Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Bshb62qQx083i5fV_c_5YSEEhcI.roa
File: Bshb62qQx083i5fV_c_5YSEEhcI.roa (raw, json)
Hash identifier: Ok7QvMZlmqD5y+4NIP79VK1OEBXGzEb6MQzmPI2lz5g=
Subject key identifier: 06:C8:5B:EB:6A:90:C7:4F:37:8B:97:D5:FD:CF:F9:61:21:04:85:C2
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 019561A2E345E42B42F37E19BFA684455D0F
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Bshb62qQx083i5fV_c_5YSEEhcI.roa
Signing time: Tue 04 Mar 2025 14:50:19 +0000
ROA not before: Tue 04 Mar 2025 14:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15755
IP address blocks: 87.251.22.0/24 maxlen: 24
185.35.21.0/24 maxlen: 24
185.35.22.0/24 maxlen: 24
185.96.168.0/24 maxlen: 24
185.96.171.0/24 maxlen: 24
185.203.32.0/24 maxlen: 24
185.203.33.0/24 maxlen: 24
185.203.34.0/24 maxlen: 24
185.203.35.0/24 maxlen: 24
2a00:7300::/32 maxlen: 32
2a00:7300::/48 maxlen: 48
2a0a:e0c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 21 Mar 2025 09:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:61:a2:e3:45:e4:2b:42:f3:7e:19:bf:a6:84:45:5d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Mar 4 14:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06c85beb6a90c74f378b97d5fdcff961210485c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:25:8c:9f:1f:dd:b9:c9:15:f7:0e:d3:90:
b2:5c:38:0e:a2:c5:cf:6c:0f:bc:3d:3c:51:70:b0:
ea:f1:b6:35:a4:03:ff:fb:9d:46:1c:4d:00:e6:ea:
dd:0d:cf:3c:72:91:3a:f0:5a:fa:ea:e5:13:9d:00:
b1:f7:a6:98:03:83:24:54:19:dd:67:1b:2c:45:d5:
ad:eb:09:f7:28:be:f4:de:0c:9d:0c:a3:7b:57:1e:
7b:b5:d4:77:87:14:73:14:05:0d:75:cf:50:13:cd:
4c:36:7c:e2:3d:15:de:04:46:c7:86:bc:52:18:5e:
a1:64:33:bd:1c:83:dd:f7:28:87:c7:a5:24:e7:6b:
11:8a:da:8e:a7:68:bc:c7:42:b2:87:ab:a2:58:5d:
8c:ed:f1:74:59:41:66:24:68:71:42:1e:a3:8c:e3:
c6:d9:f9:d4:58:d9:23:bf:a9:27:b4:d9:df:32:38:
f0:cf:9d:4b:4b:86:cd:c6:61:39:43:68:4f:df:f4:
14:ae:58:65:60:61:ec:7d:d4:7a:92:b1:60:22:51:
fc:4a:04:1d:f2:a6:fd:4e:56:c1:af:ba:ae:0c:35:
4b:b4:8b:76:81:37:90:dd:9d:13:61:e4:5a:23:17:
ca:ed:36:ae:db:d7:6d:63:b3:95:95:8b:1c:0c:18:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C8:5B:EB:6A:90:C7:4F:37:8B:97:D5:FD:CF:F9:61:21:04:85:C2
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Bshb62qQx083i5fV_c_5YSEEhcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.22.0/24
185.35.21.0-185.35.22.255
185.96.168.0/24
185.96.171.0/24
185.203.32.0/22
IPv6:
2a00:7300::/32
2a0a:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:98:87:fd:1e:52:a3:a5:49:57:27:14:d1:01:3c:d6:98:ae:
ba:1a:a1:53:3f:7a:6d:c5:0a:88:94:5a:e6:0c:08:f6:52:31:
f7:55:c8:45:5a:9f:87:d1:f3:06:63:81:4f:55:6b:b4:b8:fc:
9b:b9:74:e1:48:0c:e0:cb:fc:da:47:11:b8:e9:2b:72:e1:cb:
31:82:f5:4e:86:f8:65:61:ed:b6:eb:8b:55:ed:06:fe:51:4b:
c4:3d:b1:b2:5f:35:a2:b7:88:7a:67:2a:b1:54:e0:59:82:8e:
67:2c:df:50:de:18:6d:47:6c:03:39:01:5b:71:55:7e:8b:73:
91:8b:1f:f4:13:6a:c1:b2:ae:d1:cd:e4:f7:71:2a:7c:b6:d0:
9f:71:b7:d0:83:79:59:7b:ee:e6:fc:a8:a2:34:6f:fa:2c:85:
96:48:6b:f1:e9:e6:26:bb:f2:12:2b:06:e9:74:6c:47:88:23:
45:08:b6:ed:d6:b6:ea:fe:87:76:d9:5d:69:c5:2f:91:82:1d:
58:e6:7b:25:ec:5b:9a:99:48:b2:f8:fa:10:51:96:de:ee:13:
6d:3f:b2:f3:d1:33:e3:f3:8b:46:f4:42:8f:5f:6a:a6:56:d3:
f3:7f:60:ae:43:b2:84:7c:57:e4:82:0d:52:2b:35:08:3f:64:
fb:54:a6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:25:03 2025 by rpki-client