Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BPYvlC8Tl8pju3lBB4aL61e0Pmk.roa
File: BPYvlC8Tl8pju3lBB4aL61e0Pmk.roa (raw, json)
Hash identifier: TKv9QeO8J7BOYnI8XB/gn99ONcW8sQpmpKmpOE8UAco=
Subject key identifier: 04:F6:2F:94:2F:13:97:CA:63:BB:79:41:07:86:8B:EB:57:B4:3E:69
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D0C43C77727697FB98D2CE1432E26C1D3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BPYvlC8Tl8pju3lBB4aL61e0Pmk.roa
Signing time: Mon 15 Jan 2024 08:36:25 +0000
ROA not before: Mon 15 Jan 2024 08:36:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50738
IP address blocks: 87.121.124.0/23 maxlen: 24
171.22.31.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.248.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 15:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:43:c7:77:27:69:7f:b9:8d:2c:e1:43:2e:26:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 15 08:36:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04f62f942f1397ca63bb794107868beb57b43e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:38:07:41:0a:4a:6c:02:a0:6d:b9:46:b3:
c7:f6:0c:68:59:9a:14:fd:42:23:72:4c:60:93:5d:
c9:d3:e0:49:35:91:99:16:8b:82:a8:7f:a7:4c:f4:
b2:41:a5:0e:81:02:f1:3a:6e:81:34:23:52:1e:2d:
44:b7:85:bf:c0:e6:8f:1e:ff:14:85:1d:a2:78:71:
25:5b:18:4b:7a:f8:94:dc:1a:de:f9:ee:52:e2:1a:
10:8a:7b:e7:9d:0b:0f:3a:d7:05:e2:e3:6e:23:07:
e5:00:54:bf:cd:bc:15:2c:5b:99:44:cc:4c:de:f7:
e5:7a:ad:7d:68:48:fc:9d:ca:fd:5c:24:82:60:55:
f9:96:d2:6e:ea:9a:ff:96:62:cd:16:92:b6:6f:ce:
2d:dc:36:cf:69:4a:8e:b1:ba:a5:ef:4f:64:89:26:
ec:35:82:39:3b:c8:f1:18:d8:39:3d:19:d3:64:73:
a7:49:80:7d:4f:d0:f8:6e:9c:cf:36:ef:f1:60:05:
6f:f8:1f:d3:51:ff:33:63:58:b5:7e:41:1c:a5:83:
6e:84:0b:8b:65:a6:8f:a8:4e:ab:9c:a7:a4:30:6e:
65:a5:fb:d5:9b:f1:26:56:d4:2d:d0:8d:aa:0a:c1:
71:2e:b9:23:2b:ba:f8:b6:c4:fe:af:23:1a:b8:c0:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F6:2F:94:2F:13:97:CA:63:BB:79:41:07:86:8B:EB:57:B4:3E:69
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BPYvlC8Tl8pju3lBB4aL61e0Pmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.129.84.0/24
45.141.158.0/24
79.110.61.0/24
81.161.239.0/24
87.121.124.0/23
87.121.162.0/24
91.200.192.0/22
94.156.248.0/24
171.22.17.0/24
171.22.31.0/24
193.25.216.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
63:28:3d:59:2f:09:62:ba:48:6e:fa:c2:6f:a9:8b:11:5d:e4:
37:1a:15:45:1f:24:99:0d:3a:29:7d:b2:00:da:d8:62:7e:be:
81:2a:4b:5f:a2:ab:bd:f9:87:86:5d:08:81:3d:60:80:6b:9e:
51:30:0e:b7:07:8f:1d:0f:9b:ef:ad:e8:d2:cf:65:82:fd:10:
3f:c4:03:74:29:b3:b4:f2:9a:cb:ed:95:9e:e4:cd:5d:ca:9e:
27:53:f9:c1:cd:2b:6d:b2:fd:0f:1a:fb:4d:51:18:9d:f2:e9:
cf:74:6e:7d:5c:27:5a:6f:1c:87:4d:48:ac:9e:74:0e:5c:e8:
6f:31:42:e5:0a:3f:cc:e4:65:6b:cd:4c:15:30:0d:7b:74:b7:
a2:22:89:eb:7c:26:9d:f4:fc:d8:c7:bf:7d:8d:f2:be:7a:f0:
66:c9:c9:50:9d:b8:d5:64:45:8d:20:89:0d:1b:68:cb:5d:90:
b4:78:7c:5a:0d:18:f9:da:c5:cd:3f:fb:a5:55:1d:8b:96:fe:
4d:fa:49:c9:a5:9a:4a:7e:f0:68:6a:b8:57:5b:0a:b9:5f:77:
59:f2:f3:2a:f5:9a:37:dc:ff:2d:bf:f9:9f:a7:fe:67:bc:c9:
57:49:4b:2b:91:d7:fc:75:51:5c:6d:04:56:67:2b:59:a0:fc:
91:e1:63:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 20:13:14 2024 by rpki-client on console-ams.rpki-client.org