Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/bsmhjeCWAD8nnqX8mie39UDAcsM.roa
File: bsmhjeCWAD8nnqX8mie39UDAcsM.roa (raw, json)
Hash identifier: qa/dLOIY6EDhy3QZc/Oyk3Xw4fcaG5wxOKm3cOSsEIA=
Subject key identifier: 6E:C9:A1:8D:E0:96:00:3F:27:9E:A5:FC:9A:27:B7:F5:40:C0:72:C3
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 01973A11D99580D9873B393681C5789CB922
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/bsmhjeCWAD8nnqX8mie39UDAcsM.roa
Signing time: Wed 04 Jun 2025 08:32:17 +0000
ROA not before: Wed 04 Jun 2025 08:32:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 46.254.48.0/24 maxlen: 24
46.254.49.0/24 maxlen: 24
46.254.50.0/24 maxlen: 24
46.254.51.0/24 maxlen: 24
46.254.52.0/24 maxlen: 24
46.254.53.0/24 maxlen: 24
46.254.54.0/24 maxlen: 24
46.254.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 11:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:11:d9:95:80:d9:87:3b:39:36:81:c5:78:9c:b9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Jun 4 08:32:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ec9a18de096003f279ea5fc9a27b7f540c072c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:ca:6b:10:8c:e3:3a:80:57:9a:47:65:0b:
cc:97:14:53:72:3a:1d:e6:90:bb:b7:fe:46:ec:08:
90:3f:d1:ec:b0:93:3e:7b:21:fd:d0:20:86:7d:89:
35:97:8b:78:f6:6d:06:e7:4d:a8:e8:94:68:c3:be:
74:74:a0:ed:bc:c5:94:64:84:60:73:0f:ca:c3:3e:
19:e6:ab:44:cc:0d:48:a5:41:77:3e:57:ac:e6:c9:
b0:24:6c:bc:6f:1c:c6:14:eb:43:e3:ac:9d:14:df:
0c:48:22:a6:20:61:30:22:aa:23:42:4f:fe:d9:83:
be:e6:41:31:23:6d:2b:97:98:6e:60:2a:cd:15:32:
39:61:cd:0b:f3:99:d0:02:6c:2f:8f:c1:80:86:6b:
38:c6:d2:58:eb:af:e3:b1:84:67:c1:9b:f9:58:d8:
08:66:ed:17:a8:6f:ac:7a:31:e0:0f:b5:3f:4f:2c:
de:c2:f8:6e:c7:7c:b1:04:13:00:c5:bf:98:14:bc:
63:2a:c0:49:f1:18:97:71:25:17:73:e5:86:86:8c:
4a:df:85:69:df:ce:b9:f0:08:14:15:8d:05:e6:37:
cf:1b:17:be:68:96:82:3d:4c:31:1d:aa:c9:a8:09:
5e:8e:d3:dd:0e:55:21:b9:58:7f:2a:98:f3:02:08:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C9:A1:8D:E0:96:00:3F:27:9E:A5:FC:9A:27:B7:F5:40:C0:72:C3
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/bsmhjeCWAD8nnqX8mie39UDAcsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.48.0/21
Signature Algorithm: sha256WithRSAEncryption
c7:4e:c3:90:cc:c7:e6:07:e7:2e:40:8b:1c:5c:5f:ad:66:74:
4b:bc:54:87:45:6b:85:89:e9:35:a2:55:92:87:48:92:9b:e4:
a8:d3:35:02:3f:75:ed:ea:58:b2:91:87:e6:fd:a5:47:4b:e1:
a4:bf:7a:52:d3:90:2d:1b:a9:39:d4:1e:d5:ea:a9:9a:49:53:
88:93:72:c5:e8:cf:fd:0a:76:b1:e5:03:77:30:58:6e:12:37:
84:ec:5c:7f:14:df:13:3e:4f:3c:0d:c3:4b:b3:df:a7:d9:33:
e0:3b:54:11:82:bf:fb:c2:ff:c7:8b:0d:61:a1:05:3f:e5:ee:
1c:04:94:9c:05:46:28:b2:fe:d4:41:62:97:50:d1:86:25:1c:
4c:f4:f5:07:64:39:6c:99:2d:85:c9:3c:aa:ab:fd:55:67:ee:
86:c8:cf:39:ef:10:28:e7:95:06:6b:f7:62:33:09:5d:bf:96:
69:74:98:cf:25:dc:58:3b:c6:a0:2c:c7:13:d5:eb:4a:46:21:
45:63:45:4e:f4:cb:62:c9:bb:e9:cb:b6:43:43:d1:ba:a9:f6:
3f:95:94:f1:31:db:c7:cf:16:87:eb:8f:40:41:a0:67:63:2b:
a0:41:f2:e0:c6:ad:ff:24:84:b1:2c:e5:88:a6:da:6d:7e:db:
f7:3b:76:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZc6EdmVgNmHOzk2gcV4nLkiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YjUxMzRiMTFmOTQwOTExZjBmZjMxNWM5NDhkYWE1M2Y3
MzJlZTAwHhcNMjUwNjA0MDgzMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWM5YTE4ZGUwOTYwMDNmMjc5ZWE1ZmM5YTI3YjdmNTQwYzA3MmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaDKaxCM4zqAV5pHZQvMlxRTcjod
5pC7t/5G7AiQP9HssJM+eyH90CCGfYk1l4t49m0G502o6JRow750dKDtvMWUZIRg
cw/Kwz4Z5qtEzA1IpUF3Ples5smwJGy8bxzGFOtD46ydFN8MSCKmIGEwIqojQk/+
2YO+5kExI20rl5huYCrNFTI5Yc0L85nQAmwvj8GAhms4xtJY66/jsYRnwZv5WNgI
Zu0XqG+sejHgD7U/Tyzewvhux3yxBBMAxb+YFLxjKsBJ8RiXcSUXc+WGhoxK34Vp
38658AgUFY0F5jfPGxe+aJaCPUwxHarJqAlejtPdDlUhuVh/KpjzAghp3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG7JoY3glgA/J56l/Jont/VAwHLDMB8GA1UdIwQY
MBaAFHm1E0sR+UCRHw/zFclI2qU/cy7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYt
Y2VjMjJlYTc5NTEzLzEvYnNtaGplQ1dBRDhubnFYOG1pZTM5VURBY3NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYtY2VjMjJlYTc5NTEz
LzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLv4wMA0G
CSqGSIb3DQEBCwUAA4IBAQDHTsOQzMfmB+cuQIscXF+tZnRLvFSHRWuFiek1olWS
h0iSm+So0zUCP3Xt6liykYfm/aVHS+Gkv3pS05AtG6k51B7V6qmaSVOIk3LF6M/9
Cnax5QN3MFhuEjeE7Fx/FN8TPk88DcNLs9+n2TPgO1QRgr/7wv/Hiw1hoQU/5e4c
BJScBUYosv7UQWKXUNGGJRxM9PUHZDlsmS2FyTyqq/1VZ+6GyM857xAo55UGa/di
Mwldv5ZpdJjPJdxYO8agLMcT1etKRiFFY0VO9Mtiybvpy7ZDQ9G6qfY/lZTxMdvH
zxaH649AQaBnYyugQfLgxq3/JISxLOWIptptftv3O3Z1
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:59:26 2025 by rpki-client