Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BSA2C6gT641dAQ8omndRTpykdGo.roa
File: BSA2C6gT641dAQ8omndRTpykdGo.roa (raw, json)
Hash identifier: EZ+OAMzOCd60Kje91KjRThY8O3NwXWV3kfjmbTqAaRs=
Subject key identifier: 05:20:36:0B:A8:13:EB:8D:5D:01:0F:28:9A:77:51:4E:9C:A4:74:6A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0188B8A2E88B4116DEBFC80F71C2DA6A7DE1
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BSA2C6gT641dAQ8omndRTpykdGo.roa
Signing time: Wed 14 Jun 2023 06:41:04 +0000
ROA not before: Wed 14 Jun 2023 06:41:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 45.13.189.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
45.88.136.0/23 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.122.0/23 maxlen: 24
194.242.97.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 13:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:a2:e8:8b:41:16:de:bf:c8:0f:71:c2:da:6a:7d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 14 06:41:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0520360ba813eb8d5d010f289a77514e9ca4746a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:50:58:20:90:4d:7c:9b:46:28:da:ad:f8:
8a:ec:07:b9:bb:f8:9d:24:0b:12:3e:2b:d2:66:b2:
a6:9f:cf:fe:30:c6:7e:3e:b7:0c:55:ed:c5:ba:97:
ce:1c:88:95:91:d0:43:4f:f0:6a:48:6e:c1:bc:78:
75:ab:88:0b:48:23:90:7d:e4:70:85:4e:17:ba:6b:
20:b8:53:27:f9:40:34:16:db:53:ed:f1:1c:10:f5:
51:53:5f:51:fc:47:d4:fd:c7:30:5c:b0:76:a3:95:
ee:03:ab:7b:97:1a:d6:d9:76:30:83:cd:83:e6:16:
05:c0:79:de:5f:82:ad:32:21:0a:18:59:78:a1:7e:
4d:ff:a9:93:27:8f:63:29:2f:f0:f4:a4:df:bf:c1:
9c:3a:4c:2d:de:8c:ce:40:34:17:32:ef:ef:2c:eb:
f1:d8:c2:4a:40:23:32:36:e8:a2:e5:5b:67:c5:0c:
5e:6c:86:58:74:14:64:fb:c6:e6:a7:39:10:4c:b9:
62:e3:fa:3f:3f:ee:eb:6e:a1:9d:dd:be:2d:51:30:
0c:7c:83:7d:53:13:88:1a:ba:26:cd:6c:9e:0d:d3:
64:c1:6e:e8:2d:ff:6d:e3:02:b6:50:14:4a:5b:d0:
b0:2f:b1:3e:ce:8b:62:b0:75:92:d4:dc:92:b4:e5:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:20:36:0B:A8:13:EB:8D:5D:01:0F:28:9A:77:51:4E:9C:A4:74:6A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BSA2C6gT641dAQ8omndRTpykdGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.13.189.0-45.13.190.255
45.81.112.0/22
45.88.136.0/23
45.132.181.0-45.132.183.255
45.144.212.0/24
45.151.3.0/24
77.83.39.0/24
85.209.122.0/23
194.242.97.0/24
195.177.92.0/23
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
76:0d:67:cf:81:4a:69:57:e5:38:13:74:d0:6f:a4:71:80:de:
c7:f5:6a:3a:06:26:e9:e8:b4:ef:2b:21:fe:cb:f8:77:c8:b9:
45:ae:65:4c:b2:f0:71:7b:f2:58:b1:11:43:dc:53:dc:18:bf:
9a:af:d1:55:02:e3:92:ba:01:16:79:ef:7c:91:24:79:1a:0f:
a4:5d:78:14:f7:3f:a9:8c:c5:07:e4:68:af:90:b0:09:e6:c3:
db:46:7f:6d:5e:f3:31:68:59:5e:da:53:46:07:49:4d:f3:a9:
b5:20:f3:3a:d4:d9:4a:9c:22:42:df:1a:4d:73:33:1e:ae:7f:
1c:5d:19:7a:f6:64:f5:7c:7f:32:b7:e0:fe:6d:35:ed:c5:32:
1b:80:72:c3:1a:8e:a8:43:e9:37:9f:39:82:c6:06:5e:26:0b:
09:84:74:cc:24:3f:10:28:97:b1:0b:06:a5:98:cb:43:45:92:
cd:d2:25:e1:01:36:52:51:32:e9:85:73:2d:a4:ba:0a:b5:ef:
38:f8:94:b4:8c:17:11:91:37:b2:4e:24:c4:48:52:2d:8d:6a:
8a:4f:af:01:67:c0:96:4b:0c:05:52:2c:0b:58:21:0f:b1:04:
83:e2:73:a2:38:a8:7f:4b:06:f6:0e:fe:a5:e5:6a:19:f1:5a:
cb:70:7e:4d
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAYi4ouiLQRbev8gPccLaan3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwNjE0MDY0MTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTIwMzYwYmE4MTNlYjhkNWQwMTBmMjg5YTc3NTE0ZTljYTQ3NDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8NQWCCQTXybRijarfiK7Ae5u/id
JAsSPivSZrKmn8/+MMZ+PrcMVe3FupfOHIiVkdBDT/BqSG7BvHh1q4gLSCOQfeRw
hU4XumsguFMn+UA0FttT7fEcEPVRU19R/EfU/ccwXLB2o5XuA6t7lxrW2XYwg82D
5hYFwHneX4KtMiEKGFl4oX5N/6mTJ49jKS/w9KTfv8GcOkwt3ozOQDQXMu/vLOvx
2MJKQCMyNuii5VtnxQxebIZYdBRk+8bmpzkQTLli4/o/P+7rbqGd3b4tUTAMfIN9
UxOIGromzWyeDdNkwW7oLf9t4wK2UBRKW9CwL7E+zotisHWS1NyStOWSiwIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFAUgNguoE+uNXQEPKJp3UU6cpHRqMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvQlNBMkM2Z1Q2NDFkQVE4b21uZFJUcHlrZEdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQBBbVUAwQA
BbVXMAwDBAAtDb0DBAAtDb4DBAItUXADBAEtWIgwDAMEAC2EtQMEAy2EsAMEAC2Q
1AMEAC2XAwMEAE1TJwMEAVXRegMEAMLyYQMEAcOxXAMEAsPTvDANBgkqhkiG9w0B
AQsFAAOCAQEAdg1nz4FKaVflOBN00G+kcYDex/VqOgYm6ei07ysh/sv4d8i5Ra5l
TLLwcXvyWLERQ9xT3Bi/mq/RVQLjkroBFnnvfJEkeRoPpF14FPc/qYzFB+Ror5Cw
CebD20Z/bV7zMWhZXtpTRgdJTfOptSDzOtTZSpwiQt8aTXMzHq5/HF0ZevZk9Xx/
Mrfg/m017cUyG4BywxqOqEPpN585gsYGXiYLCYR0zCQ/ECiXsQsGpZjLQ0WSzdIl
4QE2UlEy6YVzLaS6CrXvOPiUtIwXEZE3sk4kxEhSLY1qik+vAWfAlksMBVIsC1gh
D7EEg+Jzojiof0sG9g7+peVqGfFay3B+TQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org