Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/Bq6KsK7XG-u91gnYyo3IxWErqCo.roa
File: Bq6KsK7XG-u91gnYyo3IxWErqCo.roa (raw, json)
Hash identifier: cL4rtR4NblUg1EhbsLvQtKGgCbZhhtRY/xNR1Mdb7wU=
Subject key identifier: 06:AE:8A:B0:AE:D7:1B:EB:BD:D6:09:D8:CA:8D:C8:C5:61:2B:A8:2A
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 018570B076C7B63352935D55EA8827DE03E8
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/Bq6KsK7XG-u91gnYyo3IxWErqCo.roa
Signing time: Mon 02 Jan 2023 04:14:50 +0000
ROA not before: Mon 02 Jan 2023 04:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208423
IP address blocks: 5.102.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:76:c7:b6:33:52:93:5d:55:ea:88:27:de:03:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Jan 2 04:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06ae8ab0aed71bebbdd609d8ca8dc8c5612ba82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:83:9b:5c:70:a0:58:c4:2e:38:eb:d3:7f:
1a:1e:8b:b6:82:93:66:9b:ec:c0:ec:dc:e9:b1:c5:
6a:b1:26:82:2e:25:df:49:34:c1:da:e9:a7:da:f9:
df:6e:8b:7b:fc:3f:de:b1:0c:fd:04:38:ce:13:e5:
fd:af:e5:5a:22:27:b1:7b:3b:93:2f:63:d2:62:37:
14:d8:bd:10:5e:5e:b8:b1:ec:4c:14:2a:c5:01:f6:
62:53:01:63:57:25:8f:15:f5:79:25:05:ac:75:ce:
a3:8f:11:c2:86:67:6e:c3:55:4f:3f:f3:36:10:64:
6a:f6:15:e4:91:d7:49:cd:70:6e:3e:f8:56:18:f5:
66:32:e3:1a:d7:3d:3d:43:46:e3:7e:6c:a3:d3:d8:
6f:ff:11:f5:ee:ac:79:39:5a:f6:43:bf:c2:b2:cd:
d6:de:2b:13:98:39:f7:12:0d:b7:06:ec:25:19:91:
32:0b:e0:44:4b:95:7f:08:a0:fb:ae:63:9d:ee:a1:
55:f0:e3:05:e1:3d:67:9d:db:ce:1d:0c:be:6e:37:
94:78:bf:68:19:b4:30:ea:97:60:8b:ea:03:59:42:
b6:1a:1d:9f:66:f6:d2:61:a7:18:f9:58:0f:0a:e9:
04:94:d2:d0:ab:13:14:c9:18:0e:74:26:a9:04:43:
b5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AE:8A:B0:AE:D7:1B:EB:BD:D6:09:D8:CA:8D:C8:C5:61:2B:A8:2A
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/Bq6KsK7XG-u91gnYyo3IxWErqCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.46.0/24
Signature Algorithm: sha256WithRSAEncryption
37:96:91:a2:bf:cd:13:26:07:f1:fc:5c:f6:fa:df:05:64:e7:
49:37:71:00:b7:2a:01:38:62:89:15:a8:77:0f:61:bf:46:aa:
83:72:31:df:38:26:8d:f4:80:81:8e:48:c8:2a:ee:f3:cb:36:
a7:98:92:0f:ff:89:db:a4:6d:8e:ad:a1:b8:14:32:f0:51:62:
c3:4b:78:95:96:e3:4e:35:7b:55:db:c1:d2:d7:74:94:03:cd:
18:c6:7c:2f:94:df:24:5b:75:4e:da:58:da:72:10:fd:ef:39:
19:47:7a:ee:67:5c:f1:fe:0a:26:1d:2b:2a:c1:4f:9c:52:4e:
43:b4:15:07:fe:e6:0d:e2:44:cf:43:be:4c:cf:fe:a9:ea:55:
4e:59:e7:a5:be:a6:49:5f:be:5b:94:62:c2:46:39:63:a6:b0:
0f:49:33:72:99:9d:a0:ae:da:6f:e9:b9:84:bd:c5:f5:62:fa:
4a:d8:6f:de:96:7a:bd:c3:64:b2:ce:4e:8a:99:1b:31:60:75:
56:26:d1:8f:71:fa:12:f7:e0:32:e0:bc:3d:82:85:66:24:09:
80:66:6f:ea:87:83:c9:1f:5f:19:f8:5a:54:79:a2:d0:59:1b:
cc:13:d4:6c:c4:44:71:ac:2b:fe:2f:43:c9:26:54:49:cd:34:
cc:69:2f:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwsHbHtjNSk11V6ogn3gPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2U3N2Y3ZDkxNjUxM2I4NDkxNDg0OTk1MGZlNDNmNTU2
OTRmZGEwHhcNMjMwMTAyMDQxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmFlOGFiMGFlZDcxYmViYmRkNjA5ZDhjYThkYzhjNTYxMmJhODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCGDm1xwoFjELjjr038aHou2gpNm
m+zA7NzpscVqsSaCLiXfSTTB2umn2vnfbot7/D/esQz9BDjOE+X9r+VaIiexezuT
L2PSYjcU2L0QXl64sexMFCrFAfZiUwFjVyWPFfV5JQWsdc6jjxHChmduw1VPP/M2
EGRq9hXkkddJzXBuPvhWGPVmMuMa1z09Q0bjfmyj09hv/xH17qx5OVr2Q7/Css3W
3isTmDn3Eg23BuwlGZEyC+BES5V/CKD7rmOd7qFV8OMF4T1nndvOHQy+bjeUeL9o
GbQw6pdgi+oDWUK2Gh2fZvbSYacY+VgPCukElNLQqxMUyRgOdCapBEO1CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAauirCu1xvrvdYJ2MqNyMVhK6gqMB8GA1UdIwQY
MBaAFJnOd/fZFlE7hJFISZUP5D9VaU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAt
ZjM1MzczZGE3ZGViLzEvQnE2S3NLN1hHLXU5MWduWXlvM0l4V0VycUNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAtZjM1MzczZGE3ZGVi
LzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWYuMA0G
CSqGSIb3DQEBCwUAA4IBAQA3lpGiv80TJgfx/Fz2+t8FZOdJN3EAtyoBOGKJFah3
D2G/RqqDcjHfOCaN9ICBjkjIKu7zyzanmJIP/4nbpG2OraG4FDLwUWLDS3iVluNO
NXtV28HS13SUA80YxnwvlN8kW3VO2ljachD97zkZR3ruZ1zx/gomHSsqwU+cUk5D
tBUH/uYN4kTPQ75Mz/6p6lVOWeelvqZJX75blGLCRjljprAPSTNymZ2grtpv6bmE
vcX1YvpK2G/elnq9w2Syzk6KmRsxYHVWJtGPcfoS9+Ay4Lw9goVmJAmAZm/qh4PJ
H18Z+FpUeaLQWRvME9RsxERxrCv+L0PJJlRJzTTMaS9F
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:34 2024 by rpki-client on console-fra.rpki-client.org