Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/BodljezAzvVTIZUF5d_nKQOyBjs.roa
File: BodljezAzvVTIZUF5d_nKQOyBjs.roa (raw, json)
Hash identifier: xZiPOnyeGaj7JcJXyJw2qONoKRXzPPSOKeP72DxM3Oc=
Subject key identifier: 06:87:65:8D:EC:C0:CE:F5:53:21:95:05:E5:DF:E7:29:03:B2:06:3B
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 0187EAFA1A6D1732A93338E3DB65673290A9
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/BodljezAzvVTIZUF5d_nKQOyBjs.roa
Signing time: Fri 05 May 2023 08:14:32 +0000
ROA not before: Fri 05 May 2023 08:14:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45011
IP address blocks: 188.120.160.0/19 maxlen: 19
82.117.96.0/19 maxlen: 19
94.198.64.0/21 maxlen: 21
94.245.16.0/20 maxlen: 20
85.235.0.0/19 maxlen: 19
85.235.17.0/24 maxlen: 24
85.235.24.0/24 maxlen: 24
94.245.48.0/20 maxlen: 20
85.235.18.0/23 maxlen: 23
85.235.20.0/22 maxlen: 22
178.251.240.0/21 maxlen: 21
213.185.12.0/22 maxlen: 22
213.185.16.0/23 maxlen: 23
91.232.60.0/23 maxlen: 23
213.185.24.0/24 maxlen: 24
91.232.59.0/24 maxlen: 24
213.185.20.0/23 maxlen: 23
213.185.26.0/24 maxlen: 24
109.124.128.0/18 maxlen: 18
79.138.0.0/17 maxlen: 17
109.225.64.0/18 maxlen: 18
85.238.192.0/19 maxlen: 19
85.30.0.0/18 maxlen: 18
213.185.4.0/24 maxlen: 24
213.185.6.0/24 maxlen: 24
213.185.7.0/24 maxlen: 24
213.185.10.0/24 maxlen: 24
213.185.8.0/23 maxlen: 23
80.244.64.0/19 maxlen: 19
185.18.164.0/22 maxlen: 22
94.245.0.0/20 maxlen: 20
87.241.64.0/18 maxlen: 18
185.52.180.0/22 maxlen: 22
87.96.128.0/17 maxlen: 17
88.83.32.0/19 maxlen: 19
213.21.64.0/18 maxlen: 18
37.17.248.0/21 maxlen: 21
188.122.128.0/19 maxlen: 19
5.44.192.0/20 maxlen: 20
88.129.0.0/16 maxlen: 16
217.72.54.0/24 maxlen: 24
217.72.56.0/22 maxlen: 22
217.72.52.0/23 maxlen: 23
217.72.60.0/23 maxlen: 23
217.72.62.0/24 maxlen: 24
178.132.248.0/21 maxlen: 21
85.8.0.0/18 maxlen: 18
185.58.144.0/22 maxlen: 22
195.78.224.0/22 maxlen: 22
146.247.80.0/21 maxlen: 21
89.236.2.0/23 maxlen: 23
89.236.4.0/22 maxlen: 22
89.236.0.0/23 maxlen: 23
89.236.11.0/24 maxlen: 24
89.236.8.0/23 maxlen: 23
89.236.17.0/24 maxlen: 24
89.236.15.0/24 maxlen: 24
89.236.24.0/23 maxlen: 23
89.236.18.0/23 maxlen: 23
89.236.20.0/22 maxlen: 22
89.236.26.0/24 maxlen: 24
89.236.36.0/23 maxlen: 23
89.236.35.0/24 maxlen: 24
89.236.38.0/24 maxlen: 24
89.236.47.0/24 maxlen: 24
89.236.48.0/24 maxlen: 24
62.182.0.0/21 maxlen: 21
83.209.0.0/16 maxlen: 16
31.192.192.0/20 maxlen: 20
5.172.144.0/21 maxlen: 21
95.155.192.0/18 maxlen: 18
89.236.54.0/23 maxlen: 23
89.236.56.0/22 maxlen: 22
89.236.53.0/24 maxlen: 24
46.236.64.0/18 maxlen: 18
213.142.0.0/19 maxlen: 19
87.236.88.0/21 maxlen: 21
87.253.64.0/19 maxlen: 19
2a02:7b8::/32 maxlen: 32
2a00:8280::/32 maxlen: 32
2a02:23c0::/32 maxlen: 32
2a01:b700::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 05 May 2023 10:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:fa:1a:6d:17:32:a9:33:38:e3:db:65:67:32:90:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: May 5 08:14:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0687658decc0cef553219505e5dfe72903b2063b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:0f:ff:32:e3:69:8e:1a:be:1f:8c:94:e1:
63:1d:92:c4:90:4c:46:82:66:3e:65:df:2a:fe:b5:
be:bf:87:cb:09:bc:7e:df:ee:bb:2c:5a:7b:3c:0b:
ad:02:fc:e0:0b:8a:d8:99:23:f6:ca:b2:73:bd:29:
ae:cf:4f:62:f5:c5:9f:74:f9:68:d6:cc:7a:c8:0f:
1f:ab:bf:2e:3a:d0:cc:27:3f:5f:8e:2c:21:e8:4b:
3a:a3:02:f2:67:75:8d:74:89:59:3c:4f:1c:3d:e9:
1c:9c:a0:1f:49:dd:2c:f5:03:22:fe:99:e1:78:9b:
8a:c4:af:75:fb:5f:9a:74:16:9d:c2:b9:c1:9a:6c:
8b:33:04:5b:1c:f0:57:a7:2d:54:10:06:5c:73:18:
bb:65:4c:44:e2:b7:ee:d6:82:73:80:47:a8:af:30:
9d:9f:29:6b:16:10:2c:94:bd:50:d5:69:47:7c:b4:
66:43:fc:3b:fb:35:d5:23:11:08:c6:4c:a2:d4:39:
4c:17:8d:ca:d9:05:c3:79:86:dc:f0:70:fe:83:ab:
ba:c0:d1:02:a5:12:99:75:f3:fb:41:4d:f9:f3:09:
f1:d8:b6:d6:54:21:fe:5e:50:ae:5e:2e:6c:02:5d:
bc:a7:f3:cf:ea:24:4d:e0:d6:d0:c2:ba:46:39:d8:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:87:65:8D:EC:C0:CE:F5:53:21:95:05:E5:DF:E7:29:03:B2:06:3B
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/BodljezAzvVTIZUF5d_nKQOyBjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.192.0/20
5.172.144.0/21
31.192.192.0/20
37.17.248.0/21
46.236.64.0/18
62.182.0.0/21
79.138.0.0/17
80.244.64.0/19
82.117.96.0/19
83.209.0.0/16
85.8.0.0/18
85.30.0.0/18
85.235.0.0/19
85.238.192.0/19
87.96.128.0/17
87.236.88.0/21
87.241.64.0/18
87.253.64.0/19
88.83.32.0/19
88.129.0.0/16
89.236.0.0-89.236.9.255
89.236.11.0/24
89.236.15.0/24
89.236.17.0-89.236.26.255
89.236.35.0-89.236.38.255
89.236.47.0-89.236.48.255
89.236.53.0-89.236.59.255
91.232.59.0-91.232.61.255
94.198.64.0/21
94.245.0.0/19
94.245.48.0/20
95.155.192.0/18
109.124.128.0/18
109.225.64.0/18
146.247.80.0/21
178.132.248.0/21
178.251.240.0/21
185.18.164.0/22
185.52.180.0/22
185.58.144.0/22
188.120.160.0/19
188.122.128.0/19
195.78.224.0/22
213.21.64.0/18
213.142.0.0/19
213.185.4.0/24
213.185.6.0-213.185.10.255
213.185.12.0-213.185.17.255
213.185.20.0/23
213.185.24.0/24
213.185.26.0/24
217.72.52.0-217.72.54.255
217.72.56.0-217.72.62.255
IPv6:
2a00:8280::/32
2a01:b700::/32
2a02:7b8::/32
2a02:23c0::/32
Signature Algorithm: sha256WithRSAEncryption
2d:f4:68:fb:c4:c4:7c:f6:63:f5:f3:ef:74:0c:fa:a0:dc:d8:
c0:bb:dd:89:30:c6:97:a7:e1:06:b1:8f:17:e4:73:e9:03:c1:
80:b6:9c:5c:f6:d8:84:8e:1d:ec:e1:3d:53:a1:91:f5:91:a0:
e3:51:eb:78:79:33:ac:0b:fb:a3:8c:fe:f6:c0:8d:cd:ee:76:
f6:c1:47:db:fa:95:68:ed:95:5c:f5:d6:03:f1:1c:e5:62:04:
76:66:0b:bb:0a:e3:45:82:42:98:71:31:1e:29:ec:c2:14:c3:
75:bd:bf:82:17:98:18:57:bb:e4:a7:b1:8f:d1:95:36:1f:e4:
08:4e:8a:1a:b4:9e:7b:bb:88:a3:57:31:cb:04:19:86:6a:16:
4b:60:1c:e8:cf:3f:94:d2:5c:40:da:6f:70:53:d0:25:25:ad:
6b:37:3f:4a:95:79:2b:f1:73:50:f7:34:d3:7b:cf:79:4c:02:
58:f8:c9:96:37:20:a3:7a:a7:26:32:c7:20:a6:bf:37:2e:23:
55:61:46:db:e0:82:db:c8:4b:2c:f8:ce:b5:80:c1:a2:62:f6:
93:5a:c5:d9:91:9e:5c:12:31:de:a0:c6:e5:bb:c6:fb:5e:ed:
73:3b:b2:ed:3d:d5:61:82:f7:31:ae:da:f2:31:29:d8:77:00:
bf:12:e0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:58 2024 by rpki-client on console-fra.rpki-client.org