Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/BWZMVXvbhh82aN4aBIE_louYWt4.roa
File: BWZMVXvbhh82aN4aBIE_louYWt4.roa (raw, json)
Hash identifier: aUsT5YdFHJAPzezvIrkodLLH7O+1sStZgS5Hg7kCGNA=
Subject key identifier: 05:66:4C:55:7B:DB:86:1F:36:68:DE:1A:04:81:3F:96:8B:98:5A:DE
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B8C932CD276110FB8EEC2F211A54B866
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/BWZMVXvbhh82aN4aBIE_louYWt4.roa
Signing time: Sat 28 Jun 2025 23:04:42 +0000
ROA not before: Sat 28 Jun 2025 23:04:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
2001:67c:64:ffff:0:197:b8c8:c191/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 28 Jun 2025 23:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c9:32:cd:27:61:10:fb:8e:ec:2f:21:1a:54:b8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 28 23:04:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05664c557bdb861f3668de1a04813f968b985ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:9b:23:75:63:4a:ea:dd:d7:29:65:22:2b:
05:b0:cd:08:51:74:a6:b5:a3:f0:11:ba:28:58:8b:
68:a8:79:2e:ea:89:a7:fb:44:91:70:29:58:1f:aa:
0e:0d:8c:e3:57:7c:44:9e:da:43:62:e0:d8:7c:97:
91:00:e7:c8:05:3d:eb:ec:77:a7:f2:96:27:da:b1:
47:9e:da:bd:16:37:4d:1c:7a:72:95:e4:c0:2a:98:
75:be:9b:73:cb:89:83:88:1b:59:77:80:2f:e4:7a:
07:cd:4d:30:bf:c6:b3:4c:fd:61:bb:91:cf:12:07:
fa:cb:ca:65:4f:c2:de:1d:81:f5:96:1e:db:86:ca:
a8:7b:62:07:54:cd:ba:9e:62:42:4b:0f:76:ee:57:
dd:a7:23:b9:d1:f4:2b:cf:a0:37:45:b8:da:7f:0a:
e5:ae:81:ab:f8:17:12:b0:09:54:50:06:d6:3d:79:
56:95:55:03:7f:17:65:0e:ed:19:f5:ed:0b:81:ed:
5c:aa:c1:52:cd:a4:56:dd:34:25:5b:50:bf:ac:49:
ef:5d:cb:c1:c4:1c:e5:07:55:b1:72:73:48:a4:fb:
8c:6b:a3:27:66:86:89:de:da:f2:26:37:de:c6:44:
50:10:03:b1:f6:8f:dd:b6:92:1d:1b:f6:cd:37:52:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:66:4C:55:7B:DB:86:1F:36:68:DE:1A:04:81:3F:96:8B:98:5A:DE
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/BWZMVXvbhh82aN4aBIE_louYWt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
2001:67c:64:ffff:0:197:b8c8:c191/128
Signature Algorithm: sha256WithRSAEncryption
1b:bb:cb:c6:6c:15:e4:ef:ce:c8:06:ae:53:f3:dd:e5:15:b2:
aa:cf:4e:d6:b3:89:49:79:d7:eb:ce:3c:ec:4d:18:62:6a:5a:
5e:75:7e:69:c7:4b:8b:ae:fd:47:92:79:cb:39:ee:94:a1:65:
35:3a:e1:fd:a3:7e:c6:54:40:03:9b:99:45:7a:68:3f:e5:47:
25:b9:10:86:d5:39:cd:3c:62:e9:0d:d3:53:d0:d5:7b:c8:f1:
51:11:fb:b8:68:fb:c0:ab:15:96:28:c8:f8:83:29:67:20:84:
7f:6f:68:2a:b7:9a:2b:30:a0:51:49:11:29:34:82:dd:59:b5:
e3:69:38:98:1f:22:09:14:05:2c:73:58:2c:64:77:76:c5:f7:
2a:b3:4d:f6:50:26:08:81:22:6b:bf:41:e8:10:82:aa:ac:33:
f9:07:8e:ee:d8:d2:62:ce:98:d3:43:93:9e:00:07:85:f0:f3:
ac:bf:45:be:b0:07:85:b1:fd:a8:41:a7:fc:5a:0f:d6:4a:08:
0e:78:bd:dd:d8:cf:57:b3:60:e0:be:50:cf:d3:13:76:bc:95:
66:a3:33:25:54:d1:ac:97:9c:2e:5b:4b:d9:3e:88:0b:4e:7d:
e9:f6:e7:94:dd:cc:38:b7:f1:b7:c4:34:a9:23:16:60:4f:68:
7d:7d:63:d6
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZe4yTLNJ2EQ+47sLyEaVLhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjUwNjI4MjMwNDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTY2NGM1NTdiZGI4NjFmMzY2OGRlMWEwNDgxM2Y5NjhiOTg1YWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZObI3VjSurd1yllIisFsM0IUXSm
taPwEbooWItoqHku6omn+0SRcClYH6oODYzjV3xEntpDYuDYfJeRAOfIBT3r7Hen
8pYn2rFHntq9FjdNHHpyleTAKph1vptzy4mDiBtZd4Av5HoHzU0wv8azTP1hu5HP
Egf6y8plT8LeHYH1lh7bhsqoe2IHVM26nmJCSw927lfdpyO50fQrz6A3Rbjafwrl
roGr+BcSsAlUUAbWPXlWlVUDfxdlDu0Z9e0Lge1cqsFSzaRW3TQlW1C/rEnvXcvB
xBzlB1WxcnNIpPuMa6MnZoaJ3tryJjfexkRQEAOx9o/dtpIdG/bNN1Iq6QIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFAVmTFV724YfNmjeGgSBP5aLmFreMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvQldaTVZYdmJoaDgyYU40YUJJRV9sb3VZV3Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGXaFF4nAMRACABBnwAZP//AAABl7jIwZEwDQYJKoZIhvcNAQELBQADggEB
ABu7y8ZsFeTvzsgGrlPz3eUVsqrPTtaziUl51+vOPOxNGGJqWl51fmnHS4uu/UeS
ecs57pShZTU64f2jfsZUQAObmUV6aD/lRyW5EIbVOc08YukN01PQ1XvI8VER+7ho
+8CrFZYoyPiDKWcghH9vaCq3miswoFFJESk0gt1ZteNpOJgfIgkUBSxzWCxkd3bF
9yqzTfZQJgiBImu/QegQgqqsM/kHju7Y0mLOmNNDk54AB4Xw86y/Rb6wB4Wx/ahB
p/xaD9ZKCA54vd3Yz1ezYOC+UM/TE3a8lWajMyVU0ayXnC5bS9k+iAtOfen255Td
zDi38bfENKkjFmBPaH19Y9Y=
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:54:28 2025 by rpki-client