Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BxZ-4Ee085vkRkV0nb45ossb39o.roa
File: BxZ-4Ee085vkRkV0nb45ossb39o.roa (raw, json)
Hash identifier: RpS7LcdrR436WEOWSxVstXs9uzfCwB68JyrJvRkv174=
Subject key identifier: 07:16:7E:E0:47:B4:F3:9B:E4:46:45:74:9D:BE:39:A2:CB:1B:DF:DA
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01956041837F8379C1ED92D1AC2AAC21380F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BxZ-4Ee085vkRkV0nb45ossb39o.roa
Signing time: Tue 04 Mar 2025 08:24:20 +0000
ROA not before: Tue 04 Mar 2025 08:24:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212220
IP address blocks: 192.176.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 10 Mar 2025 11:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:41:83:7f:83:79:c1:ed:92:d1:ac:2a:ac:21:38:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 4 08:24:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07167ee047b4f39be44645749dbe39a2cb1bdfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:42:c0:fa:a4:51:61:7c:b1:d0:54:41:d4:
09:14:72:aa:a0:12:60:1b:cc:48:bf:42:94:d7:7d:
37:13:61:1a:f4:93:21:2a:a7:a9:0d:5b:d8:d4:6a:
0f:a1:b6:e0:08:a2:64:a5:d5:64:38:17:9f:0c:4f:
03:d3:40:83:b8:8c:3b:42:bd:b7:f4:8b:24:b9:c2:
d9:3c:0f:ba:0f:92:00:53:bc:28:46:61:7f:40:ca:
b2:53:f3:df:3c:b0:3e:e0:6d:1f:56:3c:c2:1b:c6:
17:f3:b9:bb:47:e3:0f:a2:73:7c:ba:49:bb:ce:af:
a9:da:ac:27:c6:0c:b2:f0:dd:77:3e:d8:95:17:c4:
e6:c0:22:84:c2:5a:25:c5:84:6e:f4:bc:7c:9e:f8:
37:29:e7:ad:90:2c:63:6f:c0:c3:30:84:b7:28:0c:
ed:d2:98:fb:42:ad:8b:13:cc:77:4f:f5:d7:cd:7a:
09:ba:db:76:ae:b9:c5:92:b5:69:42:2d:c2:89:98:
ef:3a:18:17:f3:7e:61:07:e2:4b:50:ee:ff:9a:a8:
11:7d:d2:d6:af:57:eb:40:04:5e:4f:e1:af:fa:b3:
36:da:13:20:af:89:7d:f2:db:af:87:a8:01:2f:f2:
37:ec:16:18:bd:f7:e7:52:7c:7b:71:f4:d3:f5:02:
83:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:16:7E:E0:47:B4:F3:9B:E4:46:45:74:9D:BE:39:A2:CB:1B:DF:DA
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BxZ-4Ee085vkRkV0nb45ossb39o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.176.172.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:c4:32:3d:ed:16:cc:5f:e4:19:a5:dc:cf:4e:10:f6:2b:c9:
42:0d:d3:ad:1d:b2:39:46:41:ce:88:12:70:b1:ec:2f:04:36:
4f:ad:fe:82:6f:ed:aa:6d:11:b0:2c:c9:81:48:40:db:45:8f:
99:53:59:b8:aa:67:a9:47:e7:f4:29:e8:97:60:ab:08:a5:7c:
97:3c:3d:6d:db:01:d1:48:86:76:a2:68:5c:48:1d:f2:88:40:
4c:48:bd:92:d4:c5:d5:4b:7a:41:09:9a:d9:8e:2f:b2:ec:f4:
95:93:bd:a8:a4:96:fd:10:7a:eb:b7:70:0c:8e:59:76:f1:fb:
d3:4e:2a:1d:f1:b9:e9:db:c9:94:22:14:63:c9:96:ef:ee:0e:
9e:b3:03:2f:2a:f6:2b:5a:81:d9:c3:97:0d:ed:8d:45:8c:5c:
6c:22:e0:00:9f:81:92:14:8d:08:ed:73:0b:12:1f:9c:86:5f:
a4:a2:b0:0b:cd:fb:72:65:3c:cf:a4:03:f3:81:d5:c4:41:28:
5c:e7:95:a1:05:c2:3f:dd:fe:75:52:af:03:bc:32:d6:50:2d:
db:23:f5:91:c3:d0:ee:68:84:d2:e6:44:75:24:a5:c0:c3:71:
c0:8b:72:35:ce:a1:2a:43:66:01:64:84:60:1f:4f:56:cd:30:
87:fb:fb:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVgQYN/g3nB7ZLRrCqsITgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMzA0MDgyNDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzE2N2VlMDQ3YjRmMzliZTQ0NjQ1NzQ5ZGJlMzlhMmNiMWJkZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvANCwPqkUWF8sdBUQdQJFHKqoBJg
G8xIv0KU1303E2Ea9JMhKqepDVvY1GoPobbgCKJkpdVkOBefDE8D00CDuIw7Qr23
9IskucLZPA+6D5IAU7woRmF/QMqyU/PfPLA+4G0fVjzCG8YX87m7R+MPonN8ukm7
zq+p2qwnxgyy8N13PtiVF8TmwCKEwlolxYRu9Lx8nvg3KeetkCxjb8DDMIS3KAzt
0pj7Qq2LE8x3T/XXzXoJutt2rrnFkrVpQi3CiZjvOhgX835hB+JLUO7/mqgRfdLW
r1frQAReT+Gv+rM22hMgr4l98tuvh6gBL/I37BYYvffnUnx7cfTT9QKDrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAcWfuBHtPOb5EZFdJ2+OaLLG9/aMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvQnhaLTRFZTA4NXZrUmtWMG5iNDVvc3NiMzlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwLCsMA0G
CSqGSIb3DQEBCwUAA4IBAQAOxDI97RbMX+QZpdzPThD2K8lCDdOtHbI5RkHOiBJw
sewvBDZPrf6Cb+2qbRGwLMmBSEDbRY+ZU1m4qmepR+f0KeiXYKsIpXyXPD1t2wHR
SIZ2omhcSB3yiEBMSL2S1MXVS3pBCZrZji+y7PSVk72opJb9EHrrt3AMjll28fvT
Tiod8bnp28mUIhRjyZbv7g6eswMvKvYrWoHZw5cN7Y1FjFxsIuAAn4GSFI0I7XML
Eh+chl+korALzftyZTzPpAPzgdXEQShc55WhBcI/3f51Uq8DvDLWUC3bI/WRw9Du
aITS5kR1JKXAw3HAi3I1zqEqQ2YBZIRgH09WzTCH+/t7
-----END CERTIFICATE-----
Generated at Wed Apr 23 00:54:14 2025 by rpki-client