Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BEMa82zNp_f215zfsI5asCMvkwM.roa
File: BEMa82zNp_f215zfsI5asCMvkwM.roa (raw, json)
Hash identifier: UAtJpinCApSrHDI7gU415N7Bq01uVhAoXgz1xZa/hWs=
Subject key identifier: 04:43:1A:F3:6C:CD:A7:F7:F6:D7:9C:DF:B0:8E:5A:B0:23:2F:93:03
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01945FED2772D824245FDCFF7671DC69F4FA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BEMa82zNp_f215zfsI5asCMvkwM.roa
Signing time: Mon 13 Jan 2025 13:49:25 +0000
ROA not before: Mon 13 Jan 2025 13:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31142
IP address blocks: 94.249.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 18:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:ed:27:72:d8:24:24:5f:dc:ff:76:71:dc:69:f4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 13 13:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04431af36ccda7f7f6d79cdfb08e5ab0232f9303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:66:4c:dc:b7:e0:b9:8a:58:79:18:05:be:
61:1b:6b:22:48:c7:d0:36:ea:57:d0:88:22:5f:6e:
3f:4b:8e:ba:18:a0:f2:3a:c2:76:57:43:c3:e4:49:
c4:14:72:2a:37:9d:5c:a3:16:93:7c:9d:ac:26:95:
69:84:6c:c3:b7:70:b6:e6:cc:8e:9a:4e:05:08:3a:
c1:bd:f6:09:50:a8:3c:9e:dd:55:5f:21:3c:6a:72:
00:f7:48:58:6f:dc:c9:03:12:f0:a8:1d:b9:bb:fe:
38:36:04:22:f8:49:0f:ba:db:7c:ae:2a:af:aa:13:
a4:18:18:37:86:88:56:0a:c4:04:b6:8e:26:68:10:
2e:09:06:4e:28:3c:48:e6:c9:02:b9:8d:5e:00:f1:
94:7c:b1:0c:e4:67:4a:68:97:79:53:4c:04:5a:c0:
a3:49:83:f4:72:63:75:96:d7:53:c4:68:4f:9a:ef:
f1:23:4c:28:d6:03:15:51:02:92:3b:a6:3c:b2:85:
21:35:e4:c1:4b:68:a4:59:4f:0b:d4:1b:2f:af:1b:
a0:92:8c:ab:63:2c:69:79:2f:4e:c6:06:21:6b:6a:
37:c4:06:21:ea:f4:d4:f7:36:e9:11:1c:d6:a3:93:
45:1c:f9:83:da:aa:bf:3b:b1:07:53:e7:91:06:43:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:43:1A:F3:6C:CD:A7:F7:F6:D7:9C:DF:B0:8E:5A:B0:23:2F:93:03
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BEMa82zNp_f215zfsI5asCMvkwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c1:d8:c0:f1:16:f8:57:5a:fb:0e:7f:8b:43:33:5d:d8:94:
ee:ae:b4:0d:ab:dc:d5:32:e6:17:26:06:6e:58:f2:40:c4:73:
42:9e:bc:5b:96:f3:13:42:b4:a3:19:fc:5c:6c:9c:2d:c3:9b:
96:ae:18:94:1d:d3:00:44:a5:ea:e8:9f:bb:fc:ca:15:35:ca:
ba:85:b6:4b:c8:6b:32:62:cf:76:d5:6f:fa:82:4b:b1:41:19:
61:35:d9:48:bd:25:78:96:c0:c6:56:21:ef:7d:41:ea:e6:d5:
ee:f1:e3:45:97:35:9a:54:8e:b6:59:76:96:f6:12:56:71:94:
55:fa:6c:bb:94:ff:15:5b:32:3c:9e:65:29:99:80:12:e1:d6:
cb:68:8f:17:6a:22:87:20:16:61:ee:91:06:d9:7a:de:a8:c3:
19:96:b4:3f:35:0b:ad:ea:38:cc:6b:ae:a1:e1:df:2c:40:02:
29:5a:a1:49:13:77:cd:48:23:1a:43:cd:9c:3c:f6:b7:20:50:
5e:01:d0:16:e9:48:36:6b:69:5d:ff:e2:d1:5d:7f:44:3a:c1:
6d:ac:60:dc:d2:01:b3:6d:ec:42:04:03:83:91:f0:f2:83:68:
0b:01:ee:ec:10:69:0b:2c:c6:3c:cd:cc:fc:a5:06:3f:d1:cb:
7e:ee:9f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:18 2025 by rpki-client