Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BnmJPW1FzY-SR2iXrc2tLIC2TGo.roa
File: BnmJPW1FzY-SR2iXrc2tLIC2TGo.roa (raw, json)
Hash identifier: 9twaQp3nKLZRImyySFiZoBAtm9S6L+ZL0a4b9jMsrgI=
Subject key identifier: 06:79:89:3D:6D:45:CD:8F:92:47:68:97:AD:CD:AD:2C:80:B6:4C:6A
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01900B701B060072015E629859EC6B8747EE
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BnmJPW1FzY-SR2iXrc2tLIC2TGo.roa
Signing time: Wed 12 Jun 2024 07:53:34 +0000
ROA not before: Wed 12 Jun 2024 07:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8717
IP address blocks: 5.53.128.0/17 maxlen: 17
37.63.0.0/17 maxlen: 17
46.238.0.0/18 maxlen: 18
46.238.14.0/24 maxlen: 24
62.204.128.0/19 maxlen: 19
62.204.128.0/24 maxlen: 24
62.204.130.0/24 maxlen: 24
62.204.141.0/24 maxlen: 24
62.221.128.0/19 maxlen: 19
62.221.128.0/24 maxlen: 24
77.70.0.0/17 maxlen: 17
77.236.160.0/19 maxlen: 19
77.236.178.0/23 maxlen: 23
78.83.0.0/16 maxlen: 16
78.83.7.0/24 maxlen: 24
78.83.143.0/24 maxlen: 24
78.83.144.0/24 maxlen: 24
78.83.145.0/24 maxlen: 24
78.83.146.0/24 maxlen: 24
78.83.147.0/24 maxlen: 24
78.83.148.0/24 maxlen: 24
78.83.149.0/24 maxlen: 24
78.83.150.0/24 maxlen: 24
78.83.151.0/24 maxlen: 24
78.83.160.0/24 maxlen: 24
78.83.210.0/24 maxlen: 24
78.83.225.0/24 maxlen: 24
78.83.226.0/23 maxlen: 23
78.90.0.0/16 maxlen: 16
78.90.206.0/24 maxlen: 24
78.90.247.0/24 maxlen: 24
80.253.48.0/20 maxlen: 20
82.103.64.0/18 maxlen: 18
82.103.91.0/24 maxlen: 24
82.103.103.0/24 maxlen: 24
82.103.109.0/24 maxlen: 24
82.103.110.0/23 maxlen: 23
82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
82.147.128.0/19 maxlen: 19
83.97.24.0/21 maxlen: 21
84.242.128.0/18 maxlen: 18
84.252.0.0/18 maxlen: 18
85.91.128.0/19 maxlen: 19
85.118.64.0/19 maxlen: 19
85.130.0.0/17 maxlen: 17
85.130.95.0/24 maxlen: 24
85.130.96.0/23 maxlen: 23
85.130.120.0/23 maxlen: 23
85.196.128.0/18 maxlen: 18
87.97.128.0/17 maxlen: 17
87.97.160.0/22 maxlen: 22
87.227.128.0/17 maxlen: 17
88.203.128.0/17 maxlen: 17
88.203.128.0/23 maxlen: 23
88.203.128.0/24 maxlen: 24
88.203.129.0/24 maxlen: 24
88.203.132.0/24 maxlen: 24
88.203.147.0/24 maxlen: 24
88.203.177.0/24 maxlen: 24
88.203.204.0/24 maxlen: 24
88.203.237.0/24 maxlen: 24
89.186.200.0/21 maxlen: 21
89.190.192.0/19 maxlen: 19
89.215.0.0/16 maxlen: 16
89.215.8.0/22 maxlen: 22
89.215.40.0/22 maxlen: 22
89.215.48.0/22 maxlen: 22
89.253.128.0/18 maxlen: 18
92.247.0.0/16 maxlen: 16
92.247.168.0/24 maxlen: 24
95.111.0.0/17 maxlen: 17
95.140.208.0/20 maxlen: 20
130.204.0.0/16 maxlen: 16
151.251.0.0/16 maxlen: 16
151.251.38.0/24 maxlen: 24
151.251.140.0/24 maxlen: 24
151.251.237.0/24 maxlen: 24
176.12.0.0/18 maxlen: 18
193.22.103.0/24 maxlen: 24
195.24.32.0/19 maxlen: 19
195.34.96.0/19 maxlen: 19
195.34.101.0/24 maxlen: 24
195.34.122.0/24 maxlen: 24
195.34.123.0/24 maxlen: 24
195.149.248.0/21 maxlen: 21
195.177.248.0/23 maxlen: 23
212.36.0.0/19 maxlen: 19
212.36.6.0/24 maxlen: 24
212.50.0.0/19 maxlen: 19
212.50.7.0/24 maxlen: 24
212.91.160.0/19 maxlen: 19
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
212.95.160.0/19 maxlen: 19
212.95.161.0/24 maxlen: 24
212.104.96.0/19 maxlen: 19
213.169.32.0/19 maxlen: 19
213.191.160.0/19 maxlen: 19
213.222.32.0/19 maxlen: 19
213.222.59.0/24 maxlen: 24
213.226.0.0/18 maxlen: 18
213.226.5.0/24 maxlen: 24
213.226.6.0/24 maxlen: 24
213.226.9.0/24 maxlen: 24
213.226.31.0/24 maxlen: 24
213.226.35.0/24 maxlen: 24
213.226.47.0/24 maxlen: 24
213.226.48.0/24 maxlen: 24
213.240.192.0/18 maxlen: 18
217.9.224.0/20 maxlen: 20
217.9.224.0/24 maxlen: 24
217.10.240.0/20 maxlen: 20
217.18.240.0/20 maxlen: 20
217.18.240.0/24 maxlen: 24
217.18.245.0/24 maxlen: 24
217.79.32.0/20 maxlen: 20
2a00:4800::/29 maxlen: 29
2a01:288::/32 maxlen: 32
2a01:288:400b::/48 maxlen: 48
2a01:288:400c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 20 Jun 2024 06:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0b:70:1b:06:00:72:01:5e:62:98:59:ec:6b:87:47:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jun 12 07:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0679893d6d45cd8f92476897adcdad2c80b64c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:88:4e:9e:43:89:33:15:a2:58:3e:24:aa:
c9:8f:47:f0:7d:cb:df:71:05:d3:70:93:e5:d6:1c:
39:55:0a:f5:ba:df:ae:02:58:fd:13:f9:29:7d:61:
c8:10:0c:9f:a5:20:28:32:3d:19:19:7a:7f:e9:6b:
60:eb:6c:97:5a:66:1e:24:67:9d:b4:6d:9c:ea:15:
72:a2:f9:a0:78:74:71:52:0f:6c:34:aa:f7:e0:03:
41:d9:25:5d:e5:2f:e4:11:ed:ff:d3:26:c2:43:59:
fa:e8:c6:c0:2b:5a:00:15:b6:ff:ea:bc:54:e9:b6:
05:a0:3f:c6:f0:33:10:74:b2:14:8c:22:7a:ee:b0:
48:6a:2b:92:dd:9a:b4:2d:01:40:f7:13:9d:a5:8e:
f1:58:41:c9:b1:32:96:e0:01:6c:87:66:4c:47:43:
5b:2c:67:85:9c:d8:be:f6:01:83:ce:19:40:b9:86:
b3:21:74:15:b6:c9:ae:c0:ef:57:8f:85:f8:de:4e:
da:47:50:12:14:f4:1a:1d:3a:e0:26:3c:42:ed:72:
dd:17:5b:b6:f6:ea:1b:e8:5a:c5:75:39:2d:bb:1d:
4a:51:26:d7:1a:4b:ee:37:ec:7e:b6:72:a9:99:51:
26:f3:b4:10:6e:ff:88:ea:f2:dc:8e:8e:6c:fd:87:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:79:89:3D:6D:45:CD:8F:92:47:68:97:AD:CD:AD:2C:80:B6:4C:6A
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BnmJPW1FzY-SR2iXrc2tLIC2TGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.128.0/17
37.63.0.0/17
46.238.0.0/18
62.204.128.0/19
62.221.128.0/19
77.70.0.0/17
77.236.160.0/19
78.83.0.0/16
78.90.0.0/16
80.253.48.0/20
82.103.64.0/18
82.147.128.0/19
83.97.24.0/21
84.242.128.0/18
84.252.0.0/18
85.91.128.0/19
85.118.64.0/19
85.130.0.0/17
85.196.128.0/18
87.97.128.0/17
87.227.128.0/17
88.203.128.0/17
89.186.200.0/21
89.190.192.0/19
89.215.0.0/16
89.253.128.0/18
92.247.0.0/16
95.111.0.0/17
95.140.208.0/20
130.204.0.0/16
151.251.0.0/16
176.12.0.0/18
193.22.103.0/24
195.24.32.0/19
195.34.96.0/19
195.149.248.0/21
195.177.248.0/23
212.36.0.0/19
212.50.0.0/19
212.91.160.0/19
212.95.160.0/19
212.104.96.0/19
213.169.32.0/19
213.191.160.0/19
213.222.32.0/19
213.226.0.0/18
213.240.192.0/18
217.9.224.0/20
217.10.240.0/20
217.18.240.0/20
217.79.32.0/20
IPv6:
2a00:4800::/29
2a01:288::/32
Signature Algorithm: sha256WithRSAEncryption
0f:03:7e:01:cc:cf:02:ab:1a:c8:4a:5d:dc:42:ed:cf:50:bd:
19:54:d5:bc:06:e4:a8:e2:da:f4:01:94:0f:b0:dc:95:dc:f5:
31:73:88:70:d4:fa:60:a8:11:05:13:0d:da:3b:a8:b9:a0:79:
a5:d0:90:c7:4b:a9:1f:15:17:6d:ef:d8:ad:e8:8c:70:b9:89:
c8:de:b8:3c:0c:6e:f4:f8:d4:05:00:95:ff:e1:d3:27:52:57:
38:9e:fe:90:2c:b6:3e:1b:12:5d:f2:54:b8:16:fc:0a:ea:c4:
9e:20:d3:90:3f:ca:b5:ec:ae:e5:3c:a0:c5:18:ef:ba:65:32:
b8:a3:7f:e9:0c:b2:eb:0c:07:5c:e6:77:13:1e:3d:18:e8:8f:
97:bd:47:dd:03:79:95:96:7e:fd:1a:c8:ef:4a:8b:31:96:35:
3b:3c:0a:42:20:9a:7b:2a:92:93:db:f7:82:4f:df:ad:fb:14:
1d:58:7e:dd:7c:c5:0e:2b:56:ad:26:87:29:d8:fa:3c:a1:28:
61:c2:55:e8:f6:c2:0c:a0:24:3a:b0:55:c4:0b:ea:99:48:fd:
86:4e:92:3b:4e:89:b0:bb:9d:41:84:9f:0d:34:a6:c1:ee:42:
27:00:6d:d8:79:22:04:84:bf:3a:f2:bb:74:db:86:e1:1a:15:
4b:af:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 09:13:21 2024 by rpki-client on console-ams.rpki-client.org