Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BjuyJskswLmZkElwAK9fmE5xUqk.roa
File: BjuyJskswLmZkElwAK9fmE5xUqk.roa (raw, json)
Hash identifier: 8D8h/d/bVbuxHpkkdTf1BJlp8gO+1R9kaP9LEbc30fU=
Subject key identifier: 06:3B:B2:26:C9:2C:C0:B9:99:90:49:70:00:AF:5F:98:4E:71:52:A9
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018D7D682D4A631B838CDE42B14CDEA13D15
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BjuyJskswLmZkElwAK9fmE5xUqk.roa
Signing time: Tue 06 Feb 2024 07:53:15 +0000
ROA not before: Tue 06 Feb 2024 07:53:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 5.10.194.0/24 maxlen: 24
5.10.196.0/24 maxlen: 24
5.10.198.0/24 maxlen: 24
5.181.112.0/22 maxlen: 24
5.183.224.0/22 maxlen: 24
37.46.148.0/24 maxlen: 24
37.156.66.0/24 maxlen: 24
37.156.247.0/24 maxlen: 24
45.9.92.0/22 maxlen: 24
45.9.184.0/22 maxlen: 24
45.10.184.0/22 maxlen: 24
45.11.8.0/22 maxlen: 24
45.12.180.0/22 maxlen: 24
45.13.180.0/22 maxlen: 24
45.91.149.0/24 maxlen: 24
45.91.150.0/24 maxlen: 24
45.92.76.0/24 maxlen: 24
45.134.128.0/24 maxlen: 24
45.134.130.0/24 maxlen: 24
45.134.136.0/22 maxlen: 24
45.143.52.0/22 maxlen: 24
45.145.44.0/22 maxlen: 24
46.102.154.0/24 maxlen: 24
46.102.172.0/24 maxlen: 24
46.102.176.0/24 maxlen: 24
46.102.181.0/24 maxlen: 24
46.229.254.0/24 maxlen: 24
62.197.130.0/23 maxlen: 24
77.81.3.0/24 maxlen: 24
81.21.236.0/22 maxlen: 24
84.247.24.0/22 maxlen: 24
84.247.52.0/23 maxlen: 24
85.204.117.0/24 maxlen: 24
86.104.134.0/24 maxlen: 24
86.105.148.0/23 maxlen: 24
86.105.150.0/24 maxlen: 24
86.105.168.0/24 maxlen: 24
86.105.221.0/24 maxlen: 24
86.106.92.0/24 maxlen: 24
86.107.107.0/24 maxlen: 24
86.107.196.0/24 maxlen: 24
89.31.217.0/24 maxlen: 24
89.32.188.0/24 maxlen: 24
89.32.190.0/24 maxlen: 24
89.33.0.0/22 maxlen: 24
89.34.77.0/24 maxlen: 24
89.34.179.0/24 maxlen: 24
89.34.216.0/23 maxlen: 24
89.35.114.0/24 maxlen: 24
89.36.172.0/24 maxlen: 24
89.37.105.0/24 maxlen: 24
89.37.137.0/24 maxlen: 24
89.37.138.0/24 maxlen: 24
89.38.39.0/24 maxlen: 24
89.39.162.0/23 maxlen: 24
89.39.164.0/23 maxlen: 24
89.40.180.0/24 maxlen: 24
89.44.114.0/24 maxlen: 24
89.44.126.0/23 maxlen: 24
89.45.8.0/24 maxlen: 24
89.45.14.0/24 maxlen: 24
89.46.115.0/24 maxlen: 24
89.47.90.0/24 maxlen: 24
89.47.95.0/24 maxlen: 24
91.190.108.0/22 maxlen: 24
91.217.239.0/24 maxlen: 24
91.221.81.0/24 maxlen: 24
91.235.113.0/24 maxlen: 24
92.114.0.0/24 maxlen: 24
93.113.38.0/23 maxlen: 24
93.113.220.0/23 maxlen: 24
93.114.67.0/24 maxlen: 24
93.114.85.0/24 maxlen: 24
93.114.132.0/24 maxlen: 24
93.117.136.0/24 maxlen: 24
94.103.248.0/22 maxlen: 24
94.176.4.0/24 maxlen: 24
94.176.41.0/24 maxlen: 24
94.177.60.0/22 maxlen: 24
95.214.156.0/22 maxlen: 24
178.212.141.0/24 maxlen: 24
185.67.136.0/24 maxlen: 24
185.67.138.0/24 maxlen: 24
185.76.149.0/24 maxlen: 24
185.160.80.0/22 maxlen: 24
185.161.78.0/24 maxlen: 24
185.184.132.0/22 maxlen: 24
185.192.18.0/23 maxlen: 24
185.205.188.0/22 maxlen: 24
185.211.116.0/22 maxlen: 24
185.214.8.0/23 maxlen: 24
185.214.11.0/24 maxlen: 24
185.216.0.0/24 maxlen: 24
185.216.2.0/24 maxlen: 24
185.228.224.0/24 maxlen: 24
185.239.240.0/24 maxlen: 24
185.244.136.0/24 maxlen: 24
185.245.4.0/24 maxlen: 24
185.245.6.0/24 maxlen: 24
188.212.4.0/24 maxlen: 24
188.213.241.0/24 maxlen: 24
188.215.66.0/23 maxlen: 24
188.215.249.0/24 maxlen: 24
188.240.15.0/24 maxlen: 24
188.240.72.0/22 maxlen: 24
193.19.107.0/24 maxlen: 24
193.84.133.0/24 maxlen: 24
193.218.33.0/24 maxlen: 24
193.223.72.0/22 maxlen: 24
203.159.84.0/24 maxlen: 24
203.159.86.0/24 maxlen: 24
203.159.88.0/24 maxlen: 24
217.74.18.0/24 maxlen: 24
217.74.21.0/24 maxlen: 24
217.74.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 07:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:68:2d:4a:63:1b:83:8c:de:42:b1:4c:de:a1:3d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 6 07:53:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=063bb226c92cc0b99990497000af5f984e7152a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:dd:c2:3e:54:05:1c:5c:62:4d:24:24:a0:
79:6b:8b:78:d3:30:4a:35:aa:c6:53:b5:2e:19:ee:
6d:12:a3:99:90:55:9b:8c:a3:3b:51:4f:54:7a:37:
8e:4b:4a:c9:15:52:0f:b1:b7:91:73:33:f4:e6:0e:
6b:54:f6:9c:67:37:7e:f7:42:2b:b5:3e:50:08:70:
32:e2:8e:41:af:1b:72:b6:29:67:69:61:87:2f:c8:
f7:32:40:bb:d5:6b:f6:70:e6:a5:08:11:a4:d2:9e:
a3:0e:d6:20:b5:24:7d:45:7f:e1:56:1f:95:e4:4d:
ef:6b:2b:58:43:c8:3b:14:57:16:1d:16:10:85:99:
fd:d3:cb:b2:4f:a6:5d:3f:2d:10:f2:79:cc:3c:44:
45:2e:73:81:fa:cc:c9:5d:ea:0a:5b:13:b1:48:72:
4c:1d:21:3d:36:fc:5a:83:8b:09:31:d9:de:68:3d:
cc:6d:ed:77:75:29:1e:22:99:6b:d8:5a:99:20:a6:
d0:03:8e:dc:21:6a:f0:fd:6d:cf:5d:8b:51:4e:3e:
30:46:7e:7c:21:d2:78:d3:c0:f1:78:d2:d3:fd:af:
b9:ef:7d:f4:c5:cc:a8:d0:e4:fc:59:a2:5d:da:e8:
40:ca:09:d6:f5:64:67:0f:19:ee:ed:c1:62:76:60:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3B:B2:26:C9:2C:C0:B9:99:90:49:70:00:AF:5F:98:4E:71:52:A9
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BjuyJskswLmZkElwAK9fmE5xUqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.194.0/24
5.10.196.0/24
5.10.198.0/24
5.181.112.0/22
5.183.224.0/22
37.46.148.0/24
37.156.66.0/24
37.156.247.0/24
45.9.92.0/22
45.9.184.0/22
45.10.184.0/22
45.11.8.0/22
45.12.180.0/22
45.13.180.0/22
45.91.149.0-45.91.150.255
45.92.76.0/24
45.134.128.0/24
45.134.130.0/24
45.134.136.0/22
45.143.52.0/22
45.145.44.0/22
46.102.154.0/24
46.102.172.0/24
46.102.176.0/24
46.102.181.0/24
46.229.254.0/24
62.197.130.0/23
77.81.3.0/24
81.21.236.0/22
84.247.24.0/22
84.247.52.0/23
85.204.117.0/24
86.104.134.0/24
86.105.148.0-86.105.150.255
86.105.168.0/24
86.105.221.0/24
86.106.92.0/24
86.107.107.0/24
86.107.196.0/24
89.31.217.0/24
89.32.188.0/24
89.32.190.0/24
89.33.0.0/22
89.34.77.0/24
89.34.179.0/24
89.34.216.0/23
89.35.114.0/24
89.36.172.0/24
89.37.105.0/24
89.37.137.0-89.37.138.255
89.38.39.0/24
89.39.162.0-89.39.165.255
89.40.180.0/24
89.44.114.0/24
89.44.126.0/23
89.45.8.0/24
89.45.14.0/24
89.46.115.0/24
89.47.90.0/24
89.47.95.0/24
91.190.108.0/22
91.217.239.0/24
91.221.81.0/24
91.235.113.0/24
92.114.0.0/24
93.113.38.0/23
93.113.220.0/23
93.114.67.0/24
93.114.85.0/24
93.114.132.0/24
93.117.136.0/24
94.103.248.0/22
94.176.4.0/24
94.176.41.0/24
94.177.60.0/22
95.214.156.0/22
178.212.141.0/24
185.67.136.0/24
185.67.138.0/24
185.76.149.0/24
185.160.80.0/22
185.161.78.0/24
185.184.132.0/22
185.192.18.0/23
185.205.188.0/22
185.211.116.0/22
185.214.8.0/23
185.214.11.0/24
185.216.0.0/24
185.216.2.0/24
185.228.224.0/24
185.239.240.0/24
185.244.136.0/24
185.245.4.0/24
185.245.6.0/24
188.212.4.0/24
188.213.241.0/24
188.215.66.0/23
188.215.249.0/24
188.240.15.0/24
188.240.72.0/22
193.19.107.0/24
193.84.133.0/24
193.218.33.0/24
193.223.72.0/22
203.159.84.0/24
203.159.86.0/24
203.159.88.0/24
217.74.18.0/24
217.74.21.0-217.74.23.255
Signature Algorithm: sha256WithRSAEncryption
49:0f:3c:00:a0:2e:77:ce:03:a2:59:4f:06:1c:11:6f:d7:fb:
6c:4d:54:10:9a:4e:b5:38:85:78:02:41:26:87:36:fb:3c:be:
c2:27:97:21:c5:3d:0a:d5:ae:52:4a:44:d5:98:0c:7e:cc:dc:
f9:81:92:b7:a4:9d:5e:e7:d5:40:82:f9:f1:0f:96:33:5f:ef:
27:e8:bc:03:bc:7f:92:c4:d8:d3:71:ea:60:30:56:5b:d7:a9:
86:9a:f7:8b:04:84:a6:ae:94:d4:a7:05:35:25:7a:dc:ce:12:
44:ba:22:75:e2:3b:38:f7:d7:01:24:db:bb:ec:fc:6b:05:cc:
e2:64:84:ac:8c:00:51:b9:6d:bd:f6:1c:a1:06:15:72:81:36:
d6:52:a8:da:bd:88:bc:df:0e:96:fb:e8:ea:10:a4:9a:9a:fa:
2d:af:85:09:c8:5a:13:1d:e7:fa:c0:bb:77:33:a5:a6:0d:27:
f8:e8:d9:fb:86:a7:a5:e7:7e:c9:98:0a:da:11:0f:cd:37:f3:
da:4f:d0:17:19:1f:ec:25:d9:53:1c:b3:37:93:3b:c0:e3:03:
66:b2:27:b2:2f:89:2d:2e:d2:69:ae:e8:f6:dd:7c:0a:fb:0d:
3a:f9:2f:14:08:91:f4:87:3d:a5:40:f3:f3:a2:03:5a:59:54:
00:11:26:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 12:10:48 2024 by rpki-client on console-ams.rpki-client.org