Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/Bg2Idtdx_CMZsoC8DSDplPUpJy8.roa
File: Bg2Idtdx_CMZsoC8DSDplPUpJy8.roa (raw, json)
Hash identifier: K1UeLAS3pAbRKM3LkTcNAcyJiuEWh6OlMG/NpEpLbrc=
Subject key identifier: 06:0D:88:76:D7:71:FC:23:19:B2:80:BC:0D:20:E9:94:F5:29:27:2F
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 0193D9FF3F301DF3D0150B69B39AD53965D1
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/Bg2Idtdx_CMZsoC8DSDplPUpJy8.roa
Signing time: Wed 18 Dec 2024 13:40:03 +0000
ROA not before: Wed 18 Dec 2024 13:40:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49367
IP address blocks: 31.193.188.0/24 maxlen: 24
37.156.174.0/24 maxlen: 24
45.83.56.0/22 maxlen: 22
45.86.144.0/22 maxlen: 22
77.81.103.0/24 maxlen: 24
85.204.255.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
89.34.236.0/23 maxlen: 23
89.34.239.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
89.40.227.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.43.34.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
89.43.52.0/24 maxlen: 24
91.212.52.0/24 maxlen: 24
91.229.186.0/24 maxlen: 24
93.113.144.0/21 maxlen: 21
93.113.144.0/22 maxlen: 22
93.113.144.0/24 maxlen: 24
93.113.145.0/24 maxlen: 24
93.113.146.0/24 maxlen: 24
93.113.147.0/24 maxlen: 24
93.113.148.0/22 maxlen: 22
93.113.148.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
94.177.21.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
185.184.240.0/22 maxlen: 22
185.184.240.0/24 maxlen: 24
185.184.241.0/24 maxlen: 24
185.184.242.0/24 maxlen: 24
185.184.243.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
188.208.16.0/24 maxlen: 24
188.208.17.0/24 maxlen: 24
188.211.248.0/24 maxlen: 24
188.215.6.0/23 maxlen: 23
188.215.6.0/24 maxlen: 24
188.215.7.0/24 maxlen: 24
188.215.94.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
188.240.228.0/24 maxlen: 24
188.240.229.0/24 maxlen: 24
193.239.140.0/23 maxlen: 23
217.198.177.0/24 maxlen: 24
2a04:68c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 20 Dec 2024 13:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:ff:3f:30:1d:f3:d0:15:0b:69:b3:9a:d5:39:65:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Dec 18 13:40:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=060d8876d771fc2319b280bc0d20e994f529272f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c4:cb:d9:62:1f:7d:71:5d:9a:e5:37:4b:b7:
6f:6a:27:70:33:5d:bc:7f:8b:e0:a2:64:20:36:ff:
8e:e5:6e:51:4a:4e:7c:44:d7:1a:05:55:f5:40:fd:
bf:54:76:0e:e8:bd:31:b1:11:3e:21:71:d3:aa:9e:
91:7f:19:ab:a2:0b:37:37:61:9d:ce:71:6a:a1:6f:
2f:d1:32:5f:80:7e:a5:13:5e:95:a0:13:db:20:3a:
6c:0d:e9:a8:b5:89:24:c8:f6:ec:48:35:f0:79:87:
a6:51:15:b3:e1:50:9b:ba:b8:a1:8a:5c:bc:d8:e9:
3c:d9:28:1e:2d:90:39:74:5e:68:c3:15:01:68:20:
34:4a:d6:93:2f:c5:5f:e8:30:df:b9:f4:7e:b0:56:
f4:b7:77:ff:4c:c0:2a:d9:98:b5:30:49:e7:60:ea:
51:1a:7e:d6:2a:97:41:3f:f4:6a:4f:e7:ff:69:e7:
bb:09:c5:36:12:6a:59:69:3b:61:2a:46:99:33:a1:
97:7c:e0:ad:8f:5f:a8:c2:39:c8:10:99:21:12:6a:
5d:76:44:e3:bb:03:49:f4:e5:86:e6:6d:94:b8:b5:
ef:da:6c:eb:34:e1:2a:7c:b8:05:96:90:02:32:38:
a2:c9:14:f8:c4:81:f0:94:04:6b:65:86:88:c0:f9:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0D:88:76:D7:71:FC:23:19:B2:80:BC:0D:20:E9:94:F5:29:27:2F
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/Bg2Idtdx_CMZsoC8DSDplPUpJy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.188.0/24
37.156.174.0/24
45.83.56.0/22
45.86.144.0/22
77.81.103.0/24
85.204.255.0/24
86.107.110.0/24
89.34.236.0/23
89.34.239.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.34.0/23
89.43.52.0/24
91.212.52.0/24
91.229.186.0/24
93.113.144.0/21
94.176.212.0/24
94.177.21.0/24
94.177.48.0/23
185.184.240.0/22
188.208.16.0/23
188.211.248.0/24
188.215.6.0/23
188.215.94.0/24
188.240.228.0/23
193.239.140.0/23
217.198.177.0/24
IPv6:
2a04:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
e4:b3:58:ac:a1:f8:dc:07:57:f5:b0:ad:45:3f:d9:a3:37:55:
b1:12:e0:56:d5:4c:8a:a5:9c:ab:f7:6c:79:9e:6f:8a:1b:53:
92:23:5e:13:30:59:aa:88:af:60:00:15:b4:bc:47:b3:71:13:
50:56:32:fc:f2:dc:05:f6:2d:5d:84:9e:56:cf:eb:dc:8f:28:
5e:93:20:f5:d9:3b:a7:97:f8:14:fd:da:2c:ef:56:aa:b5:ee:
80:1e:99:38:31:05:be:76:dc:2e:68:7a:6f:93:ce:e0:08:c9:
bc:40:4f:5b:df:fc:61:fa:44:0c:3c:cd:36:52:5c:23:29:7f:
42:f4:e5:ba:16:5c:38:8a:a6:d5:12:79:a7:13:80:5d:33:ee:
bb:bb:7b:8e:d6:23:a9:cd:55:e4:cc:63:55:1b:96:81:58:46:
63:06:5e:e1:f0:0a:1a:ef:9d:a0:52:4b:3a:76:5c:5f:83:e7:
a6:16:b6:a3:a5:74:87:a7:8b:95:37:33:dd:d4:4e:19:53:05:
80:ad:f8:22:c6:63:5b:ab:f6:6d:55:96:40:91:8e:b0:d8:ce:
04:a1:95:6b:89:da:c2:ab:8e:2e:55:91:77:a6:63:2b:16:b9:
a4:ce:3d:7b:b4:20:99:3c:0b:e5:6c:ab:9d:4c:df:5f:61:f8:
e8:6f:a2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:09 2025 by rpki-client