Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/v0PWCnqSqFVXf9a0lPfklBayBus.roa
File: v0PWCnqSqFVXf9a0lPfklBayBus.roa (raw, json)
Hash identifier: YIxhXJh6liy7E6MmycdeMxVdprBDY2CV69FTpPQWfHs=
Subject key identifier: BF:43:D6:0A:7A:92:A8:55:57:7F:D6:B4:94:F7:E4:94:16:B2:06:EB
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 01954CD0B04A1A1540534053B9E0EF0EF32B
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/v0PWCnqSqFVXf9a0lPfklBayBus.roa
Signing time: Fri 28 Feb 2025 13:48:19 +0000
ROA not before: Fri 28 Feb 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 69.62.64.0/23 maxlen: 23
69.62.66.0/23 maxlen: 23
69.62.68.0/22 maxlen: 22
69.62.72.0/21 maxlen: 21
69.62.80.0/22 maxlen: 22
69.62.84.0/23 maxlen: 23
69.62.88.0/21 maxlen: 21
69.62.96.0/21 maxlen: 21
103.199.184.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 13:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:d0:b0:4a:1a:15:40:53:40:53:b9:e0:ef:0e:f3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Feb 28 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf43d60a7a92a855577fd6b494f7e49416b206eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:44:05:4c:de:d2:c6:ef:23:20:41:24:86:
12:c0:ae:45:05:16:85:4a:57:43:63:6a:89:ec:82:
2f:76:16:60:74:5d:ad:b8:4d:74:b2:a9:cb:dc:cc:
54:16:04:d2:14:32:dc:97:3e:6c:59:4f:68:30:5c:
aa:39:9a:d0:8e:ab:e3:8a:f4:6f:21:7a:c0:4e:15:
85:e5:95:18:5a:33:bb:3d:0d:64:0b:f7:b9:cd:41:
10:88:aa:86:c4:3e:2b:3a:86:2c:d4:75:f0:f6:77:
56:1c:2b:ed:b3:53:eb:f5:b9:79:da:bb:7e:fd:b3:
1c:30:1e:79:93:25:bf:74:f2:cb:dd:fd:4d:20:f3:
04:1b:c5:20:31:6c:f6:68:7b:f2:fb:dc:ca:81:04:
1b:15:e8:03:fc:bb:fb:13:a3:09:ac:f6:da:00:5f:
61:24:8e:7d:c9:28:08:25:c4:0b:1b:21:37:e7:17:
3b:77:91:1b:55:66:78:0b:05:9d:c0:e3:c1:6a:60:
ff:4b:c1:2b:b8:4a:18:27:cf:bb:4d:07:c2:02:c0:
e9:5f:2c:9c:fb:b0:56:c7:a5:c0:c0:97:b6:b1:32:
a8:01:7f:1a:34:f4:ce:7e:78:0a:27:3b:2d:d6:e3:
03:3a:d2:fb:49:5b:c9:ac:1e:66:1a:21:79:d5:e7:
1a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:43:D6:0A:7A:92:A8:55:57:7F:D6:B4:94:F7:E4:94:16:B2:06:EB
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/v0PWCnqSqFVXf9a0lPfklBayBus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.62.64.0-69.62.85.255
69.62.88.0-69.62.103.255
103.199.184.0/22
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:5d:3e:06:55:18:0c:3b:da:f3:17:30:8c:07:31:34:7c:8e:
e9:b0:7f:a3:37:66:d0:b8:0c:62:a6:6f:39:f8:25:d9:0b:35:
5f:3d:28:90:45:c5:77:93:df:33:2a:52:fe:57:77:3f:2e:1b:
1a:91:02:61:11:33:bd:0a:01:34:c0:18:b0:0b:dd:f1:a8:e0:
66:ed:20:c5:23:aa:0f:6d:83:be:07:86:97:be:ba:6b:ed:e4:
25:40:0c:bc:68:75:79:b2:d7:1d:25:2a:34:f4:96:74:ce:b0:
80:e7:52:cd:47:7b:1a:fb:1a:fe:57:8e:ff:9a:3c:50:d3:6c:
22:4f:10:4b:d9:07:cc:a4:da:f5:85:4c:f0:41:e4:46:df:f9:
01:da:87:b4:b2:cb:90:65:47:ed:f4:e9:b9:cb:4e:f4:e1:85:
99:63:6c:e2:50:ae:51:0a:b8:3f:1b:f7:2d:b5:03:bf:27:2a:
dd:fc:f7:30:87:f1:9f:d9:3c:27:44:e0:bb:54:03:b0:ae:f7:
6e:ee:af:87:86:9c:c4:24:ad:9f:8a:6d:eb:fc:e0:0c:f7:a7:
45:93:43:fe:d1:76:0e:67:ee:43:58:58:41:34:76:6c:46:83:
9d:11:79:f3:0f:43:fc:5a:42:c8:e7:dd:7e:97:6d:b2:d4:2e:
6c:1e:a6:e1
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZVM0LBKGhVAU0BTueDvDvMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQxNjZiNjg1YWMwMTViOTQxMjZjZGI4YjE4YzgzYTEy
ZWQ4NjIwHhcNMjUwMjI4MTM0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjQzZDYwYTdhOTJhODU1NTc3ZmQ2YjQ5NGY3ZTQ5NDE2YjIwNmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTpEBUze0sbvIyBBJIYSwK5FBRaF
SldDY2qJ7IIvdhZgdF2tuE10sqnL3MxUFgTSFDLclz5sWU9oMFyqOZrQjqvjivRv
IXrAThWF5ZUYWjO7PQ1kC/e5zUEQiKqGxD4rOoYs1HXw9ndWHCvts1Pr9bl52rt+
/bMcMB55kyW/dPLL3f1NIPMEG8UgMWz2aHvy+9zKgQQbFegD/Lv7E6MJrPbaAF9h
JI59ySgIJcQLGyE35xc7d5EbVWZ4CwWdwOPBamD/S8EruEoYJ8+7TQfCAsDpXyyc
+7BWx6XAwJe2sTKoAX8aNPTOfngKJzst1uMDOtL7SVvJrB5mGiF51ecaFQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFL9D1gp6kqhVV3/WtJT35JQWsgbrMB8GA1UdIwQY
MBaAFLkUFmtoWsAVuUEmzbixjIOhLthiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYt
ZWE2N2E5ODYyNWZlLzEvdjBQV0NucVNxRlZYZjlhMGxQZmtsQmF5QnVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYtZWE2N2E5ODYyNWZl
LzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAZFPkAD
BAFFPlQwDAMEA0U+WAMEA0U+YAMEAmfHuAMEAsKklDANBgkqhkiG9w0BAQsFAAOC
AQEAsV0+BlUYDDva8xcwjAcxNHyO6bB/ozdm0LgMYqZvOfgl2Qs1Xz0okEXFd5Pf
MypS/ld3Py4bGpECYREzvQoBNMAYsAvd8ajgZu0gxSOqD22DvgeGl766a+3kJUAM
vGh1ebLXHSUqNPSWdM6wgOdSzUd7Gvsa/leO/5o8UNNsIk8QS9kHzKTa9YVM8EHk
Rt/5AdqHtLLLkGVH7fTpuctO9OGFmWNs4lCuUQq4Pxv3LbUDvycq3fz3MIfxn9k8
J0Tgu1QDsK73bu6vh4acxCStn4pt6/zgDPenRZND/tF2DmfuQ1hYQTR2bEaDnRF5
8w9D/FpCyOfdfpdtstQubB6m4Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:03:11 2025 by rpki-client