Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/BalyRJCEk9h6Gm5OS5fHUEMc6gY.roa
File: BalyRJCEk9h6Gm5OS5fHUEMc6gY.roa (raw, json)
Hash identifier: F1yn0CeCRZzgcrp+2Ol+UWtWipX4jZv4p2Z1BtERS2Y=
Subject key identifier: 05:A9:72:44:90:84:93:D8:7A:1A:6E:4E:4B:97:C7:50:43:1C:EA:06
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018CC7944FB964AD0B0DD2023A2CB6A26C77
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/BalyRJCEk9h6Gm5OS5fHUEMc6gY.roa
Signing time: Tue 02 Jan 2024 00:30:34 +0000
ROA not before: Tue 02 Jan 2024 00:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12880
IP address blocks: 2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.10.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.11.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.15.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
78.39.152.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
78.39.155.0/24 maxlen: 24
78.39.153.0/24 maxlen: 24
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
2.189.5.48/28 maxlen: 28
2.188.54.0/24 maxlen: 24
2.188.58.0/24 maxlen: 24
2.188.53.0/24 maxlen: 24
2.188.55.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.60.0/24 maxlen: 24
2.188.59.0/24 maxlen: 24
2.188.78.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.76.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.243.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
2.187.0.0/16 maxlen: 24
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.39.128.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
2.189.5.96/28 maxlen: 28
78.39.43.0/24 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.59.0/24 maxlen: 24
78.39.62.0/23 maxlen: 24
78.38.32.0/19 maxlen: 19
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
195.146.37.0/24 maxlen: 24
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.36.0/24 maxlen: 24
195.146.32.0/24 maxlen: 24
195.146.50.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.219.40.0/22 maxlen: 22
2.178.192.0/18 maxlen: 18
217.219.0.0/16 maxlen: 24
217.219.24.0/21 maxlen: 21
217.219.152.0/21 maxlen: 21
85.185.230.0/23 maxlen: 23
2.189.5.64/28 maxlen: 28
85.185.192.0/22 maxlen: 22
217.218.85.0/24 maxlen: 24
80.191.103.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.105.0/24 maxlen: 24
217.218.104.0/24 maxlen: 24
2.178.0.0/19 maxlen: 19
217.218.114.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.64.0/23 maxlen: 24
217.218.48.0/21 maxlen: 21
80.191.61.0/24 maxlen: 24
80.191.67.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
217.218.55.0/24 maxlen: 24
217.218.64.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
80.191.81.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
80.191.88.0/21 maxlen: 24
2.189.79.64/27 maxlen: 27
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
2.189.5.112/28 maxlen: 28
2.178.128.0/18 maxlen: 18
217.218.143.0/24 maxlen: 24
2.178.32.0/19 maxlen: 19
217.218.141.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
2.178.64.0/18 maxlen: 18
85.185.0.0/16 maxlen: 24
217.218.180.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
80.191.0.0/24 maxlen: 24
80.191.0.0/16 maxlen: 24
2.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
217.218.21.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
2.189.5.32/28 maxlen: 28
2.182.248.0/22 maxlen: 22
2.182.214.0/23 maxlen: 23
2.189.79.32/27 maxlen: 27
2.176.192.0/18 maxlen: 18
2.189.5.80/28 maxlen: 28
2.176.0.0/12 maxlen: 12
2.189.7.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.182.0.0/16 maxlen: 24
2.189.78.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.189.4.0/28 maxlen: 28
2.182.96.0/19 maxlen: 19
2.189.44.0/24 maxlen: 24
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2001:4188::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 28 Apr 2024 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:4f:b9:64:ad:0b:0d:d2:02:3a:2c:b6:a2:6c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 00:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05a97244908493d87a1a6e4e4b97c750431cea06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7f:65:72:ef:e3:1a:2e:07:94:c4:0a:22:d5:
c9:ea:be:71:97:b6:2d:7a:b2:c7:5f:9c:8e:df:24:
db:ef:56:c8:8f:5c:7e:3c:c5:ef:b1:10:e0:49:d2:
f5:1e:ec:1c:74:14:ee:9d:cb:35:ad:25:46:cb:9d:
30:1f:81:57:92:a6:17:7d:15:e5:1a:cb:17:10:d8:
4e:fb:3d:c0:16:58:33:f6:dc:f1:2f:00:a2:71:0e:
d6:33:bb:98:40:22:0c:86:6a:6f:c4:a9:26:81:63:
e7:1b:04:c4:0a:e2:5f:7f:fa:32:7d:3f:a4:15:eb:
d8:05:b6:1c:ea:cc:d7:72:b2:99:d5:f1:3b:7f:73:
33:68:ed:92:18:83:8f:cf:d6:3e:7e:3a:54:7d:87:
10:c8:0f:bb:7b:3b:82:45:b1:ed:07:a3:50:55:4c:
e2:96:91:05:f6:64:85:a7:31:06:76:64:63:ca:cd:
da:fd:bd:e8:c4:a6:29:6a:a1:d4:49:33:bd:82:ca:
5b:86:49:b8:86:cd:ce:96:7c:03:ed:69:fb:27:f2:
d4:a1:2f:08:0a:93:77:b8:b0:81:dc:39:04:87:8a:
e7:eb:3a:6b:21:49:c7:33:01:c5:8c:32:31:36:ce:
2a:ca:a2:2c:fe:3d:ff:9c:2c:da:3c:8f:a7:0a:5a:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A9:72:44:90:84:93:D8:7A:1A:6E:4E:4B:97:C7:50:43:1C:EA:06
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/BalyRJCEk9h6Gm5OS5fHUEMc6gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
a2:a8:04:6e:a5:dd:88:4f:5f:8b:09:9a:1b:53:94:0e:21:50:
76:ac:84:37:58:9d:82:5e:11:20:6f:4d:77:de:8a:61:da:bd:
be:64:5f:a2:92:51:c4:f6:9d:1d:8f:3f:24:1d:6c:e5:0c:5b:
81:5a:4f:70:25:6a:45:8a:2f:3d:c4:d9:41:cf:e7:f4:32:e8:
87:c0:5b:54:3d:4f:b2:87:d4:51:1f:13:c4:b2:22:db:a5:9e:
13:3c:b9:b0:a9:2a:0b:96:17:4d:34:fd:d0:c1:67:58:e2:95:
87:6d:3c:f5:19:1e:70:98:26:53:3f:c9:0b:3d:df:32:d2:8b:
a1:d6:79:98:ab:a6:ee:5d:8f:e0:a3:1a:67:61:92:0c:31:f8:
e5:b2:4d:ba:fd:4e:cd:b6:a8:c5:c3:1d:1e:a8:40:9e:55:76:
e3:17:dd:fd:05:8f:85:89:bb:30:ef:de:e1:43:68:fd:30:3a:
4e:91:fc:9d:f0:e8:a7:06:90:19:d6:44:08:c4:4e:b3:ea:17:
90:cc:13:f6:5f:4f:0b:65:c9:94:6f:34:97:ad:a5:c0:5f:58:
8d:2c:45:9d:1f:65:2a:e8:7c:4b:71:d0:f4:b6:54:b7:72:05:
0a:cb:c3:29:08:44:6c:d4:fe:ef:d4:c6:6c:87:cd:5a:63:76:
63:92:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org