Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/BePx7RrFDgUKoFMlrBOnABt-Tck.roa
File: BePx7RrFDgUKoFMlrBOnABt-Tck.roa (raw, json)
Hash identifier: ulqhkmRZAF29n5dXlyMAANn5jzEn3xd2WMXTNlrVZII=
Subject key identifier: 05:E3:F1:ED:1A:C5:0E:05:0A:A0:53:25:AC:13:A7:00:1B:7E:4D:C9
Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial: 018BB91055805A9E877875CC79EADF50258B
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/BePx7RrFDgUKoFMlrBOnABt-Tck.roa
Signing time: Fri 10 Nov 2023 11:48:57 +0000
ROA not before: Fri 10 Nov 2023 11:48:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201627
IP address blocks: 193.71.224.0/21 maxlen: 21
193.71.224.0/22 maxlen: 22
193.71.228.0/24 maxlen: 24
193.71.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:10:55:80:5a:9e:87:78:75:cc:79:ea:df:50:25:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Validity
Not Before: Nov 10 11:48:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05e3f1ed1ac50e050aa05325ac13a7001b7e4dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:b2:06:cd:0e:06:d3:de:bf:05:82:98:c0:
32:54:01:cc:40:e8:ea:08:43:6b:92:b1:12:1f:80:
fe:55:41:00:8b:b2:45:68:d6:48:7f:79:c8:a2:8e:
ea:df:32:af:aa:69:d0:fa:af:34:2a:00:a9:b7:85:
a2:19:29:06:39:9b:a9:32:30:2c:82:cf:fb:99:55:
d9:ef:99:6b:fe:17:29:46:87:6f:a3:60:db:58:5e:
93:8f:44:3b:fa:49:ef:0b:61:18:7b:52:8f:c2:c3:
ae:9b:4e:49:f0:39:14:69:99:85:16:52:9e:8c:2c:
b5:37:00:8b:9f:14:85:90:ce:ed:f6:02:63:3f:3c:
49:1f:8b:a2:4c:92:ae:00:10:2c:8d:7a:f5:c3:e9:
4b:c1:85:3e:e4:e3:8f:10:9d:89:bc:5b:ee:c2:fb:
47:39:e1:d4:b9:43:09:b3:f9:25:83:6d:10:fa:b8:
64:84:c0:05:cf:7b:f6:d0:18:ed:1b:36:ca:bf:c9:
66:fb:3c:73:89:9c:8b:75:f0:cc:1c:8f:77:d7:e6:
52:e4:fe:ab:2a:c0:24:e5:97:56:69:03:a8:ec:93:
89:12:81:8a:c6:ee:fb:91:54:52:98:f0:18:e3:d0:
ab:8e:17:2d:81:87:f3:11:76:74:87:ab:62:e9:03:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E3:F1:ED:1A:C5:0E:05:0A:A0:53:25:AC:13:A7:00:1B:7E:4D:C9
X509v3 Authority Key Identifier:
keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/BePx7RrFDgUKoFMlrBOnABt-Tck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.71.224.0/21
Signature Algorithm: sha256WithRSAEncryption
94:19:5b:e4:e9:fa:7a:e7:59:c8:ff:dd:ff:b9:2c:32:c4:c0:
d2:cd:3b:0e:68:4d:2a:f5:be:2d:52:4e:4f:a9:2c:4e:88:53:
a6:25:cb:6e:aa:dd:71:5e:f0:85:e2:98:0c:91:6f:44:ef:9e:
0e:cb:0c:6f:e6:c6:6c:1b:cf:55:93:56:91:c8:a7:fd:4c:77:
12:2c:5f:e4:d3:38:b9:68:60:b7:22:47:cb:bd:93:c8:9e:13:
6b:a7:58:8e:09:83:e7:45:ac:fe:f4:27:d0:96:24:01:11:d1:
eb:2f:a1:12:23:69:e8:7d:61:02:13:ae:86:31:76:28:3c:6b:
80:90:c3:ec:09:1f:9d:e0:be:af:cf:bf:95:3d:9a:c9:33:db:
ec:51:b6:f7:72:a5:cd:ef:a4:d4:23:6f:15:ad:c6:d8:63:e7:
93:2c:c8:57:33:80:f5:57:42:fb:1e:4d:4e:62:fc:4b:f8:6f:
04:03:e6:52:25:d5:ef:59:ae:aa:2e:d2:c6:cf:0f:62:b2:83:
e7:6f:5e:ea:59:b0:69:c6:2e:db:cb:98:39:c0:10:14:68:e1:
d5:53:24:b5:24:be:8c:33:04:71:f7:24:e5:2e:61:42:f3:81:
42:da:d1:06:5e:97:a9:14:94:af:9a:fe:07:6a:6f:0b:6a:0d:
d0:c3:c2:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYu5EFWAWp6HeHXMeerfUCWLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYzRhY2VkY2I4NmNkZGZlZDdmNmRlOGNhZGZjYTAwNDY5
YmJjOGUwHhcNMjMxMTEwMTE0ODU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWUzZjFlZDFhYzUwZTA1MGFhMDUzMjVhYzEzYTcwMDFiN2U0ZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjiyBs0OBtPevwWCmMAyVAHMQOjq
CENrkrESH4D+VUEAi7JFaNZIf3nIoo7q3zKvqmnQ+q80KgCpt4WiGSkGOZupMjAs
gs/7mVXZ75lr/hcpRodvo2DbWF6Tj0Q7+knvC2EYe1KPwsOum05J8DkUaZmFFlKe
jCy1NwCLnxSFkM7t9gJjPzxJH4uiTJKuABAsjXr1w+lLwYU+5OOPEJ2JvFvuwvtH
OeHUuUMJs/klg20Q+rhkhMAFz3v20BjtGzbKv8lm+zxziZyLdfDMHI931+ZS5P6r
KsAk5ZdWaQOo7JOJEoGKxu77kVRSmPAY49CrjhctgYfzEXZ0h6ti6QNPaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAXj8e0axQ4FCqBTJawTpwAbfk3JMB8GA1UdIwQY
MBaAFH3ErO3Lhs3f7X9t6MrfygBGm7yOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zZDJhMTQtNmI3OS00Njg5LTk1Nzkt
Mzk0ODAyODVhOTQ4LzEvQmVQeDdSckZEZ1VLb0ZNbHJCT25BQnQtVGNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zZDJhMTQtNmI3OS00Njg5LTk1NzktMzk0ODAyODVhOTQ4
LzEvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwUfgMA0G
CSqGSIb3DQEBCwUAA4IBAQCUGVvk6fp651nI/93/uSwyxMDSzTsOaE0q9b4tUk5P
qSxOiFOmJctuqt1xXvCF4pgMkW9E754Oywxv5sZsG89Vk1aRyKf9THcSLF/k0zi5
aGC3IkfLvZPInhNrp1iOCYPnRaz+9CfQliQBEdHrL6ESI2nofWECE66GMXYoPGuA
kMPsCR+d4L6vz7+VPZrJM9vsUbb3cqXN76TUI28VrcbYY+eTLMhXM4D1V0L7Hk1O
YvxL+G8EA+ZSJdXvWa6qLtLGzw9isoPnb17qWbBpxi7by5g5wBAUaOHVUyS1JL6M
MwRx9yTlLmFC84FC2tEGXpepFJSvmv4Ham8Lag3Qw8JU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:25 2024 by rpki-client on console-ams.rpki-client.org