Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/bJXzzgBtzJAaSR3APuOLk-oYqAk.roa
File: bJXzzgBtzJAaSR3APuOLk-oYqAk.roa (raw, json)
Hash identifier: UoJiWlMMQXTLgxxdWPQuYXnOa6sUw/9U85pTdoOA/Cg=
Subject key identifier: 6C:95:F3:CE:00:6D:CC:90:1A:49:1D:C0:3E:E3:8B:93:EA:18:A8:09
Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial: 01856F14D9444ADF12559497337F3CB51774
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/bJXzzgBtzJAaSR3APuOLk-oYqAk.roa
Signing time: Sun 01 Jan 2023 20:45:15 +0000
ROA not before: Sun 01 Jan 2023 20:45:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50941
IP address blocks: 37.152.79.0/24 maxlen: 24
85.95.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:d9:44:4a:df:12:55:94:97:33:7f:3c:b5:17:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Validity
Not Before: Jan 1 20:45:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c95f3ce006dcc901a491dc03ee38b93ea18a809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f5:cd:db:c7:62:8a:2e:eb:3d:ab:46:89:e2:
51:12:b6:e6:d0:10:9b:9b:c0:b0:78:0e:31:03:c7:
a6:57:9c:5b:ec:06:46:75:37:54:ca:d1:1e:49:aa:
74:ec:67:ad:bf:43:c7:ea:23:40:f0:97:ed:21:a1:
67:37:d4:38:64:2c:ca:ea:4d:33:fd:92:f3:37:23:
13:c2:58:c6:4a:9a:cd:c3:e4:0e:2f:ab:5d:73:ae:
d3:24:8e:d7:25:64:34:c1:5b:03:2c:71:18:84:6f:
3b:e5:b1:52:5a:14:2a:57:55:32:d7:c5:cb:3f:06:
40:9d:8d:d0:a6:36:7f:1a:f8:d3:50:fe:9f:ad:5a:
ba:d0:6a:38:42:f9:41:0f:4c:8f:69:f0:bf:0c:d0:
f2:6f:4f:da:f0:16:40:26:e9:fd:3b:cc:05:be:45:
21:d7:1d:38:c3:7c:d7:b9:09:6c:30:e5:db:8a:c9:
1b:d7:9a:bf:88:a7:b5:a8:eb:f9:66:e7:5e:b4:29:
5f:02:42:71:20:55:79:86:6e:b9:30:fa:f4:c8:2b:
55:cd:de:b5:56:31:11:8b:d3:6e:2a:0d:0a:6c:40:
cb:9d:fe:f9:e6:0d:40:8b:b6:95:6f:71:5c:42:30:
0d:e0:b0:9e:94:99:40:a4:bb:70:30:00:84:57:5f:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:95:F3:CE:00:6D:CC:90:1A:49:1D:C0:3E:E3:8B:93:EA:18:A8:09
X509v3 Authority Key Identifier:
keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/bJXzzgBtzJAaSR3APuOLk-oYqAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.79.0/24
85.95.255.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:35:d2:81:37:c9:83:cd:0c:ec:a2:ce:b5:02:93:d0:2d:69:
70:e9:8c:e5:e6:58:dc:d0:9f:a5:c0:e4:e8:4d:2a:78:d2:45:
7e:cc:f5:3f:58:b8:80:1b:71:c4:5f:29:48:c9:66:38:04:6b:
e2:d3:22:d6:13:dd:1c:5f:9b:23:03:6e:4e:0d:87:4b:e0:78:
04:2a:af:77:fe:6c:98:2b:a0:07:d4:06:58:c6:9c:63:70:56:
2d:7a:5d:3e:9d:52:aa:f1:a9:d8:2d:ad:9d:8d:eb:0d:1c:ea:
38:fb:2e:9d:02:8e:14:e0:68:d8:7e:30:2b:11:74:8e:e3:92:
2e:24:12:46:e1:13:ad:f8:1f:da:e1:5e:87:5a:4c:8f:1b:90:
6b:8b:fc:a6:ec:2a:0b:eb:f7:ef:ce:b5:5c:aa:6e:fb:ce:07:
ff:02:66:df:bc:a7:78:6f:b3:04:a6:57:12:28:dc:68:39:77:
07:7e:45:71:6c:33:10:c3:3c:21:8f:c3:cf:5a:9e:4a:5d:b0:
9f:ae:9a:df:80:aa:4e:d4:77:7f:cf:25:21:82:80:3a:80:c3:
d4:bb:15:97:4b:c9:eb:72:38:eb:5c:ec:f9:c5:d8:c7:bf:8c:
f6:af:df:b5:d4:5e:00:6b:09:fe:1e:11:f8:4d:bc:f1:d8:89:
90:6a:13:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvFNlESt8SVZSXM388tRd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjFhOWRkMTI2ZjM3MjM3Y2UyMDBmYjg2MTZmZjkzN2Jj
YTk2NmMwHhcNMjMwMTAxMjA0NTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzk1ZjNjZTAwNmRjYzkwMWE0OTFkYzAzZWUzOGI5M2VhMThhODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfXN28diii7rPatGieJRErbm0BCb
m8CweA4xA8emV5xb7AZGdTdUytEeSap07Getv0PH6iNA8JftIaFnN9Q4ZCzK6k0z
/ZLzNyMTwljGSprNw+QOL6tdc67TJI7XJWQ0wVsDLHEYhG875bFSWhQqV1Uy18XL
PwZAnY3QpjZ/GvjTUP6frVq60Go4QvlBD0yPafC/DNDyb0/a8BZAJun9O8wFvkUh
1x04w3zXuQlsMOXbiskb15q/iKe1qOv5ZudetClfAkJxIFV5hm65MPr0yCtVzd61
VjERi9NuKg0KbEDLnf755g1Ai7aVb3FcQjAN4LCelJlApLtwMACEV19WPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGyV884AbcyQGkkdwD7ji5PqGKgJMB8GA1UdIwQY
MBaAFBnxqd0SbzcjfOIA+4YW/5N7ypZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgt
M2ZkMzA5ODhmNjc3LzEvYkpYenpnQnR6SkFhU1IzQVB1T0xrLW9ZcUFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgtM2ZkMzA5ODhmNjc3
LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJZhPAwQA
VV//MA0GCSqGSIb3DQEBCwUAA4IBAQBbNdKBN8mDzQzsos61ApPQLWlw6Yzl5ljc
0J+lwOToTSp40kV+zPU/WLiAG3HEXylIyWY4BGvi0yLWE90cX5sjA25ODYdL4HgE
Kq93/myYK6AH1AZYxpxjcFYtel0+nVKq8anYLa2djesNHOo4+y6dAo4U4GjYfjAr
EXSO45IuJBJG4ROt+B/a4V6HWkyPG5Bri/ym7CoL6/fvzrVcqm77zgf/AmbfvKd4
b7MEplcSKNxoOXcHfkVxbDMQwzwhj8PPWp5KXbCfrprfgKpO1Hd/zyUhgoA6gMPU
uxWXS8nrcjjrXOz5xdjHv4z2r9+11F4Aawn+HhH4Tbzx2ImQahOd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:14 2024 by rpki-client on console-ams.rpki-client.org