Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/BFtViTwWpCRbIFGedNQdg4XJ3tI.roa
File: BFtViTwWpCRbIFGedNQdg4XJ3tI.roa (raw, json)
Hash identifier: M3hGkiMooAwgd0nw6pI6wZ4EyHTfNW1oHC/kScz5HfQ=
Subject key identifier: 04:5B:55:89:3C:16:A4:24:5B:20:51:9E:74:D4:1D:83:85:C9:DE:D2
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01954C2B3564357B1F3ECE92F30C81CDDA4E
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/BFtViTwWpCRbIFGedNQdg4XJ3tI.roa
Signing time: Fri 28 Feb 2025 10:47:34 +0000
ROA not before: Fri 28 Feb 2025 10:47:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396073
IP address blocks: 62.68.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 10:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:2b:35:64:35:7b:1f:3e:ce:92:f3:0c:81:cd:da:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Feb 28 10:47:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=045b55893c16a4245b20519e74d41d8385c9ded2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:5e:ac:f7:a6:80:ef:a7:91:b2:ce:33:78:
b4:7d:49:1c:01:0e:3f:35:99:26:08:7b:fb:1b:36:
b5:2b:f4:df:13:ef:79:aa:2a:96:26:e8:93:37:d0:
e0:d1:ff:69:00:57:37:c8:87:f5:a4:69:9c:0d:96:
4d:5a:ff:83:43:2c:75:73:91:a1:c9:ec:65:b2:ee:
4f:df:dd:33:6e:c4:48:5c:98:1b:75:83:1c:93:75:
1d:aa:4d:4c:42:e9:d4:d5:4c:e9:f8:34:8b:c8:3a:
3b:c3:1c:0e:49:cf:9e:66:06:be:9c:ca:e2:dd:d6:
ea:4b:8e:2c:a6:8c:95:58:1d:10:9f:6e:fb:0b:6c:
1b:45:df:b0:ba:15:8f:29:06:bb:dc:01:30:85:75:
27:9d:b8:71:fa:33:e5:d4:5b:3e:d2:20:84:2e:ad:
e1:23:09:d5:22:45:2e:ea:c1:c5:db:16:c0:48:1a:
5d:99:f1:1d:86:45:55:cc:d7:41:6c:f7:8a:54:71:
2e:3e:6a:4b:f1:5d:ec:66:98:4a:c3:ba:0e:bf:94:
69:bd:db:11:d2:f5:78:35:c6:5f:ec:44:5f:5d:5d:
c8:2e:4f:7e:3f:e3:64:5e:32:b4:1f:58:cf:77:a8:
ae:4c:6f:d4:e9:0e:ea:a0:bf:c3:62:8e:3e:ab:57:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5B:55:89:3C:16:A4:24:5B:20:51:9E:74:D4:1D:83:85:C9:DE:D2
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/BFtViTwWpCRbIFGedNQdg4XJ3tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.73.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:90:ef:a7:27:a2:b7:f3:11:ef:a3:7a:6d:94:3a:94:34:cd:
61:15:e3:1c:7d:ae:60:30:32:ad:9a:e7:da:05:87:6f:ea:f8:
83:84:f3:75:71:ef:fe:42:25:0b:a9:b6:c5:57:83:77:b2:91:
68:96:47:c1:5a:cf:95:71:87:b0:97:b1:1d:81:60:b8:20:06:
b0:19:a8:49:bc:2b:8f:d6:a1:1d:a9:af:6a:34:a4:21:03:b0:
64:b9:83:ea:0c:d6:e8:eb:8a:27:9d:97:35:0e:54:ea:c0:81:
f6:90:ce:79:c3:6f:cf:95:68:6e:44:e9:76:6f:46:b0:9f:9f:
65:91:2c:6d:80:85:60:4c:80:95:82:5a:9c:be:93:04:52:55:
1a:c6:b7:6a:c3:fd:b2:03:23:19:65:eb:4e:d5:94:d3:9e:7d:
3b:5f:5b:c1:ef:3e:45:fc:14:92:b2:a0:a6:64:fe:c8:58:89:
bb:19:2b:b0:7a:70:99:da:00:a4:9c:a9:8f:6c:7b:13:72:cb:
74:e5:c6:5d:dc:91:93:3c:2d:5d:71:d5:63:f6:c6:33:d7:81:
a0:49:20:4f:cd:ec:6f:86:2b:56:62:ed:0e:67:e3:ae:8d:4b:
55:e2:bc:69:9d:a2:72:5b:de:06:82:7a:cb:c0:65:7e:51:51:
0f:4e:48:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:57 2025 by rpki-client