Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/RM5J8FDfrBaU1qCguf13iRHybfI.roa
File: RM5J8FDfrBaU1qCguf13iRHybfI.roa (raw, json)
Hash identifier: T1FfvgiIu7k0ITcgIsG2OYL1DHg9AWBUDm7dcHLAtcQ=
Subject key identifier: 44:CE:49:F0:50:DF:AC:16:94:D6:A0:A0:B9:FD:77:89:11:F2:6D:F2
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01955CCE02DB914CA0DFBFD630BE6AA46888
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/RM5J8FDfrBaU1qCguf13iRHybfI.roa
Signing time: Mon 03 Mar 2025 16:19:19 +0000
ROA not before: Mon 03 Mar 2025 16:19:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60223
IP address blocks: 193.68.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 13:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:ce:02:db:91:4c:a0:df:bf:d6:30:be:6a:a4:68:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Mar 3 16:19:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44ce49f050dfac1694d6a0a0b9fd778911f26df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:39:5f:cf:93:cb:14:48:a3:d7:99:88:51:
91:bd:01:de:08:29:90:ca:f7:6d:19:aa:ee:04:74:
b1:5a:8a:98:06:89:5e:40:04:09:a6:f5:7f:b2:7e:
c8:21:74:89:aa:d6:fb:b2:c9:ff:3d:f0:73:84:c3:
bd:6d:1f:fc:f5:98:43:90:d0:21:f6:50:f4:0d:0c:
a0:14:db:bf:ed:86:9f:ae:57:dc:83:75:b5:48:e9:
8d:8a:3c:aa:b6:c5:9e:f3:13:c9:d3:5e:b1:76:3a:
e1:38:ae:8f:6a:52:15:cc:2f:9c:0b:cc:19:94:02:
61:80:00:dd:ef:e8:17:2f:97:c9:01:3b:99:fb:44:
61:e5:40:70:18:3f:b4:f2:80:2a:86:72:3e:02:4c:
60:52:2b:79:61:c0:ee:17:26:76:22:f7:91:be:f4:
f5:e8:54:89:19:56:ae:f7:6d:39:99:30:b0:7d:19:
eb:7d:2d:bb:f0:14:d3:9a:b9:dc:69:2f:e2:9e:6f:
2d:b4:5e:a4:b8:2d:51:77:fc:10:b0:bb:1c:c2:f2:
6b:05:61:4d:03:5c:3c:ec:7b:1b:a1:2d:94:95:23:
cd:51:b5:33:43:cb:ec:32:a1:6b:82:d3:c1:be:75:
c3:d1:8c:3c:e9:bc:b2:d5:ca:b8:5f:4d:7f:52:9f:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CE:49:F0:50:DF:AC:16:94:D6:A0:A0:B9:FD:77:89:11:F2:6D:F2
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/RM5J8FDfrBaU1qCguf13iRHybfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.68.89.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ea:9f:de:d2:32:39:5a:62:a8:6a:bc:7a:7f:0c:1c:23:26:
3a:c8:9a:62:c0:a4:0e:82:69:a7:2f:df:e9:a9:bd:1c:f2:5d:
4f:9b:bf:dd:73:aa:83:4d:23:26:4d:ba:91:7b:41:10:a3:32:
17:c2:c4:b2:b2:5a:eb:2e:94:83:78:16:4b:5b:8a:6b:ac:17:
c6:21:52:71:45:0c:a3:9b:b4:05:f4:c2:16:c6:75:91:5a:ae:
c0:35:d5:21:46:c9:c5:9f:0c:f5:40:35:32:d3:cc:9e:27:59:
68:42:32:96:78:82:e0:23:2d:5c:9b:83:64:3f:dd:e8:c2:02:
69:2d:bd:6e:6b:e9:ae:3b:d2:62:fa:d2:14:c9:1e:fa:2e:c5:
eb:26:7a:2a:a9:10:a7:d2:e6:c4:7d:ce:4b:81:da:df:3b:57:
4c:1c:b7:6f:38:0b:d8:32:cc:f9:1b:49:71:67:02:fb:c7:a1:
f4:bd:74:6e:0b:cf:48:e1:cd:23:25:69:6e:01:9f:be:90:b1:
4d:79:c0:e5:38:1b:b1:cc:6b:ec:63:c6:bf:45:57:9e:31:3a:
4e:f0:02:7a:76:80:b3:90:c6:78:9d:26:8c:b6:90:6d:bf:a4:
99:04:13:7d:c2:c8:51:88:62:65:24:86:1e:98:f5:9a:bb:fa:
87:b3:26:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVczgLbkUyg37/WML5qpGiIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjUwMzAzMTYxOTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGNlNDlmMDUwZGZhYzE2OTRkNmEwYTBiOWZkNzc4OTExZjI2ZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsso5X8+TyxRIo9eZiFGRvQHeCCmQ
yvdtGaruBHSxWoqYBoleQAQJpvV/sn7IIXSJqtb7ssn/PfBzhMO9bR/89ZhDkNAh
9lD0DQygFNu/7Yafrlfcg3W1SOmNijyqtsWe8xPJ016xdjrhOK6PalIVzC+cC8wZ
lAJhgADd7+gXL5fJATuZ+0Rh5UBwGD+08oAqhnI+AkxgUit5YcDuFyZ2IveRvvT1
6FSJGVau9205mTCwfRnrfS278BTTmrncaS/inm8ttF6kuC1Rd/wQsLscwvJrBWFN
A1w87HsboS2UlSPNUbUzQ8vsMqFrgtPBvnXD0Yw86byy1cq4X01/Up+9oQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFETOSfBQ36wWlNagoLn9d4kR8m3yMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvUk01SjhGRGZyQmFVMXFDZ3VmMTNpUkh5YmZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwURZMA0G
CSqGSIb3DQEBCwUAA4IBAQA76p/e0jI5WmKoarx6fwwcIyY6yJpiwKQOgmmnL9/p
qb0c8l1Pm7/dc6qDTSMmTbqRe0EQozIXwsSyslrrLpSDeBZLW4prrBfGIVJxRQyj
m7QF9MIWxnWRWq7ANdUhRsnFnwz1QDUy08yeJ1loQjKWeILgIy1cm4NkP93owgJp
Lb1ua+muO9Ji+tIUyR76LsXrJnoqqRCn0ubEfc5LgdrfO1dMHLdvOAvYMsz5G0lx
ZwL7x6H0vXRuC89I4c0jJWluAZ++kLFNecDlOBuxzGvsY8a/RVeeMTpO8AJ6doCz
kMZ4nSaMtpBtv6SZBBN9wshRiGJlJIYemPWau/qHsyaC
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:26:44 2025 by rpki-client