Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/bTArbxcxtntTH_0BG9ko_LDQYcM.roa
File: bTArbxcxtntTH_0BG9ko_LDQYcM.roa (raw, json)
Hash identifier: oPqgawpi0arsjsa6TWVc3DuUTgQ/ZXJyzc8E5JaT8sA=
Subject key identifier: 6D:30:2B:6F:17:31:B6:7B:53:1F:FD:01:1B:D9:28:FC:B0:D0:61:C3
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 018B6C96FC38F27F5C56A522AF5322CBAF5F
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/bTArbxcxtntTH_0BG9ko_LDQYcM.roa
Signing time: Thu 26 Oct 2023 15:25:16 +0000
ROA not before: Thu 26 Oct 2023 15:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 79.110.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6c:96:fc:38:f2:7f:5c:56:a5:22:af:53:22:cb:af:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Oct 26 15:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d302b6f1731b67b531ffd011bd928fcb0d061c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:41:5d:98:7e:67:f3:24:6b:da:3c:72:f9:
ae:be:91:98:eb:de:98:ce:ea:05:c3:80:45:a2:81:
0d:02:d6:8b:67:4d:67:59:73:37:52:4e:5a:7a:b0:
c5:54:d9:28:9e:ae:d6:f7:ac:5a:44:7c:40:e7:7b:
09:f7:3c:2b:b7:4d:53:dd:fe:14:fb:6c:4a:78:5d:
91:8b:7e:c6:7e:39:5a:fa:55:ee:93:e7:22:80:35:
87:35:c3:d9:d8:23:43:53:f8:0c:ff:0d:66:e7:ed:
a9:3c:d5:2e:c3:20:82:9b:90:c8:e3:96:70:c4:59:
81:18:d4:17:7a:1d:2f:e2:3b:e9:9f:5b:5a:04:b2:
b9:5f:2b:2d:71:37:8f:ff:62:2a:81:ff:20:91:0e:
55:b1:db:9a:ad:27:ec:67:cc:25:65:72:8f:4f:a3:
16:a3:49:25:5f:0b:b9:fc:04:e6:10:2d:55:06:ac:
59:51:28:cf:da:92:3a:11:f6:38:c1:94:81:56:c7:
43:94:44:eb:74:aa:ab:b9:fb:72:45:27:dc:da:25:
4f:20:8c:a3:c5:4a:23:7a:9d:a8:bd:da:6a:40:2f:
78:f9:1c:12:2f:c2:2f:19:6a:cb:45:a4:07:eb:be:
11:16:d4:4a:76:f6:b6:d1:71:8f:0a:92:90:d8:2a:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:30:2B:6F:17:31:B6:7B:53:1F:FD:01:1B:D9:28:FC:B0:D0:61:C3
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/bTArbxcxtntTH_0BG9ko_LDQYcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.166.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e1:4e:8d:38:cd:9b:5b:65:3e:3d:52:8b:c3:de:e2:e5:37:
0b:f2:e4:20:ca:03:d7:79:0d:e5:60:c7:5d:cf:7e:a7:58:23:
4a:1b:29:40:e4:87:f9:ff:e3:d4:a0:27:18:c9:1a:af:d7:29:
be:83:6d:c5:1b:b9:bd:06:88:d2:39:63:07:f2:a5:3b:b7:af:
23:e7:63:13:f9:95:cf:01:9c:ef:c9:a5:13:cf:29:77:8e:1a:
42:26:62:8a:c1:8a:46:e7:4e:0a:79:45:7e:16:e8:3f:b5:cb:
35:9f:16:1f:65:9a:f1:f0:62:0c:f2:b4:18:dc:e5:52:35:fd:
41:71:bb:48:0e:aa:71:dc:ad:0e:a7:0d:31:f6:97:17:85:c3:
bf:b7:85:e0:9a:7a:9a:6a:96:4b:84:17:12:23:5e:0d:08:52:
62:e5:38:cd:3d:f1:f5:5c:8e:db:03:6f:ab:5c:7c:27:d1:62:
7a:f0:3b:9c:5b:8f:76:81:ed:fe:03:26:1e:54:f3:e4:2f:c5:
94:05:0f:15:e1:c3:bf:14:73:53:9b:9d:97:da:c3:cd:46:ba:
25:28:66:f8:2f:45:68:8a:47:de:ab:88:e8:93:64:c5:a3:52:
e2:9a:66:06:d7:3c:d9:6f:5b:02:72:8a:1f:8c:80:f1:cd:b6:
95:f4:79:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtslvw48n9cVqUir1Miy69fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODM4NDFiYzA5ZjFmZDRmZTNkZTk5MTAxNmMwYjcxMjZm
YmE1MmUwHhcNMjMxMDI2MTUyNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDMwMmI2ZjE3MzFiNjdiNTMxZmZkMDExYmQ5MjhmY2IwZDA2MWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps5BXZh+Z/Mka9o8cvmuvpGY696Y
zuoFw4BFooENAtaLZ01nWXM3Uk5aerDFVNkonq7W96xaRHxA53sJ9zwrt01T3f4U
+2xKeF2Ri37Gfjla+lXuk+cigDWHNcPZ2CNDU/gM/w1m5+2pPNUuwyCCm5DI45Zw
xFmBGNQXeh0v4jvpn1taBLK5XystcTeP/2Iqgf8gkQ5VsduarSfsZ8wlZXKPT6MW
o0klXwu5/ATmEC1VBqxZUSjP2pI6EfY4wZSBVsdDlETrdKqruftyRSfc2iVPIIyj
xUojep2ovdpqQC94+RwSL8IvGWrLRaQH674RFtRKdva20XGPCpKQ2CqBOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG0wK28XMbZ7Ux/9ARvZKPyw0GHDMB8GA1UdIwQY
MBaAFCmDhBvAnx/U/j3pkQFsC3Em+6UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2It
MWRkNWRhYjM2ZjlmLzEvYlRBcmJ4Y3h0bnRUSF8wQkc5a29fTERRWWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2ItMWRkNWRhYjM2Zjlm
LzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT26mMA0G
CSqGSIb3DQEBCwUAA4IBAQA+4U6NOM2bW2U+PVKLw97i5TcL8uQgygPXeQ3lYMdd
z36nWCNKGylA5If5/+PUoCcYyRqv1ym+g23FG7m9BojSOWMH8qU7t68j52MT+ZXP
AZzvyaUTzyl3jhpCJmKKwYpG504KeUV+Fug/tcs1nxYfZZrx8GIM8rQY3OVSNf1B
cbtIDqpx3K0Opw0x9pcXhcO/t4XgmnqaapZLhBcSI14NCFJi5TjNPfH1XI7bA2+r
XHwn0WJ68DucW492ge3+AyYeVPPkL8WUBQ8V4cO/FHNTm52X2sPNRrolKGb4L0Vo
ikfeq4jok2TFo1LimmYG1zzZb1sCcoofjIDxzbaV9HlA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:00 2024 by rpki-client on console-fra.rpki-client.org