Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/X3-Bnp7ExaGoquoEypd6nPkidSM.roa
File: X3-Bnp7ExaGoquoEypd6nPkidSM.roa (raw, json)
Hash identifier: zJBTD+qoegw+S3wbpGGYCR1WYimjda/HRM26hnUjVXQ=
Subject key identifier: 5F:7F:81:9E:9E:C4:C5:A1:A8:AA:EA:04:CA:97:7A:9C:F9:22:75:23
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0189B14EC57892517B5D843E13535E84E8C4
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/X3-Bnp7ExaGoquoEypd6nPkidSM.roa
Signing time: Tue 01 Aug 2023 13:34:36 +0000
ROA not before: Tue 01 Aug 2023 13:34:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 195.114.201.0/24 maxlen: 24
195.114.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 08:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:4e:c5:78:92:51:7b:5d:84:3e:13:53:5e:84:e8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Aug 1 13:34:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f7f819e9ec4c5a1a8aaea04ca977a9cf9227523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f0:1d:72:5c:05:5d:1d:8e:7f:58:d4:a0:02:
62:6f:47:e3:25:8d:55:11:cf:8e:05:3f:65:7a:c1:
ec:89:a6:60:36:fd:90:4c:be:c3:e0:c6:58:d6:e7:
29:fc:d9:00:e0:26:e0:9c:cc:6c:99:4c:a2:d4:c4:
d1:53:13:56:56:d3:0c:50:8d:71:23:96:18:bb:cc:
21:c3:13:65:92:e9:65:cf:c7:93:28:56:5e:7f:17:
be:2e:04:09:4f:b0:ca:22:de:aa:97:6a:48:97:c4:
bd:6e:9c:89:ff:58:63:57:4c:a3:47:25:8f:df:e2:
b9:65:b6:e9:ee:1b:b3:67:24:f0:d3:b8:a8:28:d4:
1c:d2:a8:3f:78:70:c3:de:c6:e3:28:62:ae:97:e6:
23:56:02:e3:dc:29:e3:4f:1b:c7:9d:1c:bc:86:a9:
e2:f3:9d:96:f7:f4:81:7a:b5:11:7d:e5:6b:a2:18:
24:f2:70:7b:df:1c:1a:dd:5f:f4:8d:35:da:0f:7a:
27:a5:f9:29:1d:1c:df:c8:63:29:8a:35:56:93:2a:
ed:5b:e6:79:21:26:b2:26:3a:af:a6:75:a0:32:48:
35:3c:eb:01:b9:28:c5:a8:37:4a:8b:fd:a3:68:ad:
78:17:65:f9:98:71:4c:24:cf:9e:5d:44:25:49:8e:
e2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7F:81:9E:9E:C4:C5:A1:A8:AA:EA:04:CA:97:7A:9C:F9:22:75:23
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/X3-Bnp7ExaGoquoEypd6nPkidSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.201.0/24
195.114.206.0/24
Signature Algorithm: sha256WithRSAEncryption
38:d5:e4:50:e3:99:f0:7c:9e:d5:ba:95:6d:63:93:b1:7e:5b:
9e:13:f7:01:a4:90:6b:1b:a0:23:c0:6a:84:77:17:41:a5:84:
31:73:ed:ef:dd:ef:3a:7b:9b:2e:c7:21:8a:d4:91:ec:f2:11:
24:63:68:f6:91:96:2d:b0:6d:4b:bb:95:a9:d0:49:ec:4b:d3:
c1:1e:f1:53:fd:74:5e:40:81:f2:5f:41:63:68:8f:53:14:f3:
81:3d:6f:42:f1:bd:89:e6:fe:9b:b7:c5:2c:68:08:45:16:fe:
ae:31:9a:84:15:3f:f1:45:4b:6d:92:a4:20:90:0e:d5:5f:1c:
20:9e:78:6a:ee:44:44:15:45:29:12:4e:ab:48:13:a1:7a:9d:
9c:f3:61:0b:69:79:a4:02:80:53:97:eb:2b:fd:bb:aa:48:ac:
f1:ef:95:14:75:db:8a:bb:07:12:3f:ec:73:0f:43:06:c7:e4:
84:70:55:84:08:b0:9e:bb:8e:10:c0:e7:4b:09:09:ab:4d:02:
77:9a:6f:07:27:da:84:7a:74:46:09:2c:1f:37:09:f3:28:a1:
87:54:07:06:94:d9:70:e6:32:ec:1a:e4:48:92:a9:2b:bf:ad:
d5:d8:31:d3:dc:fb:51:29:48:30:95:89:85:63:3e:f6:63:5a:
a0:1a:7e:91
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYmxTsV4klF7XYQ+E1NehOjEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjMwODAxMTMzNDM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjdmODE5ZTllYzRjNWExYThhYWVhMDRjYTk3N2E5Y2Y5MjI3NTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PAdclwFXR2Of1jUoAJib0fjJY1V
Ec+OBT9lesHsiaZgNv2QTL7D4MZY1ucp/NkA4CbgnMxsmUyi1MTRUxNWVtMMUI1x
I5YYu8whwxNlkullz8eTKFZefxe+LgQJT7DKIt6ql2pIl8S9bpyJ/1hjV0yjRyWP
3+K5Zbbp7huzZyTw07ioKNQc0qg/eHDD3sbjKGKul+YjVgLj3CnjTxvHnRy8hqni
852W9/SBerURfeVrohgk8nB73xwa3V/0jTXaD3onpfkpHRzfyGMpijVWkyrtW+Z5
ISayJjqvpnWgMkg1POsBuSjFqDdKi/2jaK14F2X5mHFMJM+eXUQlSY7iqQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF9/gZ6exMWhqKrqBMqXepz5InUjMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvWDMtQm5wN0V4YUdvcXVvRXlwZDZuUGtpZFNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw3LJAwQA
w3LOMA0GCSqGSIb3DQEBCwUAA4IBAQA41eRQ45nwfJ7VupVtY5OxflueE/cBpJBr
G6AjwGqEdxdBpYQxc+3v3e86e5suxyGK1JHs8hEkY2j2kZYtsG1Lu5Wp0EnsS9PB
HvFT/XReQIHyX0FjaI9TFPOBPW9C8b2J5v6bt8UsaAhFFv6uMZqEFT/xRUttkqQg
kA7VXxwgnnhq7kREFUUpEk6rSBOhep2c82ELaXmkAoBTl+sr/buqSKzx75UUdduK
uwcSP+xzD0MGx+SEcFWECLCeu44QwOdLCQmrTQJ3mm8HJ9qEenRGCSwfNwnzKKGH
VAcGlNlw5jLsGuRIkqkrv63V2DHT3PtRKUgwlYmFYz72Y1qgGn6R
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:40 2024 by rpki-client on console-ams.rpki-client.org