Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/BkSKGxbji7GL9gS92tfcDwbkRPs.roa
File: BkSKGxbji7GL9gS92tfcDwbkRPs.roa (raw, json)
Hash identifier: IhSWpydhTe4WkNxyk1A0uq3CeDKIxLPsyJGR0da1NCE=
Subject key identifier: 06:44:8A:1B:16:E3:8B:B1:8B:F6:04:BD:DA:D7:DC:0F:06:E4:44:FB
Certificate issuer: /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial: 019391C72E3581F98C468FADBBCBC5D11AEF
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/BkSKGxbji7GL9gS92tfcDwbkRPs.roa
Signing time: Wed 04 Dec 2024 13:06:09 +0000
ROA not before: Wed 04 Dec 2024 13:06:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201814
IP address blocks: 5.181.188.0/22 maxlen: 22
5.181.189.0/24 maxlen: 24
91.223.3.0/24 maxlen: 24
95.214.52.0/22 maxlen: 23
95.214.52.0/23 maxlen: 23
95.214.54.0/23 maxlen: 23
146.19.24.0/24 maxlen: 24
178.211.139.0/24 maxlen: 24
185.16.36.0/22 maxlen: 24
185.225.191.0/24 maxlen: 24
185.248.24.0/24 maxlen: 24
193.34.212.0/22 maxlen: 22
193.34.212.0/23 maxlen: 23
193.34.214.0/23 maxlen: 23
193.34.215.0/24 maxlen: 24
195.3.220.0/22 maxlen: 22
195.3.220.0/23 maxlen: 23
195.3.222.0/23 maxlen: 23
195.3.222.0/24 maxlen: 24
212.23.222.0/24 maxlen: 24
2a03:cfc0::/32 maxlen: 32
2a03:cfc0::/33 maxlen: 33
2a03:cfc0:8000::/33 maxlen: 33
2a09:d580::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 18 Dec 2024 13:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:c7:2e:35:81:f9:8c:46:8f:ad:bb:cb:c5:d1:1a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
Validity
Not Before: Dec 4 13:06:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06448a1b16e38bb18bf604bddad7dc0f06e444fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:74:ea:9b:17:22:52:19:3b:17:21:0c:cb:
9d:47:7d:6a:96:54:de:72:cd:35:73:17:21:9b:69:
5c:d3:47:10:45:35:4f:fd:15:93:f1:ae:e0:fe:73:
8d:26:37:ff:83:dd:80:0c:d0:14:1d:f0:9a:f6:2d:
20:05:8b:53:f1:3c:df:1d:0c:3c:2d:79:8c:8d:88:
d0:af:52:46:ba:81:b0:cf:f1:1f:62:23:cf:78:30:
04:24:95:65:76:9c:32:37:7d:b5:e7:fa:fe:27:cb:
06:f5:42:8c:f5:7e:73:de:76:71:e9:70:5f:d4:b0:
70:f3:29:b0:8c:f4:68:ab:05:e9:02:14:05:d7:92:
91:48:7b:02:d1:37:45:40:9e:53:be:4c:ba:c6:95:
a9:9d:55:eb:c2:62:22:ed:1b:7d:27:72:16:a3:46:
c5:63:6e:ff:6c:18:86:fa:21:d9:8e:54:c4:fc:f7:
d0:19:ee:5c:8b:6c:d0:0a:0a:17:24:2c:0b:7f:e1:
0b:49:62:8a:6a:75:b9:fc:2e:0e:86:43:2f:67:cd:
d9:c0:9d:9c:93:70:a0:8a:97:52:9f:d7:46:47:cc:
cb:4a:03:2c:4a:1d:44:7c:fc:5a:81:3f:4e:1e:ad:
ac:72:bb:d8:20:fd:be:27:cb:0f:eb:40:0c:79:3a:
66:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:44:8A:1B:16:E3:8B:B1:8B:F6:04:BD:DA:D7:DC:0F:06:E4:44:FB
X509v3 Authority Key Identifier:
keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/BkSKGxbji7GL9gS92tfcDwbkRPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.188.0/22
91.223.3.0/24
95.214.52.0/22
146.19.24.0/24
178.211.139.0/24
185.16.36.0/22
185.225.191.0/24
185.248.24.0/24
193.34.212.0/22
195.3.220.0/22
212.23.222.0/24
IPv6:
2a03:cfc0::/32
2a09:d580::/29
Signature Algorithm: sha256WithRSAEncryption
a0:d4:87:1d:eb:d1:27:b7:e6:17:bb:7f:da:f2:f8:bd:90:6d:
0d:d6:90:94:4f:2a:7c:95:ed:03:a2:6f:0d:76:40:60:e0:6c:
57:e7:0f:ba:51:03:b7:c1:ed:49:f9:83:08:51:38:93:8e:07:
13:e9:7a:88:64:82:ac:e8:56:ea:32:90:cf:fc:ae:e7:d8:51:
ff:d9:07:86:a6:75:80:23:8e:11:b6:d0:ed:d1:c5:0b:dc:8e:
63:b1:28:4e:d6:47:13:4a:3a:12:c9:28:71:89:c9:d2:8a:f4:
06:70:5c:42:35:b8:fa:cd:2b:3a:36:af:df:39:a0:bc:4a:00:
0e:03:e0:2f:e8:e0:d5:a1:ac:74:ba:a2:f1:96:c2:b4:28:92:
76:73:22:24:66:fb:c3:84:b4:2d:e7:d5:0f:7a:40:4a:50:2b:
8d:4d:c5:72:cd:64:eb:20:da:f3:35:91:78:53:b5:12:e2:d1:
07:2a:1a:b5:73:7d:f1:b0:60:b5:44:12:45:cc:8c:d6:ed:3a:
6e:20:e6:54:af:db:d4:ec:ad:46:ea:e3:7a:4f:bc:15:5a:fe:
44:85:62:b5:da:14:2f:06:76:5d:2e:e2:e4:54:15:e2:ef:12:
c3:3f:a6:af:17:0b:c4:81:e2:d8:a3:6e:51:b3:67:cc:55:61:
1c:09:ed:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:27:02 2025 by rpki-client