Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BwjIYF3Jp8-e0L6-DxXcCFahN4A.roa
File: BwjIYF3Jp8-e0L6-DxXcCFahN4A.roa (raw, json)
Hash identifier: cRQ7cboAvYVnsYLG9Yo868ZGHCj6WyF8ryM3BWGfybM=
Subject key identifier: 07:08:C8:60:5D:C9:A7:CF:9E:D0:BE:BE:0F:15:DC:08:56:A1:37:80
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824C09626CDD0D80CA6FD639A6DBF81
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BwjIYF3Jp8-e0L6-DxXcCFahN4A.roa
Signing time: Thu 02 Jan 2025 17:51:24 +0000
ROA not before: Thu 02 Jan 2025 17:51:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213323
IP address blocks: 79.110.50.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 13:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:c0:96:26:cd:d0:d8:0c:a6:fd:63:9a:6d:bf:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0708c8605dc9a7cf9ed0bebe0f15dc0856a13780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:2a:2e:aa:bd:c5:23:5d:d1:a0:10:ca:0e:
58:42:5e:90:29:2d:08:d3:7e:b2:a9:41:83:91:d6:
41:14:ea:78:f8:a2:fb:29:74:52:cb:42:b2:80:a9:
a7:bf:b8:8e:7f:8d:d4:56:e9:ea:81:d8:b0:10:e6:
ab:46:b0:06:58:17:14:07:b8:d0:72:73:19:f0:1a:
cd:45:29:ed:0b:23:54:50:16:fb:0c:ab:fb:61:e7:
43:81:ad:a9:b3:25:d4:13:ba:e1:68:26:e7:9c:38:
cb:ed:bb:83:cb:4b:51:97:35:22:c8:67:a7:0e:e2:
ae:1d:62:51:26:9c:ae:bc:cb:32:a4:eb:8a:da:6e:
24:dc:ca:ba:63:90:d8:db:7e:91:bd:80:f4:7b:6e:
a3:9f:42:ef:aa:46:83:d1:6e:2e:23:4f:bb:4d:bc:
3f:ec:50:02:b6:01:b2:2f:2e:58:b0:d5:fe:d4:a8:
d3:ca:e1:18:ba:9d:be:eb:c9:79:a5:8c:a0:9b:87:
43:a9:48:a6:2a:96:7e:1d:fb:2c:96:b4:b6:af:6b:
52:21:37:20:79:f5:a9:bf:b5:cf:ce:7d:e1:3a:11:
1b:87:29:35:bf:08:fc:a5:34:08:b5:24:42:ec:bb:
b5:4a:5b:3a:ab:2a:d7:cf:7e:41:aa:38:14:03:e0:
83:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:08:C8:60:5D:C9:A7:CF:9E:D0:BE:BE:0F:15:DC:08:56:A1:37:80
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BwjIYF3Jp8-e0L6-DxXcCFahN4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.50.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:27:75:4b:23:de:5b:2d:34:c9:f9:07:82:28:1d:4e:f8:de:
5a:3c:26:93:18:0c:12:37:83:c1:dc:79:67:63:fd:7b:a4:1f:
58:e3:48:92:20:77:cf:84:88:0c:67:ee:14:f6:79:86:03:53:
4c:b7:99:b6:99:3f:e1:de:cd:c9:1a:28:ef:b8:c7:a3:aa:28:
d8:3e:1d:46:80:49:43:26:2e:48:84:9f:e8:f5:2a:d0:0b:dc:
60:40:d8:a7:4f:a3:de:22:2a:37:1c:8b:23:3f:6b:c6:f7:65:
b0:a5:5b:d3:0e:de:84:0a:a7:7c:f4:7b:4f:da:f7:bb:a2:ce:
b1:e2:14:0d:fb:14:c7:4d:19:98:5f:79:c1:1c:6e:bd:90:5a:
24:0f:b9:3e:2d:8f:44:37:40:fb:c6:08:8e:a2:2b:ef:27:c9:
46:9a:4d:22:71:c1:38:da:24:97:15:85:d6:93:38:52:6e:ae:
31:5b:83:90:de:29:60:ec:a0:75:8a:8f:25:42:0f:45:04:bf:
54:ff:06:49:51:fa:2e:6f:20:dd:10:51:9f:6a:fa:72:7f:36:
97:41:af:50:54:bb:05:02:b1:1c:15:36:be:2e:1f:5a:b9:52:
14:20:1d:82:88:ea:22:83:c2:27:13:fa:1a:c3:69:1d:3c:57:
3e:34:d1:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJMCWJs3Q2Aym/WOabb+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzA4Yzg2MDVkYzlhN2NmOWVkMGJlYmUwZjE1ZGMwODU2YTEzNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubIqLqq9xSNd0aAQyg5YQl6QKS0I
036yqUGDkdZBFOp4+KL7KXRSy0KygKmnv7iOf43UVunqgdiwEOarRrAGWBcUB7jQ
cnMZ8BrNRSntCyNUUBb7DKv7YedDga2psyXUE7rhaCbnnDjL7buDy0tRlzUiyGen
DuKuHWJRJpyuvMsypOuK2m4k3Mq6Y5DY236RvYD0e26jn0LvqkaD0W4uI0+7Tbw/
7FACtgGyLy5YsNX+1KjTyuEYup2+68l5pYygm4dDqUimKpZ+HfsslrS2r2tSITcg
efWpv7XPzn3hOhEbhyk1vwj8pTQItSRC7Lu1Sls6qyrXz35BqjgUA+CDDQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAcIyGBdyafPntC+vg8V3AhWoTeAMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvQndqSVlGM0pwOC1lMEw2LUR4WGNDRmFoTjRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT24yAwQA
wjD6MA0GCSqGSIb3DQEBCwUAA4IBAQAtJ3VLI95bLTTJ+QeCKB1O+N5aPCaTGAwS
N4PB3HlnY/17pB9Y40iSIHfPhIgMZ+4U9nmGA1NMt5m2mT/h3s3JGijvuMejqijY
Ph1GgElDJi5IhJ/o9SrQC9xgQNinT6PeIio3HIsjP2vG92WwpVvTDt6ECqd89HtP
2ve7os6x4hQN+xTHTRmYX3nBHG69kFokD7k+LY9EN0D7xgiOoivvJ8lGmk0iccE4
2iSXFYXWkzhSbq4xW4OQ3ilg7KB1io8lQg9FBL9U/wZJUfoubyDdEFGfavpyfzaX
Qa9QVLsFArEcFTa+Lh9auVIUIB2CiOoig8InE/oaw2kdPFc+NNEb
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:19:50 2025 by rpki-client