Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BQabispyHAiV_o0nmsemUHgK0pw.roa
File: BQabispyHAiV_o0nmsemUHgK0pw.roa (raw, json)
Hash identifier: kJQRRox49BBZu23G4ckXtynNlJH1gLUHkqvshqsYxxA=
Subject key identifier: 05:06:9B:8A:CA:72:1C:08:95:FE:8D:27:9A:C7:A6:50:78:0A:D2:9C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019344E26EB392745B38EAF1798C4ADEA828
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BQabispyHAiV_o0nmsemUHgK0pw.roa
Signing time: Tue 19 Nov 2024 14:45:10 +0000
ROA not before: Tue 19 Nov 2024 14:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43641
IP address blocks: 2.57.241.0/24 maxlen: 24
45.135.180.0/24 maxlen: 24
89.35.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 16:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:e2:6e:b3:92:74:5b:38:ea:f1:79:8c:4a:de:a8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 19 14:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05069b8aca721c0895fe8d279ac7a650780ad29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:fa:2d:db:c1:ae:c7:c1:f9:cf:78:13:ce:
68:02:24:c9:fa:5d:0a:6b:9e:0d:d7:a1:6d:e8:e7:
fe:30:0b:21:4d:1d:dc:8b:d7:2f:17:45:56:fa:b5:
09:af:32:26:8e:75:8a:1a:1b:da:2a:84:3a:26:52:
fc:4d:95:ee:64:4f:f8:ea:88:1e:9b:05:92:b6:8f:
6f:ee:88:4a:e4:b0:65:74:1d:c7:45:2a:16:d5:45:
15:59:6c:b6:53:dc:36:7f:ab:73:71:fc:fe:66:db:
7e:c1:40:e2:21:2f:27:99:81:30:7e:28:59:dd:1c:
a7:cc:e1:e6:65:2a:ab:cb:27:b7:33:f2:6a:42:df:
e6:7e:b4:91:f5:ab:45:5d:73:1c:7b:1e:a8:34:a7:
60:f7:19:ab:8e:3d:cd:03:7d:c0:27:9d:3a:76:32:
1c:d0:72:1b:0a:dd:62:94:41:f1:b6:27:b7:51:ed:
a9:28:c3:00:b6:fb:e0:b1:7c:06:cf:d3:e3:04:ea:
97:27:8c:08:2c:e2:28:b9:27:bf:86:8c:3d:6b:5b:
54:4c:89:c4:38:d4:18:be:48:21:73:1d:5c:52:9c:
41:32:cc:75:c1:61:df:c7:eb:59:7f:50:ec:94:a5:
e8:6e:f8:fc:b5:35:b8:d3:b8:95:a2:d2:cb:ec:f0:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:06:9B:8A:CA:72:1C:08:95:FE:8D:27:9A:C7:A6:50:78:0A:D2:9C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BQabispyHAiV_o0nmsemUHgK0pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
45.135.180.0/24
89.35.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:73:04:23:23:5d:0f:c9:ba:d2:c2:76:8b:f9:5d:b7:6e:3f:
97:bf:d3:5f:4c:c8:37:a1:67:61:7b:c4:f5:8f:1d:4d:1a:42:
ce:43:d7:d2:54:c8:30:ef:27:d5:7d:b5:c0:03:51:8e:82:e4:
f9:36:52:b2:8e:cd:b5:d6:7e:9b:fb:ab:2c:e5:4c:dd:06:ed:
a2:0c:3d:e8:0c:62:8b:14:be:9a:5b:cc:73:3a:f4:e6:ff:07:
c3:6a:08:a8:1c:09:96:0f:9a:8d:15:93:05:ab:ef:56:d9:09:
e0:60:66:5b:7b:e0:18:47:b6:8f:36:70:31:e3:00:08:60:ed:
33:32:c5:15:fb:e1:7e:b1:10:1b:25:b2:ab:f0:b5:79:63:f0:
85:b8:2f:af:85:da:ff:db:6b:50:e3:73:bc:81:eb:ca:a8:af:
c0:6e:2f:99:70:72:a1:8f:ca:a2:a2:bf:35:68:81:b5:fd:52:
a5:75:60:4a:ec:10:d1:3b:52:8c:09:ac:bc:7d:ee:9d:c0:c3:
cf:c6:4a:47:8f:a1:7a:4e:a9:d8:aa:54:9b:87:9c:a2:2d:62:
55:1a:26:f5:76:fa:0e:4f:05:7c:e4:98:97:1b:68:04:1a:7b:
de:08:d3:b5:27:7d:d1:ce:43:8d:36:13:b8:aa:d8:68:61:78:
b6:c2:ae:62
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZNE4m6zknRbOOrxeYxK3qgoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQxMTE5MTQ0NTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTA2OWI4YWNhNzIxYzA4OTVmZThkMjc5YWM3YTY1MDc4MGFkMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQr6LdvBrsfB+c94E85oAiTJ+l0K
a54N16Ft6Of+MAshTR3ci9cvF0VW+rUJrzImjnWKGhvaKoQ6JlL8TZXuZE/46oge
mwWSto9v7ohK5LBldB3HRSoW1UUVWWy2U9w2f6tzcfz+Ztt+wUDiIS8nmYEwfihZ
3RynzOHmZSqryye3M/JqQt/mfrSR9atFXXMcex6oNKdg9xmrjj3NA33AJ506djIc
0HIbCt1ilEHxtie3Ue2pKMMAtvvgsXwGz9PjBOqXJ4wILOIouSe/how9a1tUTInE
ONQYvkghcx1cUpxBMsx1wWHfx+tZf1DslKXobvj8tTW407iVotLL7PCOqwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAUGm4rKchwIlf6NJ5rHplB4CtKcMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvQlFhYmlzcHlIQWlWX28wbm1zZW1VSGdLMHB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAAjnxAwQA
LYe0AwQAWSODMA0GCSqGSIb3DQEBCwUAA4IBAQCOcwQjI10PybrSwnaL+V23bj+X
v9NfTMg3oWdhe8T1jx1NGkLOQ9fSVMgw7yfVfbXAA1GOguT5NlKyjs211n6b+6ss
5UzdBu2iDD3oDGKLFL6aW8xzOvTm/wfDagioHAmWD5qNFZMFq+9W2QngYGZbe+AY
R7aPNnAx4wAIYO0zMsUV++F+sRAbJbKr8LV5Y/CFuC+vhdr/22tQ43O8gevKqK/A
bi+ZcHKhj8qior81aIG1/VKldWBK7BDRO1KMCay8fe6dwMPPxkpHj6F6TqnYqlSb
h5yiLWJVGib1dvoOTwV85JiXG2gEGnveCNO1J33RzkONNhO4qthoYXi2wq5i
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:47:02 2025 by rpki-client