUMvhLLkFhF79lbQpYCsgWIRHnVfL0v/Np7DJhxN282pKUenjLA2rzQ5Z1s
6Di+gXGX2q0yavOmo544hlu4B+DMPxvd+dNgwk4FH4wxshgnyBYRW+vlUXoP660s
mQgbz/CMlc8GNLD+vjbllka1NyOgjFVXFgG9N6y3T7pPcGR9Frh/RarEqBtM3dSy
5nTxltYjV0vC0qE7vdyXN047jRkvudh6BZlHJiAUALzY0Zfv7E5m4mqBrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAanRwUfiSe/iHpmcQoWmjeoAOkdMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvQnFkSEJSLUpKNy1JZW1aeENoYWFONmdBNlIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZY3MA0G
CSqGSIb3DQEBCwUAA4IBAQAMsWtn4QROOja9QpHA5W51r1xHnk7bAGybDPgNoUcg
jJk4Dz7bIrp2iP07U8vpR/X8lWVKjghpiXCnRb5ibM1JUo7vCgveULa6WxgBzeGN
p1d6s9k97hxbIVO9LGZwrbcfv0TJfVSfRfg4EY3HoVC4uwHzGfYJWueP+/2hbv6U
2lzU9v2pAeqLl1KzuAw2nmjf8rCT6kt7LlaDCdRzqaFsWbt6lcg294zsq4ikMW8/
mQYpWQujM/5I5GpHyUrSyGLsCF2IAEY14EbcLtrBQU14uT3h75VbkDKOA27ftyVn
dEjQc27dzzkEbI4UKyMcxD0l7hzyTsFbTldmdo4ksrfK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org