Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/BGWq2a_2FlmC-x9BoMLI0SMNkd8.roa
File: BGWq2a_2FlmC-x9BoMLI0SMNkd8.roa (raw, json)
Hash identifier: 7tXuCUqFpbCdY3zPUmnFwhlGMhuRK21zHPWbnC24hHU=
Subject key identifier: 04:65:AA:D9:AF:F6:16:59:82:FB:1F:41:A0:C2:C8:D1:23:0D:91:DF
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CD4E97B565843E4F9E40B0BAA6932
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/BGWq2a_2FlmC-x9BoMLI0SMNkd8.roa
Signing time: Mon 02 Jan 2023 03:35:55 +0000
ROA not before: Mon 02 Jan 2023 03:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12668
IP address blocks: 90.157.68.0/23 maxlen: 23
188.18.112.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
188.17.116.0/23 maxlen: 23
94.31.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Nov 2023 01:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d4:e9:7b:56:58:43:e4:f9:e4:0b:0b:aa:69:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0465aad9aff6165982fb1f41a0c2c8d1230d91df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:97:6d:93:40:06:f5:d8:47:c3:a1:37:32:6c:
b4:1c:d3:44:11:7f:77:ad:b2:a0:f4:17:c0:e8:95:
ee:68:68:d5:6a:f5:39:ee:b0:c9:85:57:2d:4d:87:
f1:27:1a:24:63:14:a4:81:dd:ba:1d:7d:29:74:b7:
60:74:66:58:bd:fb:9d:1c:6a:0b:5b:34:46:56:81:
86:4a:34:d5:fa:b5:4e:6b:6a:0e:60:fc:f2:a9:1e:
4c:28:9d:43:f1:75:ea:64:0a:01:d0:8a:c5:4b:a9:
c4:f3:2e:6c:b2:da:b8:41:a7:bf:b5:e9:f6:7d:3e:
ae:f0:71:6c:7e:5f:cf:bb:73:89:2a:95:c5:de:c9:
ef:ef:16:b9:3d:f8:c4:4d:83:d9:39:f8:37:96:2a:
49:55:97:cc:63:27:9d:98:3f:1f:da:4d:06:21:c8:
21:3f:3c:ac:a5:09:48:1f:a5:40:ce:3a:51:63:f3:
c4:f1:52:47:04:ce:d7:6e:82:7e:5e:12:85:28:99:
c6:ae:3d:e1:3b:8f:0c:36:e0:03:53:68:af:80:82:
17:51:87:69:e1:2e:55:1a:d9:e2:2a:04:09:f4:e6:
b0:a6:6b:7e:ad:f9:78:1d:8a:1b:92:f9:c4:75:61:
22:c4:97:bd:31:13:ef:7c:f4:e4:58:f4:ec:00:4b:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:65:AA:D9:AF:F6:16:59:82:FB:1F:41:A0:C2:C8:D1:23:0D:91:DF
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/BGWq2a_2FlmC-x9BoMLI0SMNkd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.157.68.0/23
94.31.195.0/24
188.17.116.0/23
188.18.112.0/23
188.18.116.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2c:48:13:8e:8b:17:07:a9:6e:44:d6:2a:45:2f:b8:e6:d0:
24:4b:2b:80:c7:19:e9:93:0a:f1:95:bb:83:5e:33:91:8b:1c:
6e:0c:2d:67:cb:ab:02:86:68:4e:54:1e:cf:7a:ef:b2:27:72:
15:e8:af:70:d4:03:7b:1a:4e:db:47:99:b9:80:60:d2:2a:e9:
c7:6b:47:9f:4d:72:20:3b:c3:5b:70:92:bf:bf:99:93:6d:68:
f5:f9:9b:86:09:ae:c3:fe:de:ca:11:d1:f0:4f:57:6a:15:05:
c7:ac:cc:a5:59:73:15:f4:3e:e7:d7:63:34:b6:b4:cb:13:a2:
e7:ab:a6:a3:06:8e:51:b5:d3:17:7f:81:1c:3b:f9:ee:75:4b:
97:2e:95:16:c7:ae:33:ec:3b:09:90:7d:ed:66:fa:7f:81:e8:
39:02:4f:87:94:d6:b4:c0:7a:15:0b:eb:81:a1:9b:a6:9f:b7:
fa:df:99:9d:f7:f5:38:16:05:5a:e4:e0:ca:00:e0:2b:e8:c6:
50:f4:04:0e:7f:c2:26:9b:0a:5d:32:d3:64:fb:d9:ee:58:c2:
15:68:89:34:7b:08:e7:90:02:df:57:c9:ec:da:92:df:61:be:
33:0e:54:78:a3:f4:13:96:1e:cf:32:e4:d3:9b:f9:46:5c:1e:
4c:ef:9a:b4
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVwjNTpe1ZYQ+T55AsLqmkyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjMwMTAyMDMzNTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDY1YWFkOWFmZjYxNjU5ODJmYjFmNDFhMGMyYzhkMTIzMGQ5MWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJdtk0AG9dhHw6E3Mmy0HNNEEX93
rbKg9BfA6JXuaGjVavU57rDJhVctTYfxJxokYxSkgd26HX0pdLdgdGZYvfudHGoL
WzRGVoGGSjTV+rVOa2oOYPzyqR5MKJ1D8XXqZAoB0IrFS6nE8y5sstq4Qae/ten2
fT6u8HFsfl/Pu3OJKpXF3snv7xa5PfjETYPZOfg3lipJVZfMYyedmD8f2k0GIcgh
PzyspQlIH6VAzjpRY/PE8VJHBM7XboJ+XhKFKJnGrj3hO48MNuADU2ivgIIXUYdp
4S5VGtniKgQJ9Oawpmt+rfl4HYobkvnEdWEixJe9MRPvfPTkWPTsAEsu3wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFARlqtmv9hZZgvsfQaDCyNEjDZHfMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvQkdXcTJhXzJGbG1DLXg5Qm9NTEkwU01Oa2Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBWp1EAwQA
Xh/DAwQBvBF0AwQBvBJwAwQAvBJ0MA0GCSqGSIb3DQEBCwUAA4IBAQBgLEgTjosX
B6luRNYqRS+45tAkSyuAxxnpkwrxlbuDXjORixxuDC1ny6sChmhOVB7Peu+yJ3IV
6K9w1AN7Gk7bR5m5gGDSKunHa0efTXIgO8NbcJK/v5mTbWj1+ZuGCa7D/t7KEdHw
T1dqFQXHrMylWXMV9D7n12M0trTLE6Lnq6ajBo5RtdMXf4EcO/nudUuXLpUWx64z
7DsJkH3tZvp/geg5Ak+HlNa0wHoVC+uBoZumn7f635md9/U4FgVa5ODKAOAr6MZQ
9AQOf8ImmwpdMtNk+9nuWMIVaIk0ewjnkALfV8ns2pLfYb4zDlR4o/QTlh7PMuTT
m/lGXB5M75q0
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:55 2024 by rpki-client on console-fra.rpki-client.org