Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bxtEJ3vsIlj75incxrYn6vVJkbA.roa
File: bxtEJ3vsIlj75incxrYn6vVJkbA.roa (raw, json)
Hash identifier: CpuLYtoQ1LMFZIKKPWJEs4280SfgPBYfA96HmTmlUvs=
Subject key identifier: 6F:1B:44:27:7B:EC:22:58:FB:E6:29:DC:C6:B6:27:EA:F5:49:91:B0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195662CB3EDD8D4D2A485EC792D12CBE2FA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bxtEJ3vsIlj75incxrYn6vVJkbA.roa
Signing time: Wed 05 Mar 2025 11:59:20 +0000
ROA not before: Wed 05 Mar 2025 11:59:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214998
IP address blocks: 85.202.203.0/24 maxlen: 24
93.88.204.0/22 maxlen: 24
194.50.94.0/24 maxlen: 24
2a0e:97c1::/40 maxlen: 48
2a10:2f00:167::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 31 Mar 2025 05:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:2c:b3:ed:d8:d4:d2:a4:85:ec:79:2d:12:cb:e2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 5 11:59:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f1b44277bec2258fbe629dcc6b627eaf54991b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:c7:8c:11:e6:d6:4f:96:ea:61:56:ae:1e:
d7:60:4b:7b:46:c0:0c:4e:c6:0c:01:c7:f1:1c:97:
2e:96:16:2d:05:7f:fe:cb:1f:0f:da:46:f5:f5:45:
13:6d:6e:b2:94:13:4a:be:83:b1:b9:ab:e4:73:7f:
51:99:fd:3f:a3:38:fc:a4:e8:43:46:96:d0:c3:20:
2e:82:9b:6c:43:48:6a:ed:28:be:bd:67:78:60:fc:
de:8e:43:88:57:71:38:da:d3:5a:d5:d6:65:ae:77:
e1:0a:ff:a2:0a:1e:f4:06:d2:9e:f8:68:b0:73:f6:
7b:27:fb:5b:7d:eb:2b:d1:98:65:e2:e2:8e:43:ea:
42:a4:21:fe:27:fe:63:7d:30:9a:5e:bb:93:c7:8e:
8f:7e:cd:7d:fb:53:ef:4e:4d:7f:c9:0b:e6:1f:2e:
59:fe:cb:68:73:f1:e4:3c:a9:72:61:a8:61:98:06:
ad:eb:91:cc:e9:ba:08:54:2d:e7:25:74:ea:75:22:
37:db:4a:ea:b4:d4:6d:3f:92:ad:76:de:1c:b6:84:
d0:bf:48:55:7f:90:68:00:90:fe:e4:de:eb:a3:98:
6b:47:dd:25:6e:8d:5e:48:3e:66:c0:f2:e6:5a:ff:
b7:49:40:63:a7:1e:b1:17:8f:15:d7:d2:ca:c5:b2:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1B:44:27:7B:EC:22:58:FB:E6:29:DC:C6:B6:27:EA:F5:49:91:B0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bxtEJ3vsIlj75incxrYn6vVJkbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.203.0/24
93.88.204.0/22
194.50.94.0/24
IPv6:
2a0e:97c1::/40
2a10:2f00:167::/48
Signature Algorithm: sha256WithRSAEncryption
7a:cf:97:30:9d:cd:d2:0e:59:8d:48:c1:74:5e:52:60:de:73:
65:a3:2b:97:e8:a3:64:37:56:5e:6b:75:0a:23:d4:e3:65:b8:
7e:3d:46:38:c8:a2:60:bc:90:3e:77:17:f2:cb:8f:5a:7d:50:
a2:e3:c2:0a:8f:e4:40:58:b3:64:e7:a3:26:a2:a5:5d:98:0f:
e9:45:66:e5:47:2c:4b:6b:f7:36:e7:e5:1f:54:fd:ff:62:70:
2e:e0:8a:7c:9e:9c:19:13:17:dd:f6:07:e6:b6:9e:10:ad:da:
63:d3:8c:72:ea:30:37:e1:c2:d2:78:27:ad:5a:45:fe:19:32:
3b:03:71:3d:0e:9c:c6:4c:97:a3:2d:1d:eb:a8:2b:cc:ce:16:
4c:99:4f:d4:d0:d1:22:ba:f7:ad:1f:42:76:1f:7d:3d:db:e2:
78:06:a7:e2:5b:46:76:c4:b2:fe:b3:ad:f0:ac:e5:d8:af:cb:
1f:e6:3a:5b:b0:a1:7d:dd:c9:fd:42:80:3d:50:ee:84:91:0a:
c9:fb:b7:7c:0e:1f:b5:61:2a:04:78:c8:09:f6:1e:03:76:38:
06:3f:90:87:c1:ef:61:fe:62:de:e5:81:33:6a:b7:68:d2:91:
39:81:a6:2e:f5:8f:cd:70:09:9f:82:64:fd:c5:ec:8e:1b:42:
86:9e:29:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:44:24 2025 by rpki-client