Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/BORQOEW_aDntmaRVsiTt3_n_QCw.roa
File: BORQOEW_aDntmaRVsiTt3_n_QCw.roa (raw, json)
Hash identifier: 4EPTiFdscEA8th11jRNHLWbyY886np7QeOR1nWMky4U=
Subject key identifier: 04:E4:50:38:45:BF:68:39:ED:99:A4:55:B2:24:ED:DF:F9:FF:40:2C
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01892121CD5E738C75547DF5E4E152AC07F4
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/BORQOEW_aDntmaRVsiTt3_n_QCw.roa
Signing time: Tue 04 Jul 2023 13:40:10 +0000
ROA not before: Tue 04 Jul 2023 13:40:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.120.176.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
103.113.68.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c40::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 11 Jul 2023 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:21:cd:5e:73:8c:75:54:7d:f5:e4:e1:52:ac:07:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jul 4 13:40:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04e4503845bf6839ed99a455b224eddff9ff402c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:33:88:3d:cf:a2:a2:a3:f4:60:35:91:e1:
4f:45:fe:c6:cc:6d:9b:f8:1f:62:a6:17:cc:81:5c:
95:1e:80:37:ad:b5:f6:7f:b7:b1:aa:d9:7e:4b:69:
54:12:3c:1a:0f:6f:26:54:23:f2:c1:ef:21:e6:d0:
f6:58:5d:17:6c:fc:96:29:90:35:3a:b1:a4:d2:0b:
08:a2:a2:27:1e:4c:bc:c6:12:d0:73:a4:84:43:1c:
59:78:d5:8a:de:6b:5d:2a:d7:ed:a6:b9:84:4e:99:
38:96:1e:8e:25:5b:5e:fa:4f:40:29:eb:60:90:ba:
ff:3f:ac:61:e7:e9:54:85:20:54:e9:55:9e:68:f3:
55:a6:44:e9:76:54:bd:dc:11:0a:5c:26:81:7e:b1:
3b:a6:ec:e0:ca:96:59:9e:63:db:4d:63:50:44:d0:
fb:46:2c:71:ea:6a:1c:6f:17:45:1c:3a:8b:e8:d5:
80:fb:26:54:39:51:b5:27:47:cd:f5:13:a9:6f:da:
d4:a1:48:a3:cf:8f:aa:db:40:1c:25:7e:2e:16:4c:
04:b7:dc:ee:37:72:be:4d:f9:dd:ef:9c:7d:f7:85:
bd:0f:71:24:57:98:e5:f9:1e:4a:e0:66:ea:0d:6c:
7f:28:28:d7:7d:99:9e:50:f3:89:28:db:4b:ae:56:
7b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E4:50:38:45:BF:68:39:ED:99:A4:55:B2:24:ED:DF:F9:FF:40:2C
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/BORQOEW_aDntmaRVsiTt3_n_QCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
74.119.192.0/22
80.92.204.0-80.92.206.255
103.113.68.0/24
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
195.149.87.0/24
IPv6:
2a09:7c40::-2a09:7c42:ffff:ffff:ffff:ffff:ffff:ffff
2a09:7c44::/30
Signature Algorithm: sha256WithRSAEncryption
09:15:20:6f:44:cb:f1:d4:cb:fc:6e:b3:8e:aa:b6:54:41:dc:
2d:d9:e3:45:ac:e8:5b:dd:88:93:6b:2e:fe:95:fb:d5:08:5f:
4e:ee:d1:01:81:dd:b5:f3:45:4d:3b:f0:35:00:c0:f3:e7:16:
8f:40:44:49:86:a1:e3:18:0a:b8:40:d3:47:a5:dd:88:01:e7:
e2:f6:84:27:ba:ec:e3:a4:71:3d:a1:bc:5a:29:2c:13:14:86:
25:44:05:c3:61:7b:b5:2b:2d:3d:70:88:c5:6e:be:ef:fa:a2:
51:e9:3c:57:3d:5d:6e:22:f0:3e:25:ac:8c:b6:dd:64:ee:0d:
30:c0:f6:89:1c:51:38:b1:3c:a3:b4:6b:41:ec:d8:e1:56:21:
71:e4:fb:fd:38:ea:5a:bb:21:2c:a8:1e:58:31:c8:d9:1f:ee:
b7:e8:4c:a7:c6:c0:a6:fd:bf:ac:c3:6a:cf:bd:47:39:52:ba:
6c:82:dc:91:5a:64:e4:7f:00:a1:5f:68:1f:22:f7:79:cf:29:
ff:0e:63:81:6d:68:31:c9:53:c7:cf:70:72:58:31:be:de:a4:
14:55:fc:bb:b2:6d:3a:79:90:f2:ba:58:87:62:9b:6b:40:db:
0d:d5:5b:97:9b:44:c8:5d:28:33:e1:e7:f7:0e:3a:0b:3b:52:
fc:df:f4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-fra.rpki-client.org