Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/bndCEnYSAPN8Hduk56hV5f5VlZU.roa
File: bndCEnYSAPN8Hduk56hV5f5VlZU.roa (raw, json)
Hash identifier: Xyzylavkc7ySN56rCQgI/qtcT4yvtAa140lh2Kh9OfY=
Subject key identifier: 6E:77:42:12:76:12:00:F3:7C:1D:DB:A4:E7:A8:55:E5:FE:55:95:95
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 01930661C62844C2874969A34A234A0C6C8E
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/bndCEnYSAPN8Hduk56hV5f5VlZU.roa
Signing time: Thu 07 Nov 2024 11:28:11 +0000
ROA not before: Thu 07 Nov 2024 11:28:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200350
IP address blocks: 37.230.172.0/22 maxlen: 24
37.230.188.0/22 maxlen: 24
45.133.96.0/22 maxlen: 24
46.21.244.0/22 maxlen: 24
51.250.0.0/17 maxlen: 24
62.84.112.0/20 maxlen: 24
84.201.128.0/18 maxlen: 24
84.252.128.0/20 maxlen: 24
89.169.128.0/18 maxlen: 24
89.232.188.0/22 maxlen: 24
130.193.32.0/19 maxlen: 24
158.160.0.0/16 maxlen: 24
178.154.192.0/18 maxlen: 24
185.206.164.0/22 maxlen: 24
185.216.194.0/23 maxlen: 24
193.32.216.0/22 maxlen: 24
213.165.192.0/19 maxlen: 24
217.28.224.0/20 maxlen: 24
217.198.168.0/21 maxlen: 24
2a0d:d6c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 11 Nov 2024 16:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:61:c6:28:44:c2:87:49:69:a3:4a:23:4a:0c:6c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Nov 7 11:28:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e774212761200f37c1ddba4e7a855e5fe559595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:db:bb:2d:5b:a4:ae:3e:82:e6:34:b3:9c:
f0:7e:af:6f:e0:4d:06:73:52:ed:df:a5:fa:3c:b9:
03:f8:b1:e1:24:b7:e7:c7:eb:f9:76:20:ec:6a:6e:
81:0c:89:95:6f:67:f8:dd:3a:fa:ef:08:2b:3c:8c:
f0:9a:e5:50:fe:ff:2b:7b:c9:2e:fb:7a:16:de:4d:
3e:5b:83:bf:ca:b1:cc:c2:fd:4a:1c:04:59:79:91:
89:0b:99:a0:6e:19:79:b5:c0:55:72:ad:50:af:f5:
e2:3d:1a:94:43:fc:cc:46:df:e5:0d:0a:f5:6e:0b:
3e:24:9d:18:68:8b:be:56:2b:ff:6e:c0:1b:ee:c5:
9c:3b:26:32:c4:f2:47:c3:bb:b9:3c:02:58:9b:8d:
05:bd:af:0f:a1:4e:93:71:96:b3:7f:83:4b:8b:72:
62:19:20:4f:a5:d9:1c:8d:1e:90:37:37:b0:08:ac:
86:2e:91:25:9d:76:0d:4f:8e:bf:d5:b6:56:cd:6a:
26:85:63:6b:d7:6d:52:62:77:66:fa:22:1e:a4:13:
6b:7d:63:58:22:c2:9a:8e:e4:03:6e:18:ff:a2:42:
b9:40:b3:72:65:48:0e:26:2e:db:41:6d:5c:d7:32:
d3:e9:cc:d3:88:fb:2a:d1:63:77:0a:36:83:be:33:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:77:42:12:76:12:00:F3:7C:1D:DB:A4:E7:A8:55:E5:FE:55:95:95
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/bndCEnYSAPN8Hduk56hV5f5VlZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.172.0/22
37.230.188.0/22
45.133.96.0/22
46.21.244.0/22
51.250.0.0/17
62.84.112.0/20
84.201.128.0/18
84.252.128.0/20
89.169.128.0/18
89.232.188.0/22
130.193.32.0/19
158.160.0.0/16
178.154.192.0/18
185.206.164.0/22
185.216.194.0/23
193.32.216.0/22
213.165.192.0/19
217.28.224.0/20
217.198.168.0/21
IPv6:
2a0d:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:fd:f4:3f:a8:41:6f:53:ec:26:1b:7e:11:46:71:6d:f2:a5:
3c:18:b7:83:0a:70:6f:6d:ea:0f:04:31:a2:fc:43:15:67:3b:
e1:50:38:53:0c:a0:77:15:1f:ec:25:52:0c:83:9a:a2:6c:21:
14:b6:92:f0:00:3e:b5:f1:9a:0e:91:53:18:ec:fd:87:b3:93:
cd:de:7c:b0:23:74:9d:83:a8:c2:df:37:d6:e9:10:10:cb:ce:
8a:a8:07:12:dd:75:26:44:da:42:9b:9c:31:aa:a4:44:c7:73:
ff:6a:35:b4:ab:ef:a1:29:25:b9:0c:ca:39:e1:c0:b1:25:ce:
62:ce:a6:c8:7f:28:1d:cd:33:6e:72:ce:6e:ea:0c:5e:1a:58:
27:49:77:58:59:6c:37:9f:64:94:1c:92:4c:e0:47:8d:3b:e5:
e8:38:83:8a:2d:bb:13:21:9c:6c:2e:10:96:a2:bc:64:9a:ab:
f2:4c:0e:cc:8a:25:b5:e9:64:f2:97:d0:2d:46:7d:81:ea:dc:
81:da:f1:4d:ac:1f:38:34:63:bd:4a:d5:00:52:77:41:c6:9c:
24:bd:40:7e:4e:be:48:c5:22:48:69:c6:fd:d7:51:4e:be:90:
d9:59:34:02:bc:26:11:bd:34:e0:b9:06:61:ba:f0:e6:cc:4c:
dd:13:20:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:38:02 2025 by rpki-client