Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/BWX6FMGpi5rsUoPrU3zBGXmXBG8.roa
File: BWX6FMGpi5rsUoPrU3zBGXmXBG8.roa (raw, json)
Hash identifier: CsktdSCd0Hqyi0UoCRlnVdkSuqiNWnh1RpoCzldw6OA=
Subject key identifier: 05:65:FA:14:C1:A9:8B:9A:EC:52:83:EB:53:7C:C1:19:79:97:04:6F
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0194266B4D515268B4A03623FCCBC964A8C3
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/BWX6FMGpi5rsUoPrU3zBGXmXBG8.roa
Signing time: Thu 02 Jan 2025 09:49:13 +0000
ROA not before: Thu 02 Jan 2025 09:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215761
IP address blocks: 94.154.33.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 17:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:4d:51:52:68:b4:a0:36:23:fc:cb:c9:64:a8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 2 09:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0565fa14c1a98b9aec5283eb537cc1197997046f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:f9:eb:b0:0b:dc:75:03:96:af:34:4d:34:
8d:f1:a5:31:4a:0a:25:d9:97:23:e6:0b:a5:af:cb:
01:b4:75:79:e9:eb:a1:03:a9:3d:dd:f7:c0:00:ad:
85:35:91:3a:f9:2d:53:8d:42:b8:39:0e:bd:45:12:
dd:d6:54:cd:b0:c6:5c:49:67:1d:5f:12:f6:0c:25:
65:00:03:b9:d7:91:b4:57:e9:1b:42:96:4d:65:93:
7d:7f:4f:64:1d:24:0f:95:70:18:ae:83:34:98:d3:
c4:21:03:76:92:fb:cd:31:9e:c7:33:8f:2a:4c:d2:
25:f0:f6:a2:1b:2e:0a:f7:22:fa:d3:05:98:e6:07:
2a:95:da:d6:cd:6c:8a:83:dc:d3:b4:05:3b:48:41:
e3:d6:37:5c:79:f4:a4:d7:c6:8b:ab:c4:9f:61:f9:
d4:c4:68:9e:2a:5c:6f:a8:7c:40:98:04:61:83:5f:
38:b1:85:8c:83:13:7c:82:7e:38:ca:ea:a1:06:96:
05:b2:26:5f:e9:47:27:cf:8e:44:ec:9f:27:b0:30:
0b:28:ca:a8:5e:cb:df:f9:0c:f4:2b:65:ab:fa:4d:
2d:a5:4b:25:0d:5f:0c:b6:1b:a6:af:49:95:79:0f:
11:13:d6:f4:f2:b2:a2:d0:45:09:69:14:70:79:cb:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:65:FA:14:C1:A9:8B:9A:EC:52:83:EB:53:7C:C1:19:79:97:04:6F
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/BWX6FMGpi5rsUoPrU3zBGXmXBG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.33.0/24
94.154.37.0/24
Signature Algorithm: sha256WithRSAEncryption
73:23:79:32:5f:2e:19:7d:5a:ab:87:53:24:93:fb:15:0c:b2:
b5:e3:d3:41:5e:08:e6:55:84:aa:69:0c:04:21:a4:37:cd:11:
e7:2d:5a:88:bb:95:b0:da:30:0c:d4:03:33:7b:c9:18:0a:12:
c2:4b:c5:fb:a5:eb:9a:82:bd:30:f0:a1:8c:8f:8f:63:17:20:
6f:be:c3:73:e5:e4:3e:6e:76:38:95:78:5e:e7:6c:5d:a3:55:
80:b6:05:ec:28:4b:b3:08:dc:9b:24:04:15:34:75:ad:44:88:
dd:39:98:86:1c:6b:8b:f1:62:cd:d4:dd:0f:d5:da:c4:f3:74:
ba:16:c3:8b:3d:8f:46:6a:c5:d8:57:80:11:4c:74:c3:92:66:
e3:0c:e6:35:d6:6e:8d:b6:3f:07:11:b0:88:c7:1e:89:da:f5:
58:e7:8c:3b:33:15:86:28:57:94:c7:66:30:97:68:8c:76:cf:
72:e4:30:fa:a9:e3:db:d2:23:17:6f:3c:4f:9f:a8:8f:b9:d0:
b9:39:c7:05:9e:a5:59:28:62:42:3f:d9:97:f5:02:94:37:d0:
e9:bd:c0:97:69:dc:e7:c1:22:52:e3:ac:b3:39:c7:3f:92:16:
f1:f9:be:ee:cc:7b:6d:9b:16:d3:90:77:1a:7f:3b:0b:b4:33:
9e:91:2a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:52:11 2025 by rpki-client