Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/n_BXS5e4jcF2AzdRjd99Gvt_Qvc.roa
File: n_BXS5e4jcF2AzdRjd99Gvt_Qvc.roa (raw, json)
Hash identifier: gvaQHMy4ryY1RYT5YM4dZxTTkg4+p4yKSZjlnSGjv+g=
Subject key identifier: 9F:F0:57:4B:97:B8:8D:C1:76:03:37:51:8D:DF:7D:1A:FB:7F:42:F7
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 018CC9BC3A67A362C44F5329312AD1B31927
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/n_BXS5e4jcF2AzdRjd99Gvt_Qvc.roa
Signing time: Tue 02 Jan 2024 10:33:25 +0000
ROA not before: Tue 02 Jan 2024 10:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41155
IP address blocks: 45.158.139.0/24 maxlen: 24
45.158.136.0/24 maxlen: 24
45.158.137.0/24 maxlen: 24
45.158.138.0/24 maxlen: 24
194.0.221.0/24 maxlen: 24
194.0.223.0/24 maxlen: 24
194.0.193.0/24 maxlen: 24
45.156.74.0/24 maxlen: 24
45.156.75.0/24 maxlen: 24
45.156.72.0/24 maxlen: 24
45.156.73.0/24 maxlen: 24
2a0d:8e80:8080::/48 maxlen: 48
2a0d:8e80:8a80::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 31 Mar 2024 02:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3a:67:a3:62:c4:4f:53:29:31:2a:d1:b3:19:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Jan 2 10:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ff0574b97b88dc1760337518ddf7d1afb7f42f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:66:e1:81:47:77:5e:3e:61:e6:55:fe:73:34:
0b:a1:c8:a9:dc:24:24:b5:03:23:36:48:7f:b2:61:
51:a1:27:fb:09:dc:62:fd:19:9b:e1:fb:94:d3:e6:
eb:f3:24:b5:64:19:33:00:db:cc:7c:f2:8c:b3:94:
8e:34:e4:54:cb:7f:f3:d0:5f:65:aa:26:82:0c:e0:
bc:6a:23:54:a6:2e:3d:a8:44:83:83:78:76:c5:55:
8f:0d:9a:81:0c:3d:98:d8:c7:f9:90:70:11:91:8e:
57:e7:d2:49:81:f0:ac:82:e1:b1:31:02:37:ae:3c:
b6:6c:ff:2c:3f:41:05:d7:87:89:a1:f1:f1:9d:ab:
db:c5:78:02:46:52:55:46:9e:87:a0:ba:0a:b1:fc:
e1:15:98:0e:d9:24:a4:49:ad:5f:a7:91:8b:d2:a4:
76:ee:09:5a:40:28:f5:73:7f:0b:a8:03:5a:26:a9:
ca:5f:13:68:a9:91:f6:73:cf:ba:41:67:19:48:d6:
ed:cb:5b:a3:ca:c1:cb:6a:b0:71:4c:15:1f:70:5c:
ff:14:c6:d9:31:2d:c4:43:f2:c7:b0:9e:e6:5d:52:
a4:48:7a:65:59:c5:5d:60:91:2a:32:e4:9e:22:00:
27:8f:39:57:a4:47:54:97:25:a2:1f:bb:ce:27:f5:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F0:57:4B:97:B8:8D:C1:76:03:37:51:8D:DF:7D:1A:FB:7F:42:F7
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/n_BXS5e4jcF2AzdRjd99Gvt_Qvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.72.0/22
45.158.136.0/22
194.0.193.0/24
194.0.221.0/24
194.0.223.0/24
IPv6:
2a0d:8e80:8080::/48
2a0d:8e80:8a80::/48
Signature Algorithm: sha256WithRSAEncryption
0a:4d:60:ab:b4:a0:86:d0:90:04:ad:7a:68:f5:cc:0b:c8:43:
68:d2:b0:ec:19:b2:9f:62:4e:07:26:c8:c7:fb:0b:6c:dd:31:
be:08:ed:af:d5:fd:26:b3:c2:32:4b:fc:46:37:6f:b4:c0:ce:
db:96:ab:ba:f2:5b:00:d9:9f:48:9e:77:b6:42:3c:c2:f7:2e:
cc:4e:c1:97:26:0e:42:c6:a5:06:81:4a:d6:7d:19:c0:9d:e1:
0b:45:4d:82:fb:e5:d9:48:a2:e8:f5:91:14:56:e9:c0:6e:a3:
df:5f:10:aa:ae:9f:3a:10:1a:5d:d6:8d:87:9c:26:e8:13:73:
6e:85:41:a0:c0:49:66:1b:9f:ec:48:86:d4:df:b1:36:59:3d:
5d:d4:98:70:56:7e:2a:02:eb:76:a8:6a:b5:34:0a:5d:a5:ae:
11:0b:54:77:14:0a:82:c4:68:80:cd:75:bb:0e:73:75:90:5e:
4c:a7:c3:36:b0:7f:c3:79:1b:d8:cd:e1:5f:48:cc:54:bb:29:
5c:8d:1e:a5:b3:b2:35:5f:34:61:88:7d:e8:01:ac:8c:7f:0a:
ac:52:15:4c:73:21:ee:e5:ad:e1:78:7f:2c:7f:f1:e8:50:c1:
80:f7:6d:87:91:ee:31:9f:fe:94:1f:d4:05:32:c1:ba:cd:39:
62:bd:ca:c7
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYzJvDpno2LET1MpMSrRsxknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjEzMDhjNmE5NzdkNWNiOTAzYmYyNWE5NjMwOGIwZThj
ZTNiNDYwHhcNMjQwMTAyMTAzMzI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmYwNTc0Yjk3Yjg4ZGMxNzYwMzM3NTE4ZGRmN2QxYWZiN2Y0MmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32bhgUd3Xj5h5lX+czQLocip3CQk
tQMjNkh/smFRoSf7Cdxi/Rmb4fuU0+br8yS1ZBkzANvMfPKMs5SONORUy3/z0F9l
qiaCDOC8aiNUpi49qESDg3h2xVWPDZqBDD2Y2Mf5kHARkY5X59JJgfCsguGxMQI3
rjy2bP8sP0EF14eJofHxnavbxXgCRlJVRp6HoLoKsfzhFZgO2SSkSa1fp5GL0qR2
7glaQCj1c38LqANaJqnKXxNoqZH2c8+6QWcZSNbty1ujysHLarBxTBUfcFz/FMbZ
MS3EQ/LHsJ7mXVKkSHplWcVdYJEqMuSeIgAnjzlXpEdUlyWiH7vOJ/USGQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFJ/wV0uXuI3BdgM3UY3ffRr7f0L3MB8GA1UdIwQY
MBaAFIuxMIxql31cuQO/JaljCLDozjtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NzY2ODEtYjVlZS00MzBmLTg2OTMt
MTAxYWJkNzM5MWE2LzEvbl9CWFM1ZTRqY0YyQXpkUmpkOTlHdnRfUXZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NzY2ODEtYjVlZS00MzBmLTg2OTMtMTAxYWJkNzM5MWE2
LzEvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAkBAIAATAeAwQCLZxIAwQC
LZ6IAwQAwgDBAwQAwgDdAwQAwgDfMBgEAgACMBIDBwAqDY6AgIADBwAqDY6AioAw
DQYJKoZIhvcNAQELBQADggEBAApNYKu0oIbQkAStemj1zAvIQ2jSsOwZsp9iTgcm
yMf7C2zdMb4I7a/V/SazwjJL/EY3b7TAztuWq7ryWwDZn0ied7ZCPML3LsxOwZcm
DkLGpQaBStZ9GcCd4QtFTYL75dlIouj1kRRW6cBuo99fEKqunzoQGl3WjYecJugT
c26FQaDASWYbn+xIhtTfsTZZPV3UmHBWfioC63aoarU0Cl2lrhELVHcUCoLEaIDN
dbsOc3WQXkynwzawf8N5G9jN4V9IzFS7KVyNHqWzsjVfNGGIfegBrIx/CqxSFUxz
Ie7lreF4fyx/8ehQwYD3bYeR7jGf/pQf1AUywbrNOWK9ysc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org