Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Bv1XHnlqKfAlguTWEtIcEMrIQTY.roa
File: Bv1XHnlqKfAlguTWEtIcEMrIQTY.roa (raw, json)
Hash identifier: TsrP95GKILUCKQCUO+j+Kp2qR3y/l7h8iI45FQDgMv0=
Subject key identifier: 06:FD:57:1E:79:6A:29:F0:25:82:E4:D6:12:D2:1C:10:CA:C8:41:36
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0194923446213959A88348E4756F1BFDA3BA
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Bv1XHnlqKfAlguTWEtIcEMrIQTY.roa
Signing time: Thu 23 Jan 2025 08:08:06 +0000
ROA not before: Thu 23 Jan 2025 08:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 62.72.173.0/24 maxlen: 24
62.72.180.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 08:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:34:46:21:39:59:a8:83:48:e4:75:6f:1b:fd:a3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 23 08:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06fd571e796a29f02582e4d612d21c10cac84136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:30:dc:a6:a1:33:21:3a:08:98:5d:22:46:
a9:39:9d:ba:e2:63:20:1a:d2:cd:77:dd:b8:1e:a1:
7b:e1:60:6c:7c:17:42:6d:f7:a4:2e:63:4b:40:a2:
93:ca:fe:05:12:d2:ba:f6:05:3f:cd:e3:f6:27:9f:
cf:7f:7d:26:9e:ca:00:83:5c:62:81:04:b9:d3:62:
fa:e6:a2:08:3c:45:77:61:78:0c:20:c1:b5:38:4b:
74:c6:6c:88:4f:73:d9:bf:0a:94:6d:39:59:34:ed:
75:b5:9a:b9:cb:23:14:93:b6:13:e1:19:08:f9:9c:
a9:d9:20:25:b0:f0:5b:ef:44:57:cf:6d:f5:f7:1b:
f3:55:c3:8c:07:7d:35:78:e5:fb:7e:79:42:38:95:
e0:3a:00:d8:d0:76:d3:50:39:80:0a:00:e6:b7:9d:
c7:88:c0:a2:f3:2b:e9:3b:d7:9e:a1:03:35:bc:94:
92:b3:e7:9a:88:7c:81:78:c1:8e:ea:3f:15:d0:8f:
45:c5:f7:a8:53:62:70:b0:fe:2c:26:95:0b:22:f0:
de:c0:dc:b0:8b:06:1a:4e:77:b8:2a:eb:9b:41:16:
65:54:b0:30:e8:87:55:b3:12:a3:9b:48:5d:49:f9:
dc:bd:1f:b0:d9:54:05:be:28:24:64:b1:75:80:79:
54:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FD:57:1E:79:6A:29:F0:25:82:E4:D6:12:D2:1C:10:CA:C8:41:36
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Bv1XHnlqKfAlguTWEtIcEMrIQTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.173.0/24
62.72.180.0/24
176.57.53.0/24
Signature Algorithm: sha256WithRSAEncryption
28:db:f0:9b:00:0f:15:6f:d0:13:41:52:74:81:17:8c:d0:1b:
c6:82:d0:8b:88:fd:b0:83:1f:bb:14:e5:74:0c:9f:27:ff:5b:
dd:ff:49:3d:27:b9:68:b5:cb:83:5e:00:9f:25:2b:86:67:04:
7c:ae:4e:78:f9:fe:28:8e:f8:f7:c1:7e:7f:ef:ef:de:28:73:
8c:03:08:97:9e:90:5a:a6:2e:22:c5:5a:a2:5c:73:c7:cd:75:
84:a5:9d:f4:b5:69:4b:9d:75:69:d7:a0:6e:3e:50:ee:a8:d4:
e1:79:eb:ea:77:88:07:7c:8e:e8:36:a0:68:50:5f:b7:1d:14:
0f:62:b9:3a:9b:7b:38:60:d2:ef:6e:78:ce:9f:3c:42:37:d5:
85:13:cd:d7:79:57:30:00:79:66:73:7b:ac:af:bb:8a:26:13:
f2:97:69:dd:2f:95:7f:63:bf:35:11:13:91:c5:00:4e:7c:f7:
d9:45:42:c5:b4:d8:e9:3b:5e:22:3d:92:7f:81:7d:0e:43:ff:
aa:b1:d6:7d:c1:e6:6e:dc:76:af:af:be:f2:35:ae:fe:38:8b:
07:3d:f0:c2:4d:1e:21:36:55:93:7a:da:ca:4c:b4:3d:5f:e3:
fe:72:f0:e1:5c:3d:44:46:8e:43:81:33:3a:9f:f0:28:20:8c:
03:26:7b:af
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZSSNEYhOVmog0jkdW8b/aO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjUwMTIzMDgwODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmZkNTcxZTc5NmEyOWYwMjU4MmU0ZDYxMmQyMWMxMGNhYzg0MTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBsw3KahMyE6CJhdIkapOZ264mMg
GtLNd924HqF74WBsfBdCbfekLmNLQKKTyv4FEtK69gU/zeP2J5/Pf30mnsoAg1xi
gQS502L65qIIPEV3YXgMIMG1OEt0xmyIT3PZvwqUbTlZNO11tZq5yyMUk7YT4RkI
+Zyp2SAlsPBb70RXz2319xvzVcOMB301eOX7fnlCOJXgOgDY0HbTUDmACgDmt53H
iMCi8yvpO9eeoQM1vJSSs+eaiHyBeMGO6j8V0I9FxfeoU2JwsP4sJpULIvDewNyw
iwYaTne4KuubQRZlVLAw6IdVsxKjm0hdSfncvR+w2VQFvigkZLF1gHlUqQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAb9Vx55ainwJYLk1hLSHBDKyEE2MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvQnYxWEhubHFLZkFsZ3VUV0V0SWNFTXJJUVRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPkitAwQA
Pki0AwQAsDk1MA0GCSqGSIb3DQEBCwUAA4IBAQAo2/CbAA8Vb9ATQVJ0gReM0BvG
gtCLiP2wgx+7FOV0DJ8n/1vd/0k9J7lotcuDXgCfJSuGZwR8rk54+f4ojvj3wX5/
7+/eKHOMAwiXnpBapi4ixVqiXHPHzXWEpZ30tWlLnXVp16BuPlDuqNTheevqd4gH
fI7oNqBoUF+3HRQPYrk6m3s4YNLvbnjOnzxCN9WFE83XeVcwAHlmc3usr7uKJhPy
l2ndL5V/Y781ERORxQBOfPfZRULFtNjpO14iPZJ/gX0OQ/+qsdZ9weZu3Havr77y
Na7+OIsHPfDCTR4hNlWTetrKTLQ9X+P+cvDhXD1ERo5DgTM6n/AoIIwDJnuv
-----END CERTIFICATE-----
Generated at Wed Mar 12 19:53:17 2025 by rpki-client