Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Bq7qeO5AAmZeLUUjVN5AAkA20R4.roa
File: Bq7qeO5AAmZeLUUjVN5AAkA20R4.roa (raw, json)
Hash identifier: ltBtTzyoMxfuwh2ecECr95mDgQaXyYEFOmRNY83SEQg=
Subject key identifier: 06:AE:EA:78:EE:40:02:66:5E:2D:45:23:54:DE:40:02:40:36:D1:1E
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01925212608BCAD06216B26883E95A3D4637
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Bq7qeO5AAmZeLUUjVN5AAkA20R4.roa
Signing time: Thu 03 Oct 2024 11:09:48 +0000
ROA not before: Thu 03 Oct 2024 11:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197450
IP address blocks: 93.152.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 09:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:12:60:8b:ca:d0:62:16:b2:68:83:e9:5a:3d:46:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Oct 3 11:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06aeea78ee4002665e2d452354de40024036d11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:5c:07:ea:39:da:42:45:df:d2:45:89:7e:
3e:81:aa:db:c1:0e:74:5e:92:90:db:47:63:e1:01:
23:de:1b:74:04:1e:63:63:58:3f:c1:91:71:58:97:
97:a8:53:b7:6b:e7:c0:8f:09:2b:3d:e5:8d:2d:16:
4c:58:68:24:43:9b:75:c5:fd:62:2a:2b:b1:fd:43:
a3:4b:47:56:11:b3:b9:47:08:ab:8f:65:ee:c6:0d:
6d:34:0d:58:9a:51:72:5b:dd:39:bf:1e:1e:55:d1:
9b:bb:64:2f:54:a5:ef:0b:3a:60:74:c0:96:34:6c:
7d:3f:51:6b:f8:c6:b9:41:1b:40:3b:22:75:a8:da:
b3:17:df:16:bb:bb:3b:33:4b:c5:2f:4a:66:14:7d:
6c:cf:64:b1:2f:25:df:2c:1c:ae:e7:27:ee:7c:7c:
ed:f1:dd:f2:56:a7:16:db:93:04:85:17:ef:08:dc:
de:51:bc:1c:56:7d:d4:35:fb:a7:9c:76:e2:f8:fa:
57:b9:e5:f7:c0:8c:b6:d3:39:47:70:6c:ae:72:ce:
7d:0b:39:c4:ec:07:bd:be:2a:bb:2a:5a:41:b8:cd:
32:a9:b8:76:84:88:6c:90:9c:cc:e7:d1:78:85:95:
80:fd:e1:a5:a9:e7:53:51:91:42:49:99:61:56:25:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AE:EA:78:EE:40:02:66:5E:2D:45:23:54:DE:40:02:40:36:D1:1E
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Bq7qeO5AAmZeLUUjVN5AAkA20R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.207.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f2:cd:a4:e1:53:01:86:0a:a2:19:7a:08:eb:d8:03:aa:7b:
94:46:63:23:3d:b8:3c:2f:a1:3f:b9:24:af:d7:88:76:b2:a6:
de:9c:d1:ad:84:47:c9:80:bc:8f:e5:79:48:1e:a9:df:a2:cd:
10:68:5e:73:69:45:c9:d7:bb:a4:48:fa:58:45:4e:57:f9:ed:
1c:ef:43:fb:40:de:34:41:5f:f1:42:f2:57:43:92:d2:ab:e4:
00:8f:d8:cd:60:d2:8c:5e:29:2d:cd:6f:60:1c:55:01:ad:14:
ce:d0:1d:38:ea:8f:51:1b:0f:6d:a5:ea:4d:42:17:fc:ea:b4:
b5:76:38:c0:19:1c:03:ab:8f:1a:d8:7e:b8:e9:bd:1f:34:13:
23:87:03:05:77:e9:8b:cb:9c:bf:5a:b5:c6:ba:09:6d:27:b0:
02:c8:54:87:3e:17:a0:b2:bf:c5:a9:92:ca:ce:67:5c:d6:22:
37:46:b6:69:e5:72:6a:a2:a2:32:80:6b:be:5d:6e:55:d2:a3:
43:70:b7:d6:7d:b1:19:e2:28:69:89:a7:68:2e:97:cc:02:ce:
7c:ce:cc:d0:9a:dd:1e:6d:d5:1a:15:af:94:03:97:7d:aa:5b:
63:74:9c:1d:d9:60:36:68:5b:b7:aa:36:5f:4f:dd:a8:5e:bc:
c3:84:3c:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJSEmCLytBiFrJog+laPUY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjQxMDAzMTEwOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmFlZWE3OGVlNDAwMjY2NWUyZDQ1MjM1NGRlNDAwMjQwMzZkMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSFcB+o52kJF39JFiX4+garbwQ50
XpKQ20dj4QEj3ht0BB5jY1g/wZFxWJeXqFO3a+fAjwkrPeWNLRZMWGgkQ5t1xf1i
Kiux/UOjS0dWEbO5Rwirj2Xuxg1tNA1YmlFyW905vx4eVdGbu2QvVKXvCzpgdMCW
NGx9P1Fr+Ma5QRtAOyJ1qNqzF98Wu7s7M0vFL0pmFH1sz2SxLyXfLByu5yfufHzt
8d3yVqcW25MEhRfvCNzeUbwcVn3UNfunnHbi+PpXueX3wIy20zlHcGyucs59CznE
7Ae9viq7KlpBuM0yqbh2hIhskJzM59F4hZWA/eGlqedTUZFCSZlhViWe/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAau6njuQAJmXi1FI1TeQAJANtEeMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvQnE3cWVPNUFBbVplTFVValZONUFBa0EyMFI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZjPMA0G
CSqGSIb3DQEBCwUAA4IBAQAc8s2k4VMBhgqiGXoI69gDqnuURmMjPbg8L6E/uSSv
14h2sqbenNGthEfJgLyP5XlIHqnfos0QaF5zaUXJ17ukSPpYRU5X+e0c70P7QN40
QV/xQvJXQ5LSq+QAj9jNYNKMXiktzW9gHFUBrRTO0B046o9RGw9tpepNQhf86rS1
djjAGRwDq48a2H646b0fNBMjhwMFd+mLy5y/WrXGugltJ7ACyFSHPhegsr/FqZLK
zmdc1iI3RrZp5XJqoqIygGu+XW5V0qNDcLfWfbEZ4ihpiadoLpfMAs58zszQmt0e
bdUaFa+UA5d9qltjdJwd2WA2aFu3qjZfT92oXrzDhDx1
-----END CERTIFICATE-----
Generated at Fri Nov 15 12:16:45 2024 by rpki-client on console-fra.rpki-client.org