Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BfpwPUnueJYgPL6a9nOKDpklK9k.roa
File: BfpwPUnueJYgPL6a9nOKDpklK9k.roa (raw, json)
Hash identifier: 08krLxKrTVlbYfxR7sEtehTBJ59CT8HbMSfqTQOxQpI=
Subject key identifier: 05:FA:70:3D:49:EE:78:96:20:3C:BE:9A:F6:73:8A:0E:99:25:2B:D9
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0185E7C741041A719A4CD90DAF0398E7353B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BfpwPUnueJYgPL6a9nOKDpklK9k.roa
Signing time: Wed 25 Jan 2023 07:14:33 +0000
ROA not before: Wed 25 Jan 2023 07:14:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 88.151.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 07:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:c7:41:04:1a:71:9a:4c:d9:0d:af:03:98:e7:35:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 25 07:14:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05fa703d49ee7896203cbe9af6738a0e99252bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c1:a7:eb:1b:c2:a5:1d:10:85:7a:ce:ea:2c:
63:76:7a:e5:d0:38:f1:3b:53:50:bc:b7:67:b9:e8:
e1:14:5b:7f:4b:61:f0:50:18:8f:a9:38:cb:3d:43:
98:cf:45:2c:8e:e1:50:0c:8b:cf:3b:9f:95:27:6b:
a6:2f:da:d6:04:98:0b:6c:22:69:c1:f1:1a:f3:76:
d8:12:a0:34:46:2b:c2:24:03:51:48:8d:6e:6a:ac:
42:3f:6e:21:da:db:45:70:90:82:eb:46:80:45:ed:
9d:43:09:76:26:1c:33:b5:da:94:09:d8:f4:8d:75:
b3:ac:2b:0b:3f:99:f1:34:4a:4a:38:06:de:ba:66:
4f:89:d0:4c:56:4a:10:2c:4e:12:24:fe:53:7a:ab:
1a:af:17:45:0b:5f:32:bb:25:38:b8:27:6f:81:19:
fc:86:fa:a0:ab:18:87:b4:19:ae:8f:13:a7:d3:33:
57:c2:63:7e:09:db:d2:06:8e:b8:bd:d9:d0:7b:5e:
0a:f8:71:62:62:45:49:0d:96:70:33:41:fb:d9:3a:
24:59:07:54:fc:9c:84:29:2c:05:53:ad:4f:96:df:
29:d5:9f:55:49:19:bd:f0:25:aa:40:bf:47:d3:1b:
7d:ce:fd:84:55:78:cc:1f:db:d6:a6:16:fd:85:b7:
6d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FA:70:3D:49:EE:78:96:20:3C:BE:9A:F6:73:8A:0E:99:25:2B:D9
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BfpwPUnueJYgPL6a9nOKDpklK9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.61.0/24
Signature Algorithm: sha256WithRSAEncryption
81:10:91:4e:60:93:be:62:9f:fd:40:ce:1a:b0:a3:b6:e9:43:
88:83:91:33:54:73:8a:d8:ba:6e:99:3e:36:22:cc:a3:26:91:
50:32:3c:db:93:07:21:98:64:6a:b6:ad:0b:28:ff:65:55:ec:
55:5e:06:8b:9f:d8:eb:b0:6b:90:c4:6f:c2:0d:12:78:26:b9:
89:f3:9d:64:e7:a1:99:f5:1a:5e:2d:69:71:9a:d3:65:48:28:
b5:35:12:19:be:d2:cf:5f:63:fe:41:b8:d9:d3:5a:f2:bc:f1:
71:4e:b5:5b:48:e3:81:de:4c:2a:c5:7c:f1:82:60:39:e0:9b:
91:f1:9f:4c:bf:ca:5a:54:fc:41:68:f4:42:a1:22:24:79:02:
70:e0:f5:7c:6f:05:31:51:dc:0f:5f:0e:3d:a3:cb:f2:97:94:
d7:8a:60:53:00:2e:a2:8d:32:dd:c6:ed:52:d1:56:c7:7c:fa:
65:4b:a9:29:36:ea:87:ac:21:98:c6:c8:0b:35:fd:0d:c6:62:
6d:09:8c:8e:d3:8f:43:26:09:93:54:39:dd:65:a4:b9:6a:04:
6c:25:18:cd:10:e3:7e:68:ea:06:4c:1f:f8:e7:83:ae:f2:d7:
d7:5e:28:91:04:c9:82:6f:a4:db:59:63:db:78:38:2a:af:c0:
68:58:57:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXnx0EEGnGaTNkNrwOY5zU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwMTI1MDcxNDMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWZhNzAzZDQ5ZWU3ODk2MjAzY2JlOWFmNjczOGEwZTk5MjUyYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcGn6xvCpR0QhXrO6ixjdnrl0Djx
O1NQvLdnuejhFFt/S2HwUBiPqTjLPUOYz0UsjuFQDIvPO5+VJ2umL9rWBJgLbCJp
wfEa83bYEqA0RivCJANRSI1uaqxCP24h2ttFcJCC60aARe2dQwl2JhwztdqUCdj0
jXWzrCsLP5nxNEpKOAbeumZPidBMVkoQLE4SJP5TeqsarxdFC18yuyU4uCdvgRn8
hvqgqxiHtBmujxOn0zNXwmN+CdvSBo64vdnQe14K+HFiYkVJDZZwM0H72TokWQdU
/JyEKSwFU61Plt8p1Z9VSRm98CWqQL9H0xt9zv2EVXjMH9vWphb9hbdtGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAX6cD1J7niWIDy+mvZzig6ZJSvZMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvQmZwd1BVbnVlSllnUEw2YTluT0tEcGtsSzlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJc9MA0G
CSqGSIb3DQEBCwUAA4IBAQCBEJFOYJO+Yp/9QM4asKO26UOIg5EzVHOK2LpumT42
IsyjJpFQMjzbkwchmGRqtq0LKP9lVexVXgaLn9jrsGuQxG/CDRJ4JrmJ851k56GZ
9RpeLWlxmtNlSCi1NRIZvtLPX2P+QbjZ01ryvPFxTrVbSOOB3kwqxXzxgmA54JuR
8Z9Mv8paVPxBaPRCoSIkeQJw4PV8bwUxUdwPXw49o8vyl5TXimBTAC6ijTLdxu1S
0VbHfPplS6kpNuqHrCGYxsgLNf0NxmJtCYyO049DJgmTVDndZaS5agRsJRjNEON+
aOoGTB/454Ou8tfXXiiRBMmCb6TbWWPbeDgqr8BoWFfB
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org