Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/BeavfsFl5aSpbw1-ijDzNhXwEs4.roa
File: BeavfsFl5aSpbw1-ijDzNhXwEs4.roa (raw, json)
Hash identifier: B0qOnLD5H9ljpNi0iALUzmMxENjlqfLs+N4t8SkLrN0=
Subject key identifier: 05:E6:AF:7E:C1:65:E5:A4:A9:6F:0D:7E:8A:30:F3:36:15:F0:12:CE
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0194258F8C8C35579E411C19331E40402221
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/BeavfsFl5aSpbw1-ijDzNhXwEs4.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34744
IP address blocks: 31.133.28.0/22 maxlen: 22
77.36.0.0/18 maxlen: 18
77.36.16.0/21 maxlen: 21
77.36.64.0/19 maxlen: 19
77.232.216.0/22 maxlen: 22
91.246.172.0/22 maxlen: 22
93.120.47.0/24 maxlen: 24
109.197.232.0/22 maxlen: 22
176.115.232.0/22 maxlen: 22
2a01:7d8::/48 maxlen: 48
2a01:7d8:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Mar 2025 09:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8c:8c:35:57:9e:41:1c:19:33:1e:40:40:22:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05e6af7ec165e5a4a96f0d7e8a30f33615f012ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:d3:c3:56:59:3c:00:62:e3:e3:94:e0:a4:
8d:a8:93:22:42:7a:0b:46:cc:ad:2f:b1:a9:e5:5e:
38:0f:b9:3b:35:53:82:ab:17:70:0a:e3:a1:21:ab:
5f:b7:fb:4d:33:f7:cd:68:e7:2a:d2:3f:3f:b8:25:
00:53:c8:c3:f3:20:46:48:fc:ab:c1:26:be:08:ea:
c9:50:c4:e8:a4:a4:ea:fd:4c:6b:b1:02:0d:0d:fd:
74:1e:cf:c4:23:0c:23:d2:66:a2:e2:9b:35:d6:74:
e7:e0:6b:d8:99:6b:79:33:a2:f0:6b:cd:b2:e7:4f:
aa:8f:18:27:38:4f:c1:d3:d0:01:2f:75:1e:fc:ac:
40:60:03:5a:12:56:a1:45:27:ac:4b:94:df:cc:c3:
d8:5d:03:12:10:c4:c3:0a:52:15:b1:bc:67:5a:c9:
3c:27:50:77:9d:f4:9b:67:ab:8f:aa:07:95:4b:95:
11:0b:66:6c:49:94:d1:c4:65:d2:6b:b9:fd:ca:d4:
1d:3b:e7:2b:6f:f8:76:d1:76:fb:fb:37:6e:3b:26:
6e:6d:a2:4f:6f:08:a7:14:ae:08:c4:78:3b:72:e6:
07:bd:c8:a1:bb:d3:ba:9c:c0:1b:a4:71:22:1e:38:
74:0f:ef:13:d7:c7:36:90:ac:bc:d1:48:e7:db:d4:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E6:AF:7E:C1:65:E5:A4:A9:6F:0D:7E:8A:30:F3:36:15:F0:12:CE
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/BeavfsFl5aSpbw1-ijDzNhXwEs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.28.0/22
77.36.0.0-77.36.95.255
77.232.216.0/22
91.246.172.0/22
93.120.47.0/24
109.197.232.0/22
176.115.232.0/22
IPv6:
2a01:7d8::/47
Signature Algorithm: sha256WithRSAEncryption
35:8c:7c:bc:13:75:f6:6d:fc:cf:aa:be:b4:18:e2:b3:2a:78:
ba:60:14:76:7d:12:96:75:3d:96:4d:f2:4d:b7:1c:d2:2c:06:
2d:55:53:20:b5:67:ae:23:7e:7b:38:c5:67:3a:82:b7:2e:7b:
40:01:1c:3a:7f:c6:be:40:fd:2f:f3:04:c7:f3:14:b2:67:a5:
d6:e1:d9:af:fa:b6:26:ef:d4:24:f7:b9:ce:18:74:6b:62:9b:
65:fb:fe:a9:39:13:a3:c6:e9:d4:dc:00:e3:1d:01:d8:41:e1:
0b:cd:14:48:c7:cc:b4:55:9c:26:2d:2f:7e:e9:d1:eb:ec:95:
de:11:df:39:53:cd:d9:a6:a7:12:64:e4:8c:0b:ce:82:e3:11:
8b:4c:76:94:9f:1a:be:06:2f:08:07:9c:1f:a5:5e:70:3c:69:
12:38:4d:bc:a3:2d:32:c0:66:3f:3d:fd:18:f6:fc:b2:f6:43:
6d:ff:d4:87:b1:18:8c:ea:09:c9:15:22:33:27:2d:a0:fd:97:
e5:a6:48:c5:60:46:49:fa:c3:24:85:b4:26:42:c2:45:87:a2:
bf:39:a8:de:77:3a:a8:22:8c:32:c6:ef:80:30:e6:1b:c4:7d:
47:60:47:97:54:8b:d3:c8:10:e0:20:32:32:e1:6a:87:74:d8:
cc:2a:44:20
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZQlj4yMNVeeQRwZMx5AQCIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjUwMTAyMDU0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWU2YWY3ZWMxNjVlNWE0YTk2ZjBkN2U4YTMwZjMzNjE1ZjAxMmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dXTw1ZZPABi4+OU4KSNqJMiQnoL
RsytL7Gp5V44D7k7NVOCqxdwCuOhIatft/tNM/fNaOcq0j8/uCUAU8jD8yBGSPyr
wSa+COrJUMTopKTq/UxrsQINDf10Hs/EIwwj0mai4ps11nTn4GvYmWt5M6Lwa82y
50+qjxgnOE/B09ABL3Ue/KxAYANaElahRSesS5TfzMPYXQMSEMTDClIVsbxnWsk8
J1B3nfSbZ6uPqgeVS5URC2ZsSZTRxGXSa7n9ytQdO+crb/h20Xb7+zduOyZubaJP
bwinFK4IxHg7cuYHvcihu9O6nMAbpHEiHjh0D+8T18c2kKy80Ujn29SMMwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFAXmr37BZeWkqW8Nfoow8zYV8BLOMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvQmVhdmZzRmw1YVNwYncxLWlqRHpOaFh3RXM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjA3BAIAATAxAwQCH4UcMAsD
AwJNJAMEBU0kQAMEAk3o2AMEAlv2rAMEAF14LwMEAm3F6AMEArBz6DAPBAIAAjAJ
AwcBKgEH2AAAMA0GCSqGSIb3DQEBCwUAA4IBAQA1jHy8E3X2bfzPqr60GOKzKni6
YBR2fRKWdT2WTfJNtxzSLAYtVVMgtWeuI357OMVnOoK3LntAARw6f8a+QP0v8wTH
8xSyZ6XW4dmv+rYm79Qk97nOGHRrYptl+/6pOROjxunU3ADjHQHYQeELzRRIx8y0
VZwmLS9+6dHr7JXeEd85U83ZpqcSZOSMC86C4xGLTHaUnxq+Bi8IB5wfpV5wPGkS
OE28oy0ywGY/Pf0Y9vyy9kNt/9SHsRiM6gnJFSIzJy2g/ZflpkjFYEZJ+sMkhbQm
QsJFh6K/OajedzqoIowyxu+AMOYbxH1HYEeXVIvTyBDgIDIy4WqHdNjMKkQg
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:30 2025 by rpki-client