Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/bKKInCVMEpoxU7OUHqRp0j0ceXA.roa
File: bKKInCVMEpoxU7OUHqRp0j0ceXA.roa (raw, json)
Hash identifier: AjdyHNcuYVsFh/Kb8yUVKSk1LPfyp0e8+OSbSzwjENc=
Subject key identifier: 6C:A2:88:9C:25:4C:12:9A:31:53:B3:94:1E:A4:69:D2:3D:1C:79:70
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF95ED2DFE6A229BF16FF1E104F43D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/bKKInCVMEpoxU7OUHqRp0j0ceXA.roa
Signing time: Tue 02 Jan 2024 06:32:25 +0000
ROA not before: Tue 02 Jan 2024 06:32:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35196
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.250.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.50.0/24 maxlen: 24
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
45.89.67.0/24 maxlen: 24
45.89.65.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
45.9.73.184/32 maxlen: 32
45.9.73.179/32 maxlen: 32
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
185.87.48.18/32 maxlen: 32
185.125.218.0/23 maxlen: 23
185.125.216.0/22 maxlen: 22
94.142.136.67/32 maxlen: 32
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.125.229.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.228.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
45.9.73.236/32 maxlen: 32
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
193.124.176.0/20 maxlen: 20
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
2a0a:9300:1000::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a09:5302:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 28 May 2024 12:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:95:ed:2d:fe:6a:22:9b:f1:6f:f1:e1:04:f4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ca2889c254c129a3153b3941ea469d23d1c7970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:be:0e:26:fe:40:17:56:9b:10:78:e9:44:
6d:0c:f1:07:b3:fa:a8:1f:96:b6:d1:e6:24:11:3a:
d2:23:e3:29:08:c5:c3:a5:1e:a0:45:c7:f7:6a:59:
6d:30:05:bc:ee:21:85:ae:a6:0a:f4:b1:4d:f5:23:
91:31:f9:11:2a:b8:a0:93:2b:e7:7b:d6:5d:a1:6a:
6c:e8:5e:f3:be:c0:f6:9a:d7:5c:1a:97:55:5b:8a:
a1:44:b7:38:ea:eb:a6:88:db:a5:0a:0f:93:67:77:
0e:00:98:ae:bb:86:2c:7c:0b:54:4c:0b:a2:d2:73:
0e:a2:b8:52:17:df:1f:2e:c1:6f:cb:5a:82:8a:de:
1e:65:b6:af:8e:99:a3:7e:ed:a5:d5:43:64:4a:ba:
31:11:6b:d8:e5:3f:e2:83:36:96:dc:78:6e:1a:75:
a7:d4:35:dc:99:b0:a4:67:c0:a7:3d:34:a8:51:9d:
2a:a7:37:77:d1:1c:76:5c:e3:f5:78:ee:a4:c0:7c:
39:7d:bb:53:18:6d:88:c9:ff:10:fb:15:8e:71:a3:
94:b3:8d:c4:6e:c2:41:18:8c:49:53:ff:8c:d0:78:
3e:b0:7d:68:e4:40:58:02:40:62:b7:bf:3a:ab:21:
e9:b8:74:52:e9:d1:87:48:24:42:52:1c:c3:64:df:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A2:88:9C:25:4C:12:9A:31:53:B3:94:1E:A4:69:D2:3D:1C:79:70
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/bKKInCVMEpoxU7OUHqRp0j0ceXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.179/32
45.9.73.184/32
45.9.73.236/32
45.89.65.0-45.89.67.255
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
IPv6:
2a09:5302:ffff::/48
2a0a:9300:1000::/48
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
10:84:e0:a4:51:d8:4d:15:3d:f0:04:ff:08:26:64:1d:a0:70:
82:a7:58:ef:6a:25:14:97:72:df:df:d7:9c:42:35:c6:76:bc:
3c:2b:3f:a2:70:d2:1b:3d:a9:b2:3a:03:e0:32:93:e7:cd:a1:
d5:bb:5b:c3:c1:8d:d2:08:cf:dc:75:f3:3a:34:cc:6d:10:fc:
e9:e4:6a:9e:f5:40:3c:7e:5a:fb:46:fa:ae:96:df:27:65:84:
0e:69:b6:6c:4a:97:f0:a6:b6:aa:8d:ac:89:a6:c5:e7:4a:d8:
09:b7:db:b8:40:cc:75:74:f6:7e:81:18:57:e2:b0:ce:cb:1e:
86:a4:76:88:0e:90:11:ce:de:18:44:a4:66:97:b5:50:c9:96:
d1:14:71:71:cf:91:30:13:d3:d9:10:23:33:ab:89:06:3c:48:
68:7a:d2:ed:0a:d7:75:e4:94:54:0e:8c:6d:38:c6:39:0e:02:
d7:04:24:94:4f:0d:21:e2:c2:cc:99:74:f7:73:ab:61:9d:6a:
d1:8e:bd:d0:1d:27:88:15:eb:29:94:5b:82:0a:9a:af:47:28:
5d:88:2e:ef:dc:b1:d9:af:9c:2f:a6:9b:cc:cb:50:0e:8a:39:
81:8b:b5:64:17:52:56:75:28:68:8f:c4:22:cb:3f:91:78:d4:
bc:92:10:38
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAYzI35XtLf5qIpvxb/HhBPQ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjQwMTAyMDYzMjI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2EyODg5YzI1NGMxMjlhMzE1M2IzOTQxZWE0NjlkMjNkMWM3OTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYK+Dib+QBdWmxB46URtDPEHs/qo
H5a20eYkETrSI+MpCMXDpR6gRcf3alltMAW87iGFrqYK9LFN9SORMfkRKrigkyvn
e9ZdoWps6F7zvsD2mtdcGpdVW4qhRLc46uumiNulCg+TZ3cOAJiuu4YsfAtUTAui
0nMOorhSF98fLsFvy1qCit4eZbavjpmjfu2l1UNkSroxEWvY5T/igzaW3HhuGnWn
1DXcmbCkZ8CnPTSoUZ0qpzd30Rx2XOP1eO6kwHw5fbtTGG2Iyf8Q+xWOcaOUs43E
bsJBGIxJU/+M0Hg+sH1o5EBYAkBit786qyHpuHRS6dGHSCRCUhzDZN95yQIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFGyiiJwlTBKaMVOzlB6kadI9HHlwMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvYktLSW5DVk1FcG94VTdPVUhxUnAwajBjZVhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDB3BAIAATBxAwUALQlJ
swMFAC0JSbgDBQAtCUnsMAwDBAAtWUEDBAItWUADBAItgLADBABb2VADBANejogD
BAK5BfgDBAK5OswDBAK5VzADBAG5aXQDBAK5dZgDBAK5fdgDBAK5feQDBATBfLAD
BAXCQ8ADBADDL/owMQQCAAIwKwMHACoJUwL//wMHACoKkwAQADAQAwUAKgqTAQMH
ACoKkwEAAgMFACoKkwIwDQYJKoZIhvcNAQELBQADggEBABCE4KRR2E0VPfAE/wgm
ZB2gcIKnWO9qJRSXct/f15xCNcZ2vDwrP6Jw0hs9qbI6A+Ayk+fNodW7W8PBjdII
z9x18zo0zG0Q/Onkap71QDx+WvtG+q6W3ydlhA5ptmxKl/CmtqqNrImmxedK2Am3
27hAzHV09n6BGFfisM7LHoakdogOkBHO3hhEpGaXtVDJltEUcXHPkTAT09kQIzOr
iQY8SGh60u0K13XklFQOjG04xjkOAtcEJJRPDSHiwsyZdPdzq2GdatGOvdAdJ4gV
6ymUW4IKmq9HKF2ILu/csdmvnC+mm8zLUA6KOYGLtWQXUlZ1KGiPxCLLP5F41LyS
EDg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org