Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/bwhYOLuaru1xzCLwuyn_DJPXPN8.roa
File: bwhYOLuaru1xzCLwuyn_DJPXPN8.roa (raw, json)
Hash identifier: N+LlXhrkzemNQcc/vRtRrJXz/1S/C4pdR2sGQjsVv1s=
Subject key identifier: 6F:08:58:38:BB:9A:AE:ED:71:CC:22:F0:BB:29:FF:0C:93:D7:3C:DF
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 019423D7173EBF85AEDD5BCB80E210438909
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/bwhYOLuaru1xzCLwuyn_DJPXPN8.roa
Signing time: Wed 01 Jan 2025 21:48:06 +0000
ROA not before: Wed 01 Jan 2025 21:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2639
IP address blocks: 31.186.226.0/24 maxlen: 24
31.186.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Mar 2025 00:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:17:3e:bf:85:ae:dd:5b:cb:80:e2:10:43:89:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jan 1 21:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f085838bb9aaeed71cc22f0bb29ff0c93d73cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:12:c8:ee:db:f6:3b:45:9b:37:26:e2:b0:
6a:a7:60:56:b3:b6:7b:3f:f7:86:f8:3a:68:a8:41:
0d:f0:38:55:93:56:a1:ad:cc:35:28:6f:9b:ee:25:
28:09:26:31:ee:e4:b8:c0:31:a3:65:71:c0:06:26:
3e:31:b9:5c:69:39:97:95:1f:b5:df:fd:ea:33:9e:
fc:69:97:e3:3d:f4:4f:41:82:ec:20:56:ae:39:37:
ed:ad:f5:1e:9c:b8:a0:8b:92:0d:46:22:ca:02:bc:
d0:92:ff:50:96:61:72:ea:50:d8:fd:9b:98:43:4e:
d4:66:cc:62:e2:db:0a:fb:5b:fe:2e:b8:70:58:eb:
b0:27:6a:93:ec:1a:4a:e0:e9:05:1d:ba:c8:d3:30:
b1:77:a9:71:3c:c2:2b:63:f4:9a:27:f5:d1:9c:32:
33:bf:ab:55:23:54:44:ad:db:9b:fb:c8:ce:d0:5e:
3e:54:12:bc:a3:42:54:df:89:30:00:25:f2:be:95:
dc:d6:9f:53:64:16:8c:bd:e8:0b:59:5e:20:c5:4e:
aa:e4:f7:75:9b:22:1b:ec:e4:3d:84:d2:ef:dd:23:
63:8d:3d:9c:de:1c:1c:d5:bf:b8:a5:5e:2c:05:0d:
ad:33:31:f4:e5:14:bb:f0:0d:1a:83:0c:34:67:29:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:08:58:38:BB:9A:AE:ED:71:CC:22:F0:BB:29:FF:0C:93:D7:3C:DF
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/bwhYOLuaru1xzCLwuyn_DJPXPN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.226.0/24
31.186.243.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2b:d2:a0:33:67:53:83:7d:25:89:66:5b:23:7d:99:a0:77:
4a:34:c1:ef:44:f6:6a:78:19:6b:8d:da:89:e2:58:b4:97:09:
76:89:37:5a:cd:81:e1:44:70:98:63:ff:44:37:b5:ab:7e:24:
ae:60:a0:a3:13:a0:28:56:62:68:c0:2e:a0:4c:a3:cb:f4:d8:
36:3f:3d:0e:d7:ea:af:9b:2a:89:54:72:f3:45:34:bb:1b:2d:
1c:3f:30:6e:41:a9:65:4c:70:04:02:fd:6c:98:e6:73:cf:9e:
4b:e1:19:8d:c2:16:70:04:cb:8f:64:c7:1c:8c:5a:80:aa:cc:
45:9e:f7:24:c2:fb:1a:ad:be:57:c2:69:ce:64:95:08:7a:20:
eb:cf:f4:5e:09:7a:3f:a7:c0:23:8e:66:2a:59:b3:ad:ea:d5:
7a:22:66:d2:66:39:81:cd:73:e7:e6:64:b1:7c:9d:f8:c9:db:
5a:e4:fc:4d:f4:a9:4f:c6:1c:ec:3f:93:48:09:96:8a:0f:16:
25:38:04:e1:32:20:a6:d6:5c:29:37:a1:b3:06:bf:05:8f:47:
39:f0:53:02:ab:bf:07:c9:d7:89:ba:b0:77:fc:f2:e8:af:bd:
ce:5b:21:22:20:df:3a:68:83:c3:c0:7f:5e:00:0b:3f:9c:b5:
fd:59:28:d0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1xc+v4Wu3VvLgOIQQ4kJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3
OThmZDkwHhcNMjUwMTAxMjE0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjA4NTgzOGJiOWFhZWVkNzFjYzIyZjBiYjI5ZmYwYzkzZDczY2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbQSyO7b9jtFmzcm4rBqp2BWs7Z7
P/eG+DpoqEEN8DhVk1ahrcw1KG+b7iUoCSYx7uS4wDGjZXHABiY+MblcaTmXlR+1
3/3qM578aZfjPfRPQYLsIFauOTftrfUenLigi5INRiLKArzQkv9QlmFy6lDY/ZuY
Q07UZsxi4tsK+1v+LrhwWOuwJ2qT7BpK4OkFHbrI0zCxd6lxPMIrY/SaJ/XRnDIz
v6tVI1RErdub+8jO0F4+VBK8o0JU34kwACXyvpXc1p9TZBaMvegLWV4gxU6q5Pd1
myIb7OQ9hNLv3SNjjT2c3hwc1b+4pV4sBQ2tMzH05RS78A0agww0ZynVuQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG8IWDi7mq7tccwi8Lsp/wyT1zzfMB8GA1UdIwQY
MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt
OTk4NjhjNTEzMjlhLzEvYndoWU9MdWFydTF4ekNMd3V5bl9ESlBYUE44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh
LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH7riAwQA
H7rzMA0GCSqGSIb3DQEBCwUAA4IBAQCPK9KgM2dTg30liWZbI32ZoHdKNMHvRPZq
eBlrjdqJ4li0lwl2iTdazYHhRHCYY/9EN7WrfiSuYKCjE6AoVmJowC6gTKPL9Ng2
Pz0O1+qvmyqJVHLzRTS7Gy0cPzBuQallTHAEAv1smOZzz55L4RmNwhZwBMuPZMcc
jFqAqsxFnvckwvsarb5XwmnOZJUIeiDrz/ReCXo/p8AjjmYqWbOt6tV6ImbSZjmB
zXPn5mSxfJ34ydta5PxN9KlPxhzsP5NICZaKDxYlOAThMiCm1lwpN6GzBr8Fj0c5
8FMCq78HydeJurB3/PLor73OWyEiIN86aIPDwH9eAAs/nLX9WSjQ
-----END CERTIFICATE-----
Generated at Sat Apr 12 18:57:16 2025 by rpki-client