Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bjbkcVkP9SNDm7ewcaN8AVtwmH4.roa
File: bjbkcVkP9SNDm7ewcaN8AVtwmH4.roa (raw, json)
Hash identifier: 5Ccnb03OkDd90lOAsMJxPgEHVEJFd1ENi7Wy2eMu/oo=
Subject key identifier: 6E:36:E4:71:59:0F:F5:23:43:9B:B7:B0:71:A3:7C:01:5B:70:98:7E
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019832B9AC8E612F6BDFF0B16D7F3F9AB332
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bjbkcVkP9SNDm7ewcaN8AVtwmH4.roa
Signing time: Tue 22 Jul 2025 15:21:25 +0000
ROA not before: Tue 22 Jul 2025 15:21:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52468
IP address blocks: 45.130.161.0/24 maxlen: 24
46.29.28.0/24 maxlen: 24
94.125.137.0/24 maxlen: 24
201.77.48.0/24 maxlen: 24
201.77.53.0/24 maxlen: 24
201.77.55.0/24 maxlen: 24
217.76.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Jul 2025 15:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:b9:ac:8e:61:2f:6b:df:f0:b1:6d:7f:3f:9a:b3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 22 15:21:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e36e471590ff523439bb7b071a37c015b70987e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:e5:e8:02:c3:f7:12:c4:92:df:06:df:61:
1a:aa:05:ad:e4:02:19:61:a1:38:3d:c3:39:5d:2c:
3e:42:a1:4c:97:79:8f:18:e3:ac:2f:c8:20:90:11:
29:a1:f9:46:22:e0:eb:33:5f:96:ae:bc:fa:c6:41:
c3:5c:dd:ee:98:dc:34:cc:7e:6a:c5:93:26:82:d4:
42:a2:12:b5:3a:c1:2a:2f:2b:cb:c4:de:78:c6:0c:
bf:9e:ae:01:42:26:73:4c:08:4c:8e:14:37:71:42:
b7:5d:fd:7d:81:03:c6:64:3f:eb:62:0d:65:34:db:
99:14:a8:80:c0:67:75:07:2f:9e:37:4d:57:4a:51:
b1:48:84:86:48:05:69:27:bd:99:0f:c8:1e:a6:d5:
6c:75:63:b0:70:52:ef:28:51:a4:d4:32:54:52:fb:
1f:10:b7:d0:5d:ae:d5:9d:ae:21:f4:fd:24:14:42:
60:56:9f:6f:5a:1c:95:e6:f5:02:70:19:8c:2b:02:
3e:11:da:f8:2a:47:60:a8:26:30:8e:4f:5a:cb:d9:
e6:75:5e:2c:48:19:0d:87:7b:2b:cf:d1:cb:3f:8a:
44:f9:e4:f4:43:d1:1f:3e:3f:41:be:70:56:ab:a0:
a2:e4:aa:41:4f:bc:8f:01:a2:af:ea:6d:39:c1:69:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:36:E4:71:59:0F:F5:23:43:9B:B7:B0:71:A3:7C:01:5B:70:98:7E
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bjbkcVkP9SNDm7ewcaN8AVtwmH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.161.0/24
46.29.28.0/24
94.125.137.0/24
201.77.48.0/24
201.77.53.0/24
201.77.55.0/24
217.76.240.0/24
Signature Algorithm: sha256WithRSAEncryption
af:6f:2e:1d:09:9f:f4:59:49:6d:18:66:f7:08:59:81:8e:ce:
3c:bf:dc:00:bf:72:09:eb:86:89:57:3f:9d:20:4d:ae:3c:93:
e5:7f:38:a7:dc:43:b2:b2:9f:0e:0a:88:07:1c:16:e9:d0:0a:
4c:4c:5b:92:ff:46:a3:29:63:03:56:b9:1c:35:56:5a:f8:69:
9f:ed:71:b3:9e:cd:85:12:5b:7e:1b:0d:da:7a:35:8a:24:a0:
59:34:3e:4e:5f:1a:f1:2e:45:59:15:dc:bf:fb:0c:76:da:d8:
f4:e3:75:e0:6a:54:13:40:25:41:61:91:85:e4:56:2a:19:53:
13:46:6e:1b:aa:6f:1f:fd:74:6b:b3:ac:27:e4:fc:9b:a0:e3:
9b:b9:91:d6:85:5f:d5:57:5f:8d:4c:69:c5:db:52:a6:72:c8:
ee:81:57:0e:cd:d1:0f:2d:46:60:27:de:b2:1b:73:6f:8b:ac:
87:9f:e8:ef:4e:97:16:d9:6a:ae:1c:50:66:dd:a0:d3:6c:a2:
e2:68:5a:ad:b2:39:97:53:cc:41:c6:9d:2d:e9:7a:21:64:4b:
6a:d3:7d:4e:a2:22:3c:df:f1:10:6c:38:0e:65:f1:e6:65:95:
97:6b:fc:b6:da:22:a3:a7:2e:d4:c0:b2:be:58:9f:bc:ec:2f:
95:a4:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:55 2025 by rpki-client