Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BbGienbM7qx1ijQP-L4gG1vTRuQ.roa
File: BbGienbM7qx1ijQP-L4gG1vTRuQ.roa (raw, json)
Hash identifier: o0BIGVItuumi3pku6aYJ8iX+9A6rSNxanjtRXZk0UMc=
Subject key identifier: 05:B1:A2:7A:76:CC:EE:AC:75:8A:34:0F:F8:BE:20:1B:5B:D3:46:E4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D77EAD9A47C9AE53A9A2C5CF47B14D355
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BbGienbM7qx1ijQP-L4gG1vTRuQ.roa
Signing time: Mon 05 Feb 2024 06:18:16 +0000
ROA not before: Mon 05 Feb 2024 06:18:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 62.76.226.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
193.124.2.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.49.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.85.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.117.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.121.0/24 maxlen: 24
194.87.133.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.205.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
194.87.230.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.37.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
195.133.8.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.58.0/24 maxlen: 24
195.133.59.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.210.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.217.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
212.192.247.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
212.193.24.0/24 maxlen: 24
212.193.30.0/24 maxlen: 24
212.193.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:77:ea:d9:a4:7c:9a:e5:3a:9a:2c:5c:f4:7b:14:d3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 5 06:18:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05b1a27a76cceeac758a340ff8be201b5bd346e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:ff:d2:c0:61:d6:0d:c9:1b:70:c8:0f:04:
68:4a:d2:3c:e2:1d:63:96:17:34:59:03:e1:56:92:
2b:c5:52:f9:89:b6:0f:57:52:5c:c9:a8:b0:98:ae:
b6:fe:af:85:6b:d2:4a:8b:96:1c:5c:3d:09:24:92:
f0:e1:0d:26:09:20:22:f8:6f:8b:a9:1c:1a:e7:b7:
e8:20:47:8c:6c:f5:55:0e:03:b9:44:88:50:0f:b5:
a4:dd:6d:2a:10:51:59:0a:cb:b3:88:e4:7f:3b:09:
c1:df:b5:f3:28:26:18:51:e8:dd:fe:07:7b:28:8a:
dd:ed:87:8f:f2:16:ac:78:9c:80:79:0e:22:61:ce:
0a:6f:e0:b8:4a:68:8b:84:90:f1:33:c8:7a:9d:13:
1b:29:f9:96:99:63:17:2b:12:cf:72:aa:07:aa:fb:
50:c0:70:f0:31:8f:85:12:05:13:b8:4a:8d:cd:87:
87:29:e7:bc:10:29:5a:ba:d0:29:7c:b4:10:27:ba:
3b:a7:b7:68:9d:a3:c4:5a:f0:01:ed:4a:e4:ca:b8:
13:15:9a:a1:1a:22:9a:ea:9a:04:37:16:f5:60:97:
d9:7d:25:cf:f8:34:77:9f:2d:04:20:0f:34:b7:de:
7a:66:30:ab:bc:f4:00:26:6e:73:29:fe:63:e0:cc:
47:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B1:A2:7A:76:CC:EE:AC:75:8A:34:0F:F8:BE:20:1B:5B:D3:46:E4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BbGienbM7qx1ijQP-L4gG1vTRuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
62.76.231.0/24
62.76.235.0/24
193.108.115.0/24
193.124.2.0/23
193.124.6.0/24
193.124.8.0/24
193.124.17.0-193.124.18.255
193.124.44.0/24
193.124.47.0/24
193.124.49.0/24
193.124.91.0/24
193.124.94.0/24
193.124.201.0/24
193.124.204.0/24
193.124.226.0/23
194.58.38.0/24
194.58.43.0/24
194.58.46.0/24
194.58.58.0-194.58.60.255
194.58.66.0/23
194.87.3.0/24
194.87.6.0/23
194.87.16.0/24
194.87.23.0/24
194.87.34.0/24
194.87.36.0/24
194.87.42.0/23
194.87.49.0/24
194.87.51.0/24
194.87.53.0/24
194.87.63.0/24
194.87.78.0/24
194.87.85.0/24
194.87.105.0/24
194.87.116.0-194.87.121.255
194.87.133.0/24
194.87.140.0/24
194.87.143.0/24
194.87.151.0/24
194.87.160.0/24
194.87.163.0/24
194.87.165.0-194.87.166.255
194.87.176.0/23
194.87.180.0-194.87.182.255
194.87.190.0/24
194.87.202.0/24
194.87.205.0/24
194.87.215.0/24
194.87.230.0/24
194.87.240.0/24
194.87.243.0/24
194.135.23.0-194.135.24.255
194.135.38.0/24
194.135.46.0/24
194.135.105.0/24
195.58.34.0/24
195.58.36.0/23
195.58.55.0-195.58.56.255
195.58.59.0/24
195.58.62.0/23
195.133.8.0/23
195.133.12.0/24
195.133.19.0/24
195.133.21.0-195.133.22.255
195.133.58.0/23
195.133.80.0-195.133.82.255
195.133.94.0/24
195.133.194.0/23
212.192.0.0/24
212.192.7.0/24
212.192.10.0/24
212.192.30.0/24
212.192.210.0/23
212.192.214.0/23
212.192.217.0/24
212.192.223.0/24
212.192.241.0/24
212.192.246.0/23
212.193.10.0/24
212.193.15.0/24
212.193.24.0/24
212.193.30.0/23
Signature Algorithm: sha256WithRSAEncryption
57:49:91:a2:bd:26:ef:49:08:a0:a3:8f:47:8f:81:c8:23:a1:
5a:35:fc:b9:c6:ef:3d:01:c0:2a:88:00:22:c4:b5:ea:31:ee:
66:7d:e7:bb:f8:95:b5:cd:a1:7d:c6:28:15:3f:35:ff:5c:6a:
fc:2c:66:13:b2:9a:11:5a:c8:04:d5:aa:0b:3c:8c:14:1a:b3:
0f:c2:9c:2f:c2:8a:bf:fe:df:90:b9:13:14:cc:3c:44:20:9c:
3c:85:54:1a:bd:1b:5b:4f:b4:5c:e8:c4:b3:28:bb:ab:41:1c:
8e:d0:c4:2c:a1:04:22:d0:c7:06:1e:77:7c:5c:27:b8:a5:6b:
55:dc:a9:45:48:e0:27:51:85:c1:dd:cf:76:47:09:7e:8b:b6:
0e:68:ef:73:35:9e:0d:47:8b:fa:0b:8b:cc:82:2c:1f:f3:97:
24:67:a3:69:96:28:54:c5:81:bb:45:f3:b9:88:66:31:04:6f:
55:0b:b5:66:de:d6:95:1f:1c:d8:02:25:78:74:ea:dc:f0:41:
a4:e8:5c:80:8d:38:ea:51:58:be:58:59:9c:8f:69:cd:c4:20:
fd:72:e8:fb:eb:0d:05:ba:16:e2:80:7c:a3:64:46:cc:06:d2:
58:1d:e2:f0:3e:46:47:cc:50:31:21:a1:72:02:da:35:51:0d:
a9:ff:52:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 11:36:18 2024 by rpki-client on console-ams.rpki-client.org