Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/BwZWICWais-YK7J7zvdaD8NvOxE.roa
File: BwZWICWais-YK7J7zvdaD8NvOxE.roa (raw, json)
Hash identifier: CO+dtHyhVwi/X9oTr61H7ebgS4rkkl1ZSPWswzt0MGI=
Subject key identifier: 07:06:56:20:25:9A:8A:CF:98:2B:B2:7B:CE:F7:5A:0F:C3:6F:3B:11
Certificate issuer: /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial: 01946E089F6AF83770E520F6CBF7F33FA696
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/BwZWICWais-YK7J7zvdaD8NvOxE.roa
Signing time: Thu 16 Jan 2025 07:34:06 +0000
ROA not before: Thu 16 Jan 2025 07:34:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206114
IP address blocks: 87.255.160.0/19 maxlen: 19
87.255.188.0/22 maxlen: 22
2a04:2800::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 16 Jan 2025 15:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:08:9f:6a:f8:37:70:e5:20:f6:cb:f7:f3:3f:a6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Validity
Not Before: Jan 16 07:34:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07065620259a8acf982bb27bcef75a0fc36f3b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:be:3e:25:c1:5c:24:0a:8c:44:c3:35:c7:
2d:77:be:25:cc:04:ca:36:da:16:fa:9f:b4:01:9c:
d0:9d:3b:a9:1c:0f:a1:d5:3e:aa:14:fc:dc:fb:8a:
79:3d:3a:1d:63:6f:37:61:74:38:26:e8:03:79:e9:
a3:0d:40:6e:fe:b1:03:f9:80:f6:c4:8a:f5:34:7a:
03:fe:94:93:cf:9e:f6:bc:f6:25:2d:97:12:8a:02:
48:e4:4d:33:fc:ff:5a:41:69:65:d7:b7:90:f8:6b:
27:d3:87:44:8f:46:04:93:da:ca:8c:e1:37:ff:56:
16:34:12:ba:c2:83:43:2f:7d:00:bc:06:a7:14:c8:
85:d8:6a:6d:87:8a:27:ba:91:3d:de:25:3b:d5:18:
8b:6b:5d:04:fa:c6:2c:59:66:82:4d:8d:72:56:30:
97:ba:71:49:b7:96:8b:fd:aa:c4:4a:c3:3a:d1:7f:
9f:49:e3:8c:19:bc:74:fa:ab:5b:4e:8e:c4:1b:50:
03:40:61:e1:f0:ee:b1:fa:cb:90:63:5c:87:e1:b3:
85:4c:d0:f4:09:24:21:9d:20:78:9f:9f:df:c1:16:
d1:5b:cd:9c:f2:f6:7a:a5:3e:28:f8:88:f0:61:64:
fb:b5:2c:59:c4:bf:ec:2c:31:c2:ee:f6:f7:28:16:
f8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:06:56:20:25:9A:8A:CF:98:2B:B2:7B:CE:F7:5A:0F:C3:6F:3B:11
X509v3 Authority Key Identifier:
keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/BwZWICWais-YK7J7zvdaD8NvOxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.255.160.0/19
IPv6:
2a04:2800::/29
Signature Algorithm: sha256WithRSAEncryption
e9:cd:3e:7d:4e:1a:d0:a5:39:17:ae:57:a8:bd:44:54:3f:06:
0a:17:5b:82:f7:60:73:4b:ed:b3:85:d6:2e:d6:40:f8:73:25:
b6:6a:7e:94:21:8b:74:25:3d:03:0a:bc:8b:91:80:2d:63:ce:
fd:de:86:84:b4:df:af:69:47:1c:a3:21:2c:9f:bb:ad:4e:17:
2a:34:b0:03:7c:53:35:1d:8e:e6:26:4a:a4:bd:9a:65:0e:04:
9c:67:a2:61:bd:c1:8b:4b:eb:9d:c8:95:5a:9d:43:f8:f5:33:
28:58:43:da:3d:86:1b:11:64:52:b4:85:c9:54:0c:4e:dd:9b:
20:eb:6e:96:07:2b:05:12:12:8a:c0:b9:f0:b3:e5:62:eb:b1:
2d:40:6e:eb:43:73:46:68:b3:98:b5:20:3b:92:e8:ea:3b:c5:
56:cf:da:40:1b:c0:19:de:a4:ed:06:87:43:09:2b:6f:00:e8:
6f:04:2f:bb:46:90:fc:53:8d:36:86:cb:f9:dd:61:20:a8:d5:
5a:70:ae:7a:cd:b4:94:a5:21:2d:7c:cf:f2:50:29:0c:78:35:
4d:39:ff:9c:b0:f8:6a:69:cf:79:86:c2:e2:a2:41:8e:c6:4e:
81:7f:12:d7:9d:8e:be:15:91:b0:9d:c0:65:7e:a4:03:a4:58:
55:00:99:31
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZRuCJ9q+Ddw5SD2y/fzP6aWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjJkZGJkZjk1OGJiNGI5ODNkYTk2MmVjZjAzYmVhZWUz
OGQ0NDkwHhcNMjUwMTE2MDczNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzA2NTYyMDI1OWE4YWNmOTgyYmIyN2JjZWY3NWEwZmMzNmYzYjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRm+PiXBXCQKjETDNcctd74lzATK
NtoW+p+0AZzQnTupHA+h1T6qFPzc+4p5PTodY283YXQ4JugDeemjDUBu/rED+YD2
xIr1NHoD/pSTz572vPYlLZcSigJI5E0z/P9aQWll17eQ+Gsn04dEj0YEk9rKjOE3
/1YWNBK6woNDL30AvAanFMiF2Gpth4onupE93iU71RiLa10E+sYsWWaCTY1yVjCX
unFJt5aL/arESsM60X+fSeOMGbx0+qtbTo7EG1ADQGHh8O6x+suQY1yH4bOFTND0
CSQhnSB4n5/fwRbRW82c8vZ6pT4o+IjwYWT7tSxZxL/sLDHC7vb3KBb4dQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAcGViAlmorPmCuye873Wg/DbzsRMB8GA1UdIwQY
MBaAFI1i3b35WLtLmD2pYuzwO+ruONRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldMZHZmbFl1MHVZUGFsaTdQQTc2dTQ0MUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iMjBiZWMtMzg0Ni00YmQxLTgxMmYt
MDZlMDBhM2VhMDYyLzEvQndaV0lDV2Fpcy1ZSzdKN3p2ZGFEOE52T3hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iMjBiZWMtMzg0Ni00YmQxLTgxMmYtMDZlMDBhM2VhMDYy
LzEvaldMZHZmbFl1MHVZUGFsaTdQQTc2dTQ0MUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFV/+gMA0E
AgACMAcDBQMqBCgAMA0GCSqGSIb3DQEBCwUAA4IBAQDpzT59ThrQpTkXrleovURU
PwYKF1uC92BzS+2zhdYu1kD4cyW2an6UIYt0JT0DCryLkYAtY8793oaEtN+vaUcc
oyEsn7utThcqNLADfFM1HY7mJkqkvZplDgScZ6JhvcGLS+udyJVanUP49TMoWEPa
PYYbEWRStIXJVAxO3Zsg626WBysFEhKKwLnws+Vi67EtQG7rQ3NGaLOYtSA7kujq
O8VWz9pAG8AZ3qTtBodDCStvAOhvBC+7RpD8U402hsv53WEgqNVacK56zbSUpSEt
fM/yUCkMeDVNOf+csPhqac95hsLiokGOxk6BfxLXnY6+FZGwncBlfqQDpFhVAJkx
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:02:15 2025 by rpki-client