Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/BM1TxhvMGFwHCBMzL8Fe-fjfydo.roa
File: BM1TxhvMGFwHCBMzL8Fe-fjfydo.roa (raw, json)
Hash identifier: oxihfFhDqIR1e1ybP4Zr+jJPSymX+6dDo9bqMxM+aHM=
Subject key identifier: 04:CD:53:C6:1B:CC:18:5C:07:08:13:33:2F:C1:5E:F9:F8:DF:C9:DA
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 018CC79496133FB37176DF1664810EF2ACBC
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/BM1TxhvMGFwHCBMzL8Fe-fjfydo.roa
Signing time: Tue 02 Jan 2024 00:30:52 +0000
ROA not before: Tue 02 Jan 2024 00:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8758
IP address blocks: 193.73.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:96:13:3f:b3:71:76:df:16:64:81:0e:f2:ac:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Jan 2 00:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04cd53c61bcc185c070813332fc15ef9f8dfc9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:17:1a:00:a8:51:91:7d:e6:ca:0b:ab:c6:
30:3a:d6:ae:97:a9:f1:5a:2c:39:e5:cf:f8:05:21:
f1:28:ed:b9:18:4d:ff:b9:df:a1:3a:b5:dc:0a:71:
f2:6e:23:89:b9:af:b4:86:d6:6d:78:aa:d8:12:7b:
f5:bf:f6:a6:bf:0b:7b:d5:26:a8:af:55:17:f2:2f:
a6:8c:98:99:42:ed:ea:e0:42:87:99:13:ca:e4:90:
34:b9:a8:8e:63:37:a9:3d:79:54:2a:0b:ea:c3:7c:
ee:9f:74:ce:99:54:b0:e2:3c:a4:26:b6:5b:e9:4b:
f7:f0:a9:09:e5:10:a7:1c:0b:0e:a2:1e:16:dc:7e:
5f:98:01:bb:7e:d1:9d:ae:6c:f4:db:2e:25:63:42:
58:a8:83:9c:1f:39:b0:1e:54:32:ea:e5:06:f2:5e:
38:98:c6:9a:5a:e7:f5:5f:0a:69:fd:e2:96:c1:8a:
01:94:21:8d:37:8e:53:22:57:b4:42:75:7d:52:75:
13:70:67:1a:bf:5d:85:67:06:6f:be:e2:41:e8:22:
92:d3:3e:b1:48:42:4d:e2:ed:fc:71:c1:21:5e:2b:
5a:fd:12:d5:59:05:31:33:72:c5:f2:8c:b7:b1:6c:
41:3c:de:4f:94:56:63:85:5f:be:1a:ad:14:6f:4b:
92:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CD:53:C6:1B:CC:18:5C:07:08:13:33:2F:C1:5E:F9:F8:DF:C9:DA
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/BM1TxhvMGFwHCBMzL8Fe-fjfydo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.211.0/24
Signature Algorithm: sha256WithRSAEncryption
37:97:d4:07:23:2c:ba:6e:8c:d3:00:3b:c8:53:13:56:c2:08:
70:c7:66:74:4d:61:8f:e2:39:9c:80:80:20:ad:fe:3b:51:7a:
e5:d5:8c:31:3d:55:f0:6c:6e:a4:3d:ee:dc:e5:f4:d5:d1:68:
89:64:81:bf:ba:c8:4f:2d:f7:85:85:f7:f8:82:4b:d7:f1:4e:
4f:ba:ee:b6:f0:54:ca:d6:f0:4c:97:95:45:1d:b0:1f:9a:2e:
82:34:d8:80:8f:1c:f7:e5:2a:6b:6d:f1:74:ae:ed:05:e5:2b:
47:f6:b4:2e:14:9a:90:c5:02:21:1f:02:7f:22:45:f3:98:6c:
f8:e3:e5:91:14:73:c1:f1:d9:fb:0d:b7:92:6f:94:2e:bf:42:
c3:d3:24:d1:ea:cb:6d:01:bf:e9:af:57:68:f1:35:4d:f1:49:
a1:6f:38:2c:ca:8c:28:f6:01:ea:3b:2b:d7:82:7f:97:b5:bb:
75:2c:70:2b:26:71:8a:fa:eb:fd:83:e9:95:7e:c1:2a:81:f6:
19:03:da:56:60:b2:cd:c0:ac:62:3f:14:06:8b:87:8f:cd:07:
03:1a:09:f2:ec:29:bf:1c:37:45:6e:32:04:37:b4:52:39:ee:
60:90:4c:3e:06:39:81:e9:21:ff:58:20:2f:56:58:61:c0:f0:
d3:3b:62:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlJYTP7Nxdt8WZIEO8qy8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmFhYzI5YjkwNTM0ZjkxYTlmYjBlYjYzMThmMDAxOTQ1
MWM2ZWUwHhcNMjQwMTAyMDAzMDUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGNkNTNjNjFiY2MxODVjMDcwODEzMzMyZmMxNWVmOWY4ZGZjOWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo4XGgCoUZF95soLq8YwOtaul6nx
Wiw55c/4BSHxKO25GE3/ud+hOrXcCnHybiOJua+0htZteKrYEnv1v/amvwt71Sao
r1UX8i+mjJiZQu3q4EKHmRPK5JA0uaiOYzepPXlUKgvqw3zun3TOmVSw4jykJrZb
6Uv38KkJ5RCnHAsOoh4W3H5fmAG7ftGdrmz02y4lY0JYqIOcHzmwHlQy6uUG8l44
mMaaWuf1Xwpp/eKWwYoBlCGNN45TIle0QnV9UnUTcGcav12FZwZvvuJB6CKS0z6x
SEJN4u38ccEhXita/RLVWQUxM3LF8oy3sWxBPN5PlFZjhV++Gq0Ub0uSpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFATNU8YbzBhcBwgTMy/BXvn438naMB8GA1UdIwQY
MBaAFGP6rCm5BTT5Gp+w62MY8AGUUcbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWIt
NzRjMTQwNWMzNDc1LzEvQk0xVHhodk1HRndIQ0JNekw4RmUtZmpmeWRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWItNzRjMTQwNWMzNDc1
LzEvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwUnTMA0G
CSqGSIb3DQEBCwUAA4IBAQA3l9QHIyy6bozTADvIUxNWwghwx2Z0TWGP4jmcgIAg
rf47UXrl1YwxPVXwbG6kPe7c5fTV0WiJZIG/ushPLfeFhff4gkvX8U5Puu628FTK
1vBMl5VFHbAfmi6CNNiAjxz35SprbfF0ru0F5StH9rQuFJqQxQIhHwJ/IkXzmGz4
4+WRFHPB8dn7DbeSb5Quv0LD0yTR6sttAb/pr1do8TVN8Umhbzgsyowo9gHqOyvX
gn+Xtbt1LHArJnGK+uv9g+mVfsEqgfYZA9pWYLLNwKxiPxQGi4ePzQcDGgny7Cm/
HDdFbjIEN7RSOe5gkEw+BjmB6SH/WCAvVlhhwPDTO2Jf
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:23 2025 by rpki-client