Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/BxZeFGPg6mjL2jVTzPvrlrfNNkw.roa
File: BxZeFGPg6mjL2jVTzPvrlrfNNkw.roa (raw, json)
Hash identifier: uzVPG7GQQrANBABnRkYAIPL2sa/bpq01L165MYcFuoI=
Subject key identifier: 07:16:5E:14:63:E0:EA:68:CB:DA:35:53:CC:FB:EB:96:B7:CD:36:4C
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 018A8D4DA38501DB72F877696EF26EA07141
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/BxZeFGPg6mjL2jVTzPvrlrfNNkw.roa
Signing time: Wed 13 Sep 2023 06:49:50 +0000
ROA not before: Wed 13 Sep 2023 06:49:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5385
IP address blocks: 194.208.56.0/24 maxlen: 24
194.208.52.0/24 maxlen: 24
194.208.63.0/24 maxlen: 24
194.208.61.0/24 maxlen: 24
194.208.62.0/24 maxlen: 24
194.208.60.0/24 maxlen: 24
194.208.64.0/24 maxlen: 24
194.208.68.0/24 maxlen: 24
194.208.76.0/24 maxlen: 24
194.208.77.0/24 maxlen: 24
194.208.74.0/24 maxlen: 24
194.208.72.0/24 maxlen: 24
194.208.78.0/24 maxlen: 24
194.208.83.0/24 maxlen: 24
194.208.82.0/24 maxlen: 24
194.208.80.0/24 maxlen: 24
194.208.81.0/24 maxlen: 24
194.208.79.0/24 maxlen: 24
194.208.89.0/24 maxlen: 24
194.208.96.0/23 maxlen: 23
194.208.94.0/24 maxlen: 24
194.208.92.0/24 maxlen: 24
194.208.93.0/24 maxlen: 24
194.208.104.0/24 maxlen: 24
194.208.105.0/24 maxlen: 24
194.208.102.0/24 maxlen: 24
194.208.1.0/24 maxlen: 24
194.208.0.0/17 maxlen: 17
194.208.7.0/24 maxlen: 24
194.208.10.0/24 maxlen: 24
194.208.11.0/24 maxlen: 24
194.208.17.0/24 maxlen: 24
194.208.15.0/24 maxlen: 24
194.208.12.0/24 maxlen: 24
194.208.13.0/24 maxlen: 24
194.208.18.0/24 maxlen: 24
194.208.23.0/24 maxlen: 24
194.208.25.0/24 maxlen: 24
194.208.43.0/24 maxlen: 24
194.208.42.0/24 maxlen: 24
194.208.40.0/24 maxlen: 24
194.208.41.0/24 maxlen: 24
194.208.49.0/24 maxlen: 24
194.208.45.0/24 maxlen: 24
194.208.46.0/24 maxlen: 24
194.208.51.0/24 maxlen: 24
194.208.160.0/20 maxlen: 20
194.208.186.0/24 maxlen: 24
194.208.184.0/21 maxlen: 21
194.208.187.0/24 maxlen: 24
194.208.192.0/18 maxlen: 18
194.208.207.0/24 maxlen: 24
194.208.108.0/24 maxlen: 24
194.208.107.0/24 maxlen: 24
194.208.116.0/24 maxlen: 24
194.208.117.0/24 maxlen: 24
194.208.120.0/24 maxlen: 24
194.208.121.0/24 maxlen: 24
194.208.127.0/24 maxlen: 24
194.183.148.0/24 maxlen: 24
194.183.146.0/24 maxlen: 24
194.183.147.0/24 maxlen: 24
194.183.152.0/24 maxlen: 24
194.183.151.0/24 maxlen: 24
194.183.153.0/24 maxlen: 24
80.75.224.0/20 maxlen: 20
194.183.128.0/19 maxlen: 19
194.183.131.0/24 maxlen: 24
194.183.132.0/24 maxlen: 24
194.183.129.0/24 maxlen: 24
194.183.130.0/24 maxlen: 24
194.183.128.0/24 maxlen: 24
194.183.138.0/24 maxlen: 24
194.183.136.0/24 maxlen: 24
194.183.137.0/24 maxlen: 24
194.183.140.0/24 maxlen: 24
194.183.143.0/24 maxlen: 24
194.208.243.0/24 maxlen: 24
194.208.245.0/24 maxlen: 24
2001:af8:6106::/48 maxlen: 48
2001:af8::/32 maxlen: 32
2001:af8:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:4d:a3:85:01:db:72:f8:77:69:6e:f2:6e:a0:71:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Sep 13 06:49:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07165e1463e0ea68cbda3553ccfbeb96b7cd364c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5a:74:0c:44:a6:f3:6d:08:aa:8a:e2:f1:2b:
8a:9a:04:64:e4:3a:4f:02:6f:92:28:dc:35:ed:13:
45:0e:01:ce:81:3a:18:0f:5a:c4:13:ed:01:f0:9f:
d4:eb:16:30:b1:09:08:88:75:6f:b1:80:00:c9:b7:
69:49:f5:58:58:58:29:b6:c9:13:2a:07:2f:b3:cb:
44:bb:0f:57:c7:ac:4a:64:34:4f:08:b4:a4:ba:8f:
d2:ea:c7:94:d9:0c:68:4e:31:b0:b3:04:3d:1e:80:
5e:7e:83:34:6d:9e:4f:d9:3f:a6:3b:0a:d5:0d:43:
4d:76:01:48:4e:f6:5f:55:ef:5c:72:f6:c0:0f:52:
77:71:71:b0:71:52:a7:58:22:95:02:da:48:df:e3:
dc:35:23:8f:3c:b4:62:73:e7:97:ab:a9:dc:63:1d:
0b:84:34:40:a3:2e:b5:82:39:a0:2c:58:ea:cf:7a:
ae:de:08:49:08:3f:75:aa:03:44:3e:eb:9a:34:d1:
c7:a2:13:86:ed:ff:08:bd:d6:e8:cf:0a:d6:8b:38:
45:10:87:2c:5d:a0:0f:4e:b2:16:37:1b:99:02:b3:
f4:88:fe:cd:cb:66:1d:8b:2b:cb:27:a5:e6:31:8e:
a7:66:dd:62:65:c0:07:ce:19:f2:cd:c5:70:bd:45:
fb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:16:5E:14:63:E0:EA:68:CB:DA:35:53:CC:FB:EB:96:B7:CD:36:4C
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/BxZeFGPg6mjL2jVTzPvrlrfNNkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.224.0/20
194.183.128.0/19
194.208.0.0/17
194.208.160.0/20
194.208.184.0-194.208.255.255
IPv6:
2001:af8::/32
Signature Algorithm: sha256WithRSAEncryption
27:6f:b1:7f:4b:5a:1c:26:d2:51:59:db:0d:eb:ce:90:4d:b9:
7f:af:0c:3b:e8:15:fa:8d:ec:79:b4:6f:4a:b3:60:a3:65:9d:
46:30:1f:1a:46:f2:55:80:2c:75:64:56:09:e6:d1:26:4f:f4:
c5:01:cd:d5:19:ce:89:7b:a6:47:28:9a:7d:fe:a5:1c:19:e4:
b5:27:cc:d5:d2:be:c2:f4:66:a4:8c:99:4f:d6:95:e9:3a:9c:
f6:66:79:84:fc:28:6c:8e:13:f9:06:de:47:08:5f:e8:95:a2:
49:7b:63:94:c2:f5:c1:bd:a2:de:03:4a:aa:6d:32:b4:9b:f0:
0e:27:92:4f:d7:94:21:ef:a6:01:9a:b3:f2:53:4f:49:95:12:
23:d3:0e:18:e7:44:81:ae:10:36:0a:8f:43:bb:ad:0a:a5:15:
6d:68:a2:b7:49:3a:9e:3b:74:a0:32:53:ad:57:7a:f3:3f:fe:
ea:b1:ac:fe:45:11:55:db:97:71:47:89:ba:0c:af:41:5f:f5:
e5:b4:0b:a8:54:58:cf:b3:c1:11:0c:bc:2b:ba:3f:0c:02:4c:
a4:48:bd:85:20:3b:83:bd:da:16:ee:23:e5:bd:2b:ca:ae:e0:
95:55:75:10:0f:dc:00:03:0f:6f:b7:b2:08:12:85:bf:b5:fd:
05:2a:72:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:54 2024 by rpki-client on console-fra.rpki-client.org