Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/bgsAjSWYsoQ9w6VPaSRvYcIsyM8.roa
File: bgsAjSWYsoQ9w6VPaSRvYcIsyM8.roa (raw, json)
Hash identifier: ZQEgOhQMEpqOU4dK2ZMBUlPtseAxMNyEUc5UmupkNI4=
Subject key identifier: 6E:0B:00:8D:25:98:B2:84:3D:C3:A5:4F:69:24:6F:61:C2:2C:C8:CF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0189085690837115ED88A11DA936688BC86F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/bgsAjSWYsoQ9w6VPaSRvYcIsyM8.roa
Signing time: Thu 29 Jun 2023 18:07:18 +0000
ROA not before: Thu 29 Jun 2023 18:07:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.255.39.0/24 maxlen: 24
185.241.210.0/23 maxlen: 24
188.241.214.0/24 maxlen: 24
93.115.254.0/23 maxlen: 24
188.213.203.0/24 maxlen: 24
213.232.93.0/24 maxlen: 24
213.232.92.0/24 maxlen: 24
45.156.159.0/24 maxlen: 24
45.156.157.0/24 maxlen: 24
89.33.85.0/24 maxlen: 24
185.255.169.0/24 maxlen: 24
185.255.170.0/23 maxlen: 24
185.255.170.0/24 maxlen: 24
89.35.154.0/24 maxlen: 24
89.35.155.0/24 maxlen: 24
188.212.132.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.212.158.0/24 maxlen: 24
87.247.148.0/24 maxlen: 24
87.247.150.0/24 maxlen: 24
87.247.149.0/24 maxlen: 24
87.247.151.0/24 maxlen: 24
188.240.230.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
188.240.233.0/24 maxlen: 24
91.188.204.0/24 maxlen: 24
91.188.206.0/24 maxlen: 24
91.188.207.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
185.135.140.0/24 maxlen: 24
185.135.143.0/24 maxlen: 24
185.103.72.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
188.241.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:08:56:90:83:71:15:ed:88:a1:1d:a9:36:68:8b:c8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 29 18:07:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e0b008d2598b2843dc3a54f69246f61c22cc8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:ae:07:38:26:2a:c5:9f:75:d2:b3:e0:77:
e4:16:eb:0f:d1:00:77:2a:64:df:7f:2f:bf:ec:d0:
cd:7b:92:e0:87:eb:8e:d0:c2:1c:ca:d3:92:ac:52:
c5:65:43:bc:2e:65:00:3b:46:b8:f3:6a:d8:0c:0a:
bd:bb:4a:b5:0d:ca:b5:bf:35:95:1b:5e:23:bf:d8:
63:97:93:46:40:70:c4:40:43:6b:2d:80:f1:60:06:
fd:07:d9:bd:76:70:6d:3f:4b:8a:ee:0f:4b:2c:13:
7b:90:66:47:86:d6:31:26:09:a3:57:0e:10:0f:db:
09:dc:63:e5:da:cc:ec:74:fc:17:76:aa:fe:22:51:
ef:67:02:21:08:d8:62:84:2d:11:d5:c1:da:03:de:
df:0d:d9:cc:62:a4:e5:4b:9f:50:e1:72:36:60:e0:
d7:39:75:85:a1:c5:39:6a:b1:67:f2:46:3b:d9:88:
ca:71:6f:f9:39:80:c8:78:c4:86:93:95:e2:66:d8:
fe:6b:65:63:bb:94:3c:71:ee:ed:81:c6:3c:2f:b6:
3b:f5:8d:0e:f1:38:60:34:fc:95:40:5b:93:03:08:
3e:cc:c5:50:30:ff:b4:8c:8e:fe:ff:2b:8a:1e:b9:
fb:e4:df:04:a4:16:7c:4f:ca:ab:6c:7f:56:f1:47:
3f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0B:00:8D:25:98:B2:84:3D:C3:A5:4F:69:24:6F:61:C2:2C:C8:CF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/bgsAjSWYsoQ9w6VPaSRvYcIsyM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.157.0/24
45.156.159.0/24
87.247.148.0/22
89.33.85.0/24
89.35.154.0/23
89.37.63.0/24
91.188.204.0/24
91.188.206.0/23
93.115.254.0/23
185.103.72.0/24
185.135.140.0/24
185.135.143.0/24
185.238.10.0/24
185.241.210.0/23
185.255.39.0/24
185.255.169.0-185.255.171.255
188.212.132.0/23
188.212.158.0/24
188.213.203.0/24
188.240.230.0/24
188.240.232.0/23
188.241.110.0/24
188.241.214.0/24
213.232.92.0/23
Signature Algorithm: sha256WithRSAEncryption
41:4c:85:3c:62:d8:5e:9a:bb:f6:0a:f2:fb:24:88:fe:11:42:
9d:37:e5:cc:62:c2:96:af:57:c0:99:b0:48:ed:c3:25:b9:1b:
5b:b9:db:6f:4e:75:da:c1:be:46:ff:18:8e:a4:6f:86:c9:81:
d0:b3:1d:32:58:2f:a9:29:80:b4:be:b0:73:13:35:a2:25:d2:
d2:a0:13:b2:b5:25:a2:45:a0:72:f7:a1:30:69:57:e4:5e:2a:
a9:7c:f4:15:d0:2b:2e:78:e2:7e:39:c6:d6:ac:bc:19:c1:3c:
b4:e4:15:cd:ea:0b:94:ef:62:8d:ce:5b:31:48:79:6a:79:b0:
af:79:d8:65:b3:96:09:23:5b:28:c6:4f:5c:e0:f7:67:63:08:
7a:36:9f:50:7a:68:a3:00:07:33:41:44:10:ff:1e:0b:fb:3c:
89:c2:22:2a:f5:d2:d8:cc:18:f9:ac:7a:e7:24:75:8e:cf:09:
30:16:88:44:84:89:3a:66:c4:cd:cd:bb:6a:b3:e0:c7:61:cf:
56:7f:75:b1:6c:c9:80:d4:92:c9:bd:bc:72:61:8f:0a:5e:b4:
fe:98:01:59:b5:8a:a1:55:97:79:7b:7a:05:95:a8:41:af:59:
20:db:1e:76:87:ee:c6:55:9e:8b:f4:5e:11:57:69:2d:51:88:
82:e3:aa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org