Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/BwTVvX2aHPpJF-NWFDjUlE9RQ7E.roa
File: BwTVvX2aHPpJF-NWFDjUlE9RQ7E.roa (raw, json)
Hash identifier: Ht+Y624DiRDlMzwVA3O2erTNX6D+1CCQ9BAXFFY9d74=
Subject key identifier: 07:04:D5:BD:7D:9A:1C:FA:49:17:E3:56:14:38:D4:94:4F:51:43:B1
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 0196C9A0A45659A5A7ED7CCA38B28E7DEABB
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/BwTVvX2aHPpJF-NWFDjUlE9RQ7E.roa
Signing time: Tue 13 May 2025 12:31:10 +0000
ROA not before: Tue 13 May 2025 12:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25098
IP address blocks: 93.94.48.0/24 maxlen: 24
178.17.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 13:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:a0:a4:56:59:a5:a7:ed:7c:ca:38:b2:8e:7d:ea:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: May 13 12:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0704d5bd7d9a1cfa4917e3561438d4944f5143b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:15:86:04:00:57:bd:b5:4a:c4:0f:02:11:
c8:b7:4f:08:c8:f1:51:72:2f:98:01:58:b0:e6:95:
fa:3f:58:cb:ef:25:f3:1e:96:aa:df:e7:61:c8:f4:
f9:a9:ad:35:59:11:bc:32:5e:ff:78:ea:9d:a3:7d:
ec:62:5c:c0:b0:84:c9:0b:98:fc:c6:78:23:34:0b:
f2:01:b6:3f:0b:f7:37:a8:df:b8:74:1c:36:ad:50:
7a:e0:97:0f:9b:4e:f0:0d:c2:c9:4b:76:76:66:c0:
cb:4c:bf:a2:e1:91:bd:71:0e:b3:25:ce:6f:04:ab:
bb:0f:f3:9d:40:01:1d:e4:95:83:98:82:16:c3:61:
9f:74:9a:05:ea:b4:c9:37:2f:ec:21:50:26:f8:c2:
01:cc:a7:e1:e4:1e:30:33:df:84:37:b9:ad:78:a8:
5f:51:2a:c1:4a:91:73:41:7e:93:23:f7:16:ce:43:
30:f4:e6:6e:92:25:df:2b:05:13:16:2f:e6:49:e3:
f9:76:83:19:6e:29:92:d2:bd:59:a4:34:01:ed:84:
42:61:65:bf:f2:2a:e0:70:5d:96:80:ad:0b:0d:c0:
41:b6:ba:47:6e:37:16:1e:93:51:b5:0d:9d:4a:6a:
00:c4:29:67:1e:0b:5b:f6:6a:75:47:bc:5e:8d:3b:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:04:D5:BD:7D:9A:1C:FA:49:17:E3:56:14:38:D4:94:4F:51:43:B1
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/BwTVvX2aHPpJF-NWFDjUlE9RQ7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.48.0/24
178.17.48.0/24
Signature Algorithm: sha256WithRSAEncryption
41:73:ac:7d:25:3c:80:c1:33:3a:c8:f4:aa:f2:62:05:03:25:
4e:bc:11:d1:93:28:04:fa:21:b7:43:a5:cf:40:d4:fb:a6:4e:
5b:5e:26:e2:10:31:ce:51:dc:f8:6a:ae:47:7d:68:36:2f:e2:
94:72:fc:fb:ed:bc:7b:be:be:82:42:63:5f:8e:ea:20:d3:fe:
25:7a:2a:24:81:1d:85:2b:4d:86:70:45:ae:88:5a:e3:8a:7f:
61:24:8e:d4:ee:e9:c9:ea:df:43:bc:3e:04:fc:db:e4:d0:08:
fe:26:e0:2d:a1:6d:64:17:f6:0b:24:e9:fa:fd:b4:0b:71:7a:
63:0d:8f:83:47:0d:87:06:aa:f4:d9:cb:39:09:c5:34:d5:f6:
65:6e:c1:14:6e:4a:10:4a:2b:1d:78:e6:ef:06:0b:f4:39:85:
61:21:eb:bb:3b:3f:3b:f2:c4:65:5b:3a:07:f3:d3:9e:0f:f2:
a4:33:51:e4:11:e3:81:ff:bd:6c:b8:74:26:0c:55:15:eb:0a:
5e:f8:64:2e:aa:1d:4e:4c:a1:e7:f4:61:e2:3b:1f:08:d3:5e:
55:f1:43:90:bb:f6:b1:2c:74:00:06:92:e0:07:4e:f0:3f:93:
fa:c5:d2:64:d3:5c:9d:e2:ff:d9:d4:c6:4e:df:0d:70:39:02:
16:01:0d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:27:29 2025 by rpki-client