Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/BsGrZV6Q1vJJOsgQ1_D3jSWEuCg.roa
File: BsGrZV6Q1vJJOsgQ1_D3jSWEuCg.roa (raw, json)
Hash identifier: 6+5gAhkMX0bKBtFy9lWwy/dfscDadCj+PG5e4A3zMYs=
Subject key identifier: 06:C1:AB:65:5E:90:D6:F2:49:3A:C8:10:D7:F0:F7:8D:25:84:B8:28
Certificate issuer: /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Certificate serial: 018B4720B0396E0C50901D63B9A429C8CB13
Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/BsGrZV6Q1vJJOsgQ1_D3jSWEuCg.roa
Signing time: Thu 19 Oct 2023 08:50:06 +0000
ROA not before: Thu 19 Oct 2023 08:50:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 193.134.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:20:b0:39:6e:0c:50:90:1d:63:b9:a4:29:c8:cb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Validity
Not Before: Oct 19 08:50:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06c1ab655e90d6f2493ac810d7f0f78d2584b828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:b2:8a:d1:fd:7e:b1:fa:c7:28:33:c6:16:
00:43:1c:71:b1:3d:40:41:ce:d5:90:c8:02:4f:32:
20:8d:ef:9f:0a:aa:d1:9d:a6:33:26:63:d3:df:22:
78:57:66:fc:fe:98:03:0b:f0:c5:e1:b3:a9:d2:e4:
8e:5f:1b:04:22:13:9f:6e:b7:77:5e:f0:7d:20:1c:
a5:57:90:2c:52:c0:4d:a7:31:24:33:c8:50:17:4a:
a6:0b:12:7c:fa:f5:ba:9a:e5:5a:78:54:7c:8b:92:
0d:8f:6a:de:ba:95:b7:05:e2:8c:80:bb:61:da:50:
e5:e1:ad:6c:bf:1a:f5:f9:1a:ce:1c:fd:24:a9:fd:
7c:e3:16:f4:10:98:6b:51:c8:c7:22:ce:db:03:6b:
43:83:a6:21:37:f5:f5:55:34:6e:c9:9e:ab:09:11:
a9:fb:8c:7b:b5:e9:50:e5:f3:80:02:c9:ec:fe:31:
75:4d:fa:e5:12:eb:1c:40:e2:44:53:82:4a:fd:72:
a7:78:f5:19:90:4e:71:6e:18:f5:eb:44:f7:36:f2:
b6:bd:c4:9a:41:dd:af:88:25:82:61:38:71:e6:14:
95:fa:96:17:9e:c6:5f:dc:e5:53:f5:d9:b1:ac:b3:
2b:46:40:4c:5c:af:82:fd:69:0a:d7:74:7a:86:7b:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C1:AB:65:5E:90:D6:F2:49:3A:C8:10:D7:F0:F7:8D:25:84:B8:28
X509v3 Authority Key Identifier:
keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/BsGrZV6Q1vJJOsgQ1_D3jSWEuCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.252.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e6:b6:34:14:b2:53:1c:31:5c:3a:73:1a:e2:c7:6a:ba:b2:
83:f6:d7:86:1d:3b:09:b8:a4:c9:e2:b0:7d:71:13:5b:ad:62:
e2:d0:f1:4d:24:55:25:02:d3:fa:4b:1e:9e:e7:4e:15:76:91:
d1:c9:ff:db:ae:d9:4b:a5:24:2d:ce:62:ed:5a:8c:b7:77:a6:
3e:5b:1f:a1:80:7d:b9:24:4d:5f:07:54:32:f1:37:cc:8e:b7:
34:4d:68:1f:7b:69:eb:af:94:13:8c:5b:f1:b1:e3:93:d9:b3:
2d:57:06:22:f1:4f:8e:20:a8:74:60:b5:c3:f8:e6:30:4d:97:
6e:75:bb:01:4f:ec:e2:69:dd:85:ad:59:5c:63:b0:ff:49:41:
75:1b:20:77:b3:48:20:8a:8e:72:4c:26:d4:64:e0:cd:74:3c:
ea:a8:bd:7e:69:e2:5d:ca:d3:e0:9b:60:8e:3f:76:2c:a4:cc:
c4:77:72:01:1f:1f:c0:1f:27:66:82:3c:15:5d:52:3c:70:f0:
6e:90:07:63:ba:3e:fd:be:c6:f9:3b:05:a6:60:14:e4:95:85:
dd:6e:41:67:a7:92:bb:6c:d7:6a:2a:6f:4d:48:93:b7:6f:c5:
38:65:8d:40:ba:ee:13:b5:8d:64:bd:60:35:9e:92:34:b3:85:
ff:63:3f:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtHILA5bgxQkB1juaQpyMsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZWRmZTdhNGZjNjRkZTUyOWQxNjJkZjJmZWQwNzgwYzZl
NWUxYTgwHhcNMjMxMDE5MDg1MDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmMxYWI2NTVlOTBkNmYyNDkzYWM4MTBkN2YwZjc4ZDI1ODRiODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimuyitH9frH6xygzxhYAQxxxsT1A
Qc7VkMgCTzIgje+fCqrRnaYzJmPT3yJ4V2b8/pgDC/DF4bOp0uSOXxsEIhOfbrd3
XvB9IBylV5AsUsBNpzEkM8hQF0qmCxJ8+vW6muVaeFR8i5INj2reupW3BeKMgLth
2lDl4a1svxr1+RrOHP0kqf184xb0EJhrUcjHIs7bA2tDg6YhN/X1VTRuyZ6rCRGp
+4x7telQ5fOAAsns/jF1TfrlEuscQOJEU4JK/XKnePUZkE5xbhj160T3NvK2vcSa
Qd2viCWCYThx5hSV+pYXnsZf3OVT9dmxrLMrRkBMXK+C/WkK13R6hntI3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAbBq2VekNbySTrIENfw940lhLgoMB8GA1UdIwQY
MBaAFGHt/npPxk3lKdFi3y/tB4DG5eGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWUzLWVrX0dUZVVwMFdMZkwtMEhnTWJsNGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iODFkMDgtNjZjOS00YmU5LWEyMjEt
YWZmODcxYjViNWY3LzEvQnNHclpWNlExdkpKT3NnUTFfRDNqU1dFdUNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iODFkMDgtNjZjOS00YmU5LWEyMjEtYWZmODcxYjViNWY3
LzEvWWUzLWVrX0dUZVVwMFdMZkwtMEhnTWJsNGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYb8MA0G
CSqGSIb3DQEBCwUAA4IBAQCR5rY0FLJTHDFcOnMa4sdqurKD9teGHTsJuKTJ4rB9
cRNbrWLi0PFNJFUlAtP6Sx6e504VdpHRyf/brtlLpSQtzmLtWoy3d6Y+Wx+hgH25
JE1fB1Qy8TfMjrc0TWgfe2nrr5QTjFvxseOT2bMtVwYi8U+OIKh0YLXD+OYwTZdu
dbsBT+ziad2FrVlcY7D/SUF1GyB3s0ggio5yTCbUZODNdDzqqL1+aeJdytPgm2CO
P3YspMzEd3IBHx/AHydmgjwVXVI8cPBukAdjuj79vsb5OwWmYBTklYXdbkFnp5K7
bNdqKm9NSJO3b8U4ZY1Auu4TtY1kvWA1npI0s4X/Yz/t
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:46 2024 by rpki-client on console-fra.rpki-client.org