Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BrmyxOSw_PYSFa3xAjg_tfFFCfM.roa
File: BrmyxOSw_PYSFa3xAjg_tfFFCfM.roa (raw, json)
Hash identifier: 0nh8fIQOcti58KWTm3Kg1xA5FCos7I+RYrKSgABVpiQ=
Subject key identifier: 06:B9:B2:C4:E4:B0:FC:F6:12:15:AD:F1:02:38:3F:B5:F1:45:09:F3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01961BF52201FE94F2B3BB3CB25A80359B3C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BrmyxOSw_PYSFa3xAjg_tfFFCfM.roa
Signing time: Wed 09 Apr 2025 19:09:31 +0000
ROA not before: Wed 09 Apr 2025 19:09:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 64.226.54.0/23 maxlen: 23
64.226.156.0/22 maxlen: 22
2a0e:1a80:1::/48 maxlen: 48
2a0e:c785:1::/48 maxlen: 48
2a0e:f200::/48 maxlen: 48
2a0f:1203::/32 maxlen: 32
2a0f:1580::/32 maxlen: 32
2a0f:1e80:d9a8::/48 maxlen: 48
2a0f:3043::/32 maxlen: 32
2a0f:3d80:bac::/48 maxlen: 48
2a0f:7d06:102::/48 maxlen: 48
2a0f:e847:acab::/48 maxlen: 48
2a10:67c2:3::/48 maxlen: 48
2a12:ac43:1::/48 maxlen: 48
2a12:ac45::/32 maxlen: 32
2a13:18c0:2::/48 maxlen: 48
2a13:e103::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 11 Apr 2025 15:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:f5:22:01:fe:94:f2:b3:bb:3c:b2:5a:80:35:9b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 9 19:09:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06b9b2c4e4b0fcf61215adf102383fb5f14509f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:12:74:fb:de:66:f9:c0:e5:ee:0a:1c:99:
98:61:83:d3:eb:47:ef:31:cc:97:f6:8b:f8:86:b0:
f0:0c:e3:65:e2:36:9d:eb:99:a9:2c:04:7a:3b:e4:
02:25:fc:63:4c:19:ce:36:25:44:7d:14:0a:75:8d:
97:6a:4f:7e:42:dc:9c:14:a0:61:14:9c:f5:81:92:
ae:ff:9f:39:1f:5b:85:3f:e2:37:f1:7f:e2:f6:cc:
d8:1a:97:b9:a4:73:da:24:57:9b:2c:86:17:30:4a:
e8:9d:01:78:20:62:29:eb:2b:90:45:b0:68:7c:c4:
79:b7:89:66:f8:8c:8c:4d:22:28:66:df:89:57:11:
dc:1c:70:a2:50:0b:94:3b:d9:1e:7d:48:de:fc:d5:
0e:5f:88:2b:b7:92:65:06:73:59:86:88:8f:13:60:
43:31:6f:9e:d0:21:48:69:7b:cc:bc:6d:22:c8:d3:
4f:12:eb:fd:7f:3a:db:c1:71:7e:14:f9:9b:4b:89:
4e:51:1c:f8:bd:9c:34:9c:b1:3f:c6:43:91:81:1b:
e2:7e:78:4b:55:0d:a4:ad:0f:18:fe:51:d1:d8:8a:
46:1d:38:b8:15:0e:fe:2d:17:41:ac:7e:74:65:6f:
54:e7:29:4e:d6:61:9b:1c:4e:64:a4:68:b9:e0:f6:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B9:B2:C4:E4:B0:FC:F6:12:15:AD:F1:02:38:3F:B5:F1:45:09:F3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BrmyxOSw_PYSFa3xAjg_tfFFCfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
IPv6:
2a0e:1a80:1::/48
2a0e:c785:1::/48
2a0e:f200::/48
2a0f:1203::/32
2a0f:1580::/32
2a0f:1e80:d9a8::/48
2a0f:3043::/32
2a0f:3d80:bac::/48
2a0f:7d06:102::/48
2a0f:e847:acab::/48
2a10:67c2:3::/48
2a12:ac43:1::/48
2a12:ac45::/32
2a13:18c0:2::/48
2a13:e103::/32
Signature Algorithm: sha256WithRSAEncryption
36:fa:18:ac:17:40:27:77:22:2a:2b:e4:77:7e:a7:99:03:ea:
2c:dd:cf:fe:d2:ff:8a:51:49:53:05:5b:14:65:27:f1:fc:a4:
74:14:db:fb:7d:a2:94:95:a5:9d:74:9a:5c:d6:71:72:fe:51:
fc:8d:4b:1c:7b:c3:51:05:fe:82:3c:b6:ff:53:ba:a6:0b:5c:
f3:67:5b:d8:cc:9d:c5:af:71:88:80:e9:58:c7:70:9f:8f:81:
83:d4:a6:3e:2c:ad:22:4d:43:ee:fa:b9:7f:15:9b:fd:29:8a:
ee:66:51:82:ab:99:6b:12:87:ca:a8:f7:39:68:55:89:54:4f:
9e:9a:48:b1:57:ff:68:c6:11:5e:de:3b:98:d3:3a:c6:d4:68:
c9:d9:59:32:d0:b8:bc:30:f0:d4:86:40:fb:5d:58:ed:e5:c4:
7e:05:27:3b:be:f6:4a:89:e9:c9:8b:66:f2:55:72:42:cc:5e:
63:69:ef:3c:db:93:ce:4e:d8:d9:96:49:0a:1b:6b:69:a1:86:
a7:f2:67:42:eb:3e:37:e9:cb:97:73:3e:e0:f3:4a:65:5f:02:
d2:49:cb:9b:f6:af:e4:a8:0d:88:b5:46:29:e5:f2:55:86:6b:
95:77:f3:7b:28:86:81:ff:d3:8b:60:e7:81:2c:d5:bf:6a:d0:
57:0e:9f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:06:47 2025 by rpki-client