Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/BxJEEIi-3qKl7I5TEm-UPIvATho.roa
File: BxJEEIi-3qKl7I5TEm-UPIvATho.roa (raw, json)
Hash identifier: GS4ogG22x8dpp1PkiOcPgMI6nX70n/VELpQmOMzwdWU=
Subject key identifier: 07:12:44:10:88:BE:DE:A2:A5:EC:8E:53:12:6F:94:3C:8B:C0:4E:1A
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 018EF7FC39768AE26A50A4E6FFD61E439D10
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/BxJEEIi-3qKl7I5TEm-UPIvATho.roa
Signing time: Fri 19 Apr 2024 20:11:25 +0000
ROA not before: Fri 19 Apr 2024 20:11:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203059
IP address blocks: 45.91.120.0/24 maxlen: 24
45.95.211.0/24 maxlen: 24
91.218.77.0/24 maxlen: 24
134.255.242.0/24 maxlen: 24
185.53.33.0/24 maxlen: 24
185.231.228.0/22 maxlen: 24
185.234.101.0/24 maxlen: 24
185.253.62.0/23 maxlen: 24
194.156.132.0/23 maxlen: 24
194.156.150.0/23 maxlen: 24
2a13:5080::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 06 Dec 2024 16:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f7:fc:39:76:8a:e2:6a:50:a4:e6:ff:d6:1e:43:9d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Apr 19 20:11:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0712441088bedea2a5ec8e53126f943c8bc04e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:d4:9b:20:40:81:54:54:ac:8f:47:73:75:
d3:9f:53:6c:14:0f:12:ec:b3:7c:9a:64:51:eb:c3:
b2:5d:c8:ed:61:3f:17:f9:2c:86:27:fa:40:4f:e6:
ac:47:c9:ce:48:0e:f2:09:a0:e7:f7:b9:be:ac:e4:
98:c0:45:4f:dd:3f:b5:af:f7:96:0d:36:d7:f4:ea:
47:b3:c5:56:74:00:ac:e4:20:de:9e:dc:3e:4b:ab:
62:92:c8:7b:f4:b7:47:26:7f:40:67:15:76:fe:36:
9c:b9:dc:2a:c3:71:3e:02:26:67:30:a3:6c:e7:79:
13:4e:62:f1:8e:42:fc:73:2e:00:bf:99:10:48:ed:
08:57:bf:d5:7a:31:09:31:1a:f4:b5:f4:30:8b:32:
1a:b3:ff:54:df:5e:54:75:71:12:ea:03:6e:99:c0:
0a:aa:e5:05:b9:5a:ee:ff:ef:4f:fa:14:b3:af:91:
01:20:f9:37:74:fb:32:da:7b:9a:7c:2f:f3:4c:f6:
76:38:0c:76:76:dc:13:0e:9d:9a:86:d4:a8:40:40:
2e:34:dc:ba:da:a0:52:91:a7:8f:97:91:5b:50:4c:
21:b4:af:cd:0e:37:c0:78:d7:0f:8a:de:bd:6d:44:
d8:d2:a0:c4:6e:3c:49:cc:8e:9f:8d:df:53:6e:20:
e2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:12:44:10:88:BE:DE:A2:A5:EC:8E:53:12:6F:94:3C:8B:C0:4E:1A
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/BxJEEIi-3qKl7I5TEm-UPIvATho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.120.0/24
45.95.211.0/24
91.218.77.0/24
134.255.242.0/24
185.53.33.0/24
185.231.228.0/22
185.234.101.0/24
185.253.62.0/23
194.156.132.0/23
194.156.150.0/23
IPv6:
2a13:5080::/29
Signature Algorithm: sha256WithRSAEncryption
91:0e:b7:4d:1f:3d:be:f7:b2:8f:c1:22:43:0d:b9:6a:a3:76:
c0:f7:ba:fa:41:eb:d1:7d:55:3b:28:e2:94:72:26:24:ad:79:
85:de:59:19:6c:a9:a1:ca:41:bb:31:d6:88:97:0c:bf:e5:e9:
df:5d:8d:a0:ea:6b:41:f0:51:3d:fc:d5:0b:a5:28:e1:89:1f:
3e:fd:39:27:e3:a6:ba:66:1d:bd:c4:1a:8e:73:97:be:fa:11:
6e:19:8c:6a:1e:05:49:f2:a5:b8:c6:0e:b7:1c:e0:48:08:8c:
38:70:c9:9e:e4:04:13:73:cc:92:96:93:e4:cd:86:8e:16:d1:
81:8b:29:ce:d6:24:34:c7:f0:ed:6d:4c:70:52:bd:79:e4:97:
86:27:30:98:a9:39:76:22:55:8a:37:2e:fc:a4:01:4e:23:78:
4b:94:f6:94:8a:72:8d:f0:cf:f5:c0:35:41:34:ec:ee:cb:14:
ad:5d:03:ae:e9:2e:d1:3c:b9:83:34:8e:ed:92:50:98:16:5f:
1e:a8:60:e5:92:d2:d9:10:19:e3:ee:14:b3:99:b9:99:94:54:
df:ed:70:a7:28:be:3c:64:de:2f:66:89:29:1c:82:12:c8:99:
35:e3:c3:e1:3e:00:41:e3:f8:08:1e:de:07:0a:69:00:3c:a5:
4f:69:b2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:39 2025 by rpki-client