Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/BJqgKNB6TS885wIfDcDEU5mxZv8.roa
File: BJqgKNB6TS885wIfDcDEU5mxZv8.roa (raw, json)
Hash identifier: OhEv9kyc5dCD1YR1FtYleXfLCbvxsj9JWvJs3SbQQ9M=
Subject key identifier: 04:9A:A0:28:D0:7A:4D:2F:3C:E7:02:1F:0D:C0:C4:53:99:B1:66:FF
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018ACC6358051DD2668B8851607AE8082A5A
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/BJqgKNB6TS885wIfDcDEU5mxZv8.roa
Signing time: Mon 25 Sep 2023 12:49:37 +0000
ROA not before: Mon 25 Sep 2023 12:49:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 164.215.96.0/22 maxlen: 22
46.23.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:63:58:05:1d:d2:66:8b:88:51:60:7a:e8:08:2a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Sep 25 12:49:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=049aa028d07a4d2f3ce7021f0dc0c45399b166ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:63:92:34:bb:c4:84:09:d0:06:87:69:ab:
c7:20:59:5a:12:27:56:e5:e7:e1:fa:dc:9a:ab:3a:
b8:8f:fd:0b:83:43:0c:72:fb:d9:63:9f:52:87:08:
94:48:30:b9:ff:48:e0:0b:bc:aa:5f:c0:71:18:27:
99:90:60:5c:d9:92:d0:e2:36:84:0e:90:dd:6f:2c:
77:1a:2b:15:d4:8d:04:22:ee:7a:90:b2:b7:95:68:
6c:54:34:78:a6:9a:c4:5f:84:bd:a6:cb:6c:60:ee:
7e:bc:da:53:97:24:56:f5:a1:ba:81:15:6c:eb:83:
79:6e:86:d1:40:01:88:22:4d:bb:b8:74:1f:0f:09:
0d:b0:d8:0f:e8:bf:98:51:cb:af:b2:71:ab:1d:71:
b9:dc:a8:b3:a6:8d:3e:4d:1c:67:14:5e:f5:a4:65:
45:92:6b:0f:50:e8:0c:52:79:5e:00:54:1e:4c:e3:
5a:0a:85:12:86:87:b4:05:86:58:7a:26:02:7b:94:
b0:c2:24:89:85:24:d1:cc:04:26:21:d6:4b:1a:8a:
24:5f:72:88:e1:25:bc:a3:74:69:96:73:ee:4d:b9:
9b:c0:4e:54:b5:e3:f6:84:d3:67:5b:09:57:2f:90:
5d:dc:f7:d5:a9:5c:19:f9:90:10:34:83:83:e5:0f:
94:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9A:A0:28:D0:7A:4D:2F:3C:E7:02:1F:0D:C0:C4:53:99:B1:66:FF
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/BJqgKNB6TS885wIfDcDEU5mxZv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.99.0/24
164.215.96.0/22
Signature Algorithm: sha256WithRSAEncryption
22:dd:dd:a3:19:bc:ca:8e:6c:5c:af:10:14:c3:2a:fc:76:7f:
fb:50:f0:74:93:ef:95:f9:32:e6:9a:27:ea:ca:0c:0d:e6:ec:
ed:00:89:ad:f5:c8:ec:1f:9f:53:e7:e2:d5:d6:d8:82:ba:57:
71:03:04:b8:14:21:37:9e:54:7c:9b:a2:18:f4:79:eb:4c:6a:
a8:f9:f0:34:2a:e3:e3:1b:e2:96:49:15:63:b2:35:52:8f:76:
3b:c0:d7:8d:75:c5:1a:50:06:9b:51:5d:62:5f:fd:05:61:08:
5a:70:a6:d8:67:26:51:8f:c0:8e:14:26:71:bf:5a:41:ad:a3:
03:50:06:83:f7:33:fe:81:e7:78:bf:fd:15:29:fe:58:63:2f:
53:55:07:9e:0d:c5:b9:65:78:aa:e2:83:87:55:3e:a4:8c:f8:
1a:6e:23:9b:e9:13:93:3c:7e:d5:b1:5a:9b:5c:6e:4e:64:6b:
8c:7f:02:f4:1e:f0:67:90:9c:56:dc:95:77:c4:9a:53:c2:95:
2e:a7:e2:6e:2e:c6:bc:3f:cc:d8:00:3d:4f:d0:03:02:fe:05:
27:9c:6d:db:35:72:e2:62:5d:b8:82:ed:c7:94:5e:33:81:59:
47:75:8a:2f:cb:12:36:2f:86:58:d1:48:aa:75:05:97:5e:07:
21:e9:09:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYrMY1gFHdJmi4hRYHroCCpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwOTI1MTI0OTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDlhYTAyOGQwN2E0ZDJmM2NlNzAyMWYwZGMwYzQ1Mzk5YjE2NmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhRjkjS7xIQJ0AaHaavHIFlaEidW
5efh+tyaqzq4j/0Lg0MMcvvZY59ShwiUSDC5/0jgC7yqX8BxGCeZkGBc2ZLQ4jaE
DpDdbyx3GisV1I0EIu56kLK3lWhsVDR4pprEX4S9pstsYO5+vNpTlyRW9aG6gRVs
64N5bobRQAGIIk27uHQfDwkNsNgP6L+YUcuvsnGrHXG53Kizpo0+TRxnFF71pGVF
kmsPUOgMUnleAFQeTONaCoUShoe0BYZYeiYCe5SwwiSJhSTRzAQmIdZLGookX3KI
4SW8o3RplnPuTbmbwE5UteP2hNNnWwlXL5Bd3PfVqVwZ+ZAQNIOD5Q+UUwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFASaoCjQek0vPOcCHw3AxFOZsWb/MB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvQkpxZ0tOQjZUUzg4NXdJZkRjREVVNW14WnY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhdjAwQC
pNdgMA0GCSqGSIb3DQEBCwUAA4IBAQAi3d2jGbzKjmxcrxAUwyr8dn/7UPB0k++V
+TLmmifqygwN5uztAImt9cjsH59T5+LV1tiCuldxAwS4FCE3nlR8m6IY9HnrTGqo
+fA0KuPjG+KWSRVjsjVSj3Y7wNeNdcUaUAabUV1iX/0FYQhacKbYZyZRj8COFCZx
v1pBraMDUAaD9zP+ged4v/0VKf5YYy9TVQeeDcW5ZXiq4oOHVT6kjPgabiOb6ROT
PH7VsVqbXG5OZGuMfwL0HvBnkJxW3JV3xJpTwpUup+JuLsa8P8zYAD1P0AMC/gUn
nG3bNXLiYl24gu3HlF4zgVlHdYovyxI2L4ZY0UiqdQWXXgch6Qnx
Generated at Sun Oct 1 07:33:26 2023 by rpki-client on console-fra.rpki-client.org