Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/BioKljaGar0Ol3-qGX78CA09Epk.roa
File: BioKljaGar0Ol3-qGX78CA09Epk.roa (raw, json)
Hash identifier: UuHZD3PoDChqouhmjg8BBKkcDrM64Pi4B2V0ZDPkEFY=
Subject key identifier: 06:2A:0A:96:36:86:6A:BD:0E:97:7F:AA:19:7E:FC:08:0D:3D:12:99
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 01944246A3B444B502A80D7B8AB6E8F00DEA
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/BioKljaGar0Ol3-qGX78CA09Epk.roa
Signing time: Tue 07 Jan 2025 19:38:33 +0000
ROA not before: Tue 07 Jan 2025 19:38:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202940
IP address blocks: 89.208.0.0/21 maxlen: 21
89.208.4.0/22 maxlen: 24
89.208.56.0/21 maxlen: 22
89.208.128.0/21 maxlen: 21
89.208.134.0/23 maxlen: 24
141.226.120.0/22 maxlen: 24
147.234.23.0/24 maxlen: 24
147.236.104.0/21 maxlen: 23
147.236.116.0/23 maxlen: 24
147.236.120.0/21 maxlen: 21
147.236.125.0/24 maxlen: 24
147.236.144.0/20 maxlen: 24
147.236.176.0/20 maxlen: 24
147.236.183.0/24 maxlen: 24
185.108.80.0/22 maxlen: 24
185.149.252.0/22 maxlen: 24
185.167.108.0/22 maxlen: 24
185.175.32.0/22 maxlen: 23
185.180.100.0/22 maxlen: 24
185.180.100.0/24 maxlen: 24
185.180.102.0/24 maxlen: 24
185.180.103.0/24 maxlen: 24
185.182.76.0/22 maxlen: 24
185.184.244.0/22 maxlen: 23
188.191.224.0/21 maxlen: 21
188.191.224.0/22 maxlen: 22
188.191.224.0/24 maxlen: 24
188.191.228.0/22 maxlen: 22
217.175.80.0/20 maxlen: 20
217.175.84.0/22 maxlen: 22
217.175.88.0/21 maxlen: 23
2a00:7c40::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 20 Jan 2025 08:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:46:a3:b4:44:b5:02:a8:0d:7b:8a:b6:e8:f0:0d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Jan 7 19:38:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=062a0a9636866abd0e977faa197efc080d3d1299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b5:0c:f1:d2:a2:08:72:50:59:c2:b8:1a:c3:
e5:a3:82:ed:ad:c9:a2:2e:cd:95:2b:80:5a:93:74:
0b:eb:fa:6b:59:6a:a4:08:4f:ce:5a:0a:3d:79:30:
1b:ca:61:00:f3:3d:7a:cb:da:f3:fe:de:4c:05:87:
9a:4e:0a:d1:4b:2f:c7:63:f1:bf:89:08:80:6c:68:
1b:3f:a8:74:03:ca:f1:15:11:df:71:a2:d3:b0:39:
f3:ed:38:4b:aa:58:cc:64:39:01:d9:fb:c8:03:e3:
58:9f:c8:af:aa:9e:07:d3:81:8b:b1:c2:47:09:14:
fd:13:20:06:e1:91:21:02:fa:bd:f3:be:fc:28:12:
d6:da:2b:1a:07:5e:b6:f4:e7:0d:55:ea:b6:e9:30:
11:b8:f9:ef:ad:f3:ab:f6:55:6e:31:97:23:ec:c0:
64:fd:f2:7c:b3:d5:29:b9:2f:6d:0b:d2:0c:e6:a7:
42:67:f6:cc:1d:8d:e5:bc:90:32:49:1a:76:c7:94:
52:81:fd:d5:31:9f:b5:b6:18:13:a8:00:1c:74:3b:
09:33:8e:a5:80:60:dd:15:55:7c:f4:10:87:c9:bc:
78:45:63:28:98:a2:17:c7:fe:21:a9:92:fb:af:16:
ed:b8:f4:d2:f9:49:61:c8:7c:a8:a3:38:90:2c:23:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2A:0A:96:36:86:6A:BD:0E:97:7F:AA:19:7E:FC:08:0D:3D:12:99
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/BioKljaGar0Ol3-qGX78CA09Epk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.208.0.0/21
89.208.56.0/21
89.208.128.0/21
141.226.120.0/22
147.234.23.0/24
147.236.104.0/21
147.236.116.0/23
147.236.120.0/21
147.236.144.0/20
147.236.176.0/20
185.108.80.0/22
185.149.252.0/22
185.167.108.0/22
185.175.32.0/22
185.180.100.0/22
185.182.76.0/22
185.184.244.0/22
188.191.224.0/21
217.175.80.0/20
IPv6:
2a00:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
3f:a8:84:94:3e:5d:c9:d9:9b:c5:9d:f8:65:a5:96:99:21:0f:
7c:26:e5:67:ea:d7:ca:ee:87:f3:fa:b3:39:73:a8:ea:10:00:
49:21:3a:d9:f8:e5:39:e5:d9:97:48:84:02:df:43:3f:87:bb:
27:80:78:18:06:0f:7d:68:df:45:c0:9e:ca:5d:e9:c4:df:61:
44:a6:d1:06:2c:9d:d2:b6:c1:9a:50:cd:03:f2:d5:60:a6:2e:
66:3d:e4:94:34:24:cb:14:3b:03:ff:d6:c8:b2:9a:dd:72:c1:
25:fe:bc:dc:77:47:bf:be:b1:db:af:3c:08:d4:e8:e1:bc:91:
33:57:7b:46:cb:03:78:02:31:a2:b9:08:e2:2a:ba:31:67:cd:
f1:ca:bf:89:6c:eb:f5:58:46:a4:ed:4b:8b:2a:43:5e:95:ed:
1a:c8:8d:b2:d2:0e:d9:37:a9:05:17:b0:b7:74:cc:cb:c1:43:
ce:5d:23:3e:c4:6e:8f:d4:13:2d:05:5d:0f:79:0f:92:0b:f1:
31:fe:50:0a:34:f2:75:0e:0d:be:aa:4f:25:f7:b2:66:16:43:
c0:b4:0d:69:40:05:0a:6b:26:86:fd:d7:fd:fc:39:5d:46:8f:
39:48:c4:da:18:4a:9e:28:e3:90:e5:da:18:68:b1:2a:53:3c:
67:d3:75:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:31 2025 by rpki-client