Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BDv8bRUjVLF40Z0NcraSL7JwTvE.roa
File: BDv8bRUjVLF40Z0NcraSL7JwTvE.roa (raw, json)
Hash identifier: WRiw2OAy92v2grgB7davtUnNlB36n3pLbkjzMsc48kw=
Subject key identifier: 04:3B:FC:6D:15:23:54:B1:78:D1:9D:0D:72:B6:92:2F:B2:70:4E:F1
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019570CBCF30F5A1AB89FC264C10CDD684FA
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BDv8bRUjVLF40Z0NcraSL7JwTvE.roa
Signing time: Fri 07 Mar 2025 13:29:19 +0000
ROA not before: Fri 07 Mar 2025 13:29:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.65.114.0/24 maxlen: 24
188.209.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 10:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:cb:cf:30:f5:a1:ab:89:fc:26:4c:10:cd:d6:84:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 7 13:29:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=043bfc6d152354b178d19d0d72b6922fb2704ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:22:b5:68:26:7c:d9:2e:9c:6d:c2:ab:09:
37:5e:af:a5:23:2b:51:8c:ae:51:b4:8b:76:49:b6:
c5:0d:27:6c:98:2a:98:95:d8:9e:a5:df:c8:c1:5b:
4a:42:9c:8c:0e:f2:71:f6:eb:e9:10:e1:e9:fe:28:
6a:49:e9:6e:68:0f:23:9e:68:c6:7c:01:72:1b:d6:
97:d7:e2:d1:bb:51:98:95:f8:62:a6:df:09:c4:ca:
06:fa:db:76:dd:3b:18:06:26:1d:f7:b8:f5:5a:7f:
68:3d:47:ac:2f:9f:a6:5f:cc:4a:c0:35:3f:23:df:
87:a2:a8:28:b8:15:1b:29:23:17:90:69:5a:ba:79:
04:1f:bf:c4:d2:b1:c6:3c:ac:c6:57:fd:15:07:e8:
47:f0:6c:8b:0e:b0:57:ae:78:c6:d5:7e:a7:64:2c:
26:0d:34:b0:d1:08:8a:40:ef:53:0c:3e:d6:fe:e1:
21:b5:b2:e0:fa:5a:fc:b6:e8:8c:7a:d2:d8:c5:03:
34:0e:e9:90:53:7c:17:b0:e2:f4:d1:16:b7:47:c5:
1f:58:78:13:d9:db:4e:f4:d6:86:90:2e:64:cd:e9:
18:8e:9f:39:53:3f:01:a7:b9:eb:8d:32:5a:27:39:
d1:0e:6d:4b:4d:78:17:02:08:9a:b5:42:db:97:6d:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3B:FC:6D:15:23:54:B1:78:D1:9D:0D:72:B6:92:2F:B2:70:4E:F1
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BDv8bRUjVLF40Z0NcraSL7JwTvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.114.0/24
188.209.130.0/24
Signature Algorithm: sha256WithRSAEncryption
16:36:8c:7c:82:6a:7c:32:96:8e:04:f8:8a:0c:d3:f9:92:94:
b6:3d:9b:23:99:2f:2f:7b:29:a9:27:eb:dd:be:cb:d4:81:26:
86:45:29:88:99:36:fe:b9:47:8a:8c:c3:1c:22:36:ab:bf:57:
f8:99:d3:fc:f8:a2:f7:32:4e:27:23:97:07:de:32:6b:a4:59:
8d:4b:60:26:21:20:af:15:65:14:03:16:e0:a0:ac:5c:9a:e9:
96:52:3c:82:f7:a6:cc:c7:b4:3c:87:04:43:a9:c9:b7:0a:ff:
28:b3:65:86:53:24:56:46:46:24:2b:e7:5f:3f:02:40:28:25:
bd:69:03:a4:08:80:d6:d5:0e:15:42:33:99:e3:81:46:db:76:
a9:c1:fe:57:c8:b4:36:4d:b7:4b:6f:91:b7:eb:35:75:90:d1:
e9:d5:60:80:cf:7a:70:97:4f:61:5d:5f:68:bd:8e:21:27:91:
f8:47:5a:67:f2:37:48:26:c6:7d:b7:d3:64:35:82:21:38:9d:
30:7c:a8:85:eb:b3:50:54:34:32:9c:b8:52:25:6b:9e:f5:2f:
8f:1e:09:60:90:19:02:ea:46:b8:b2:bc:e8:95:87:f6:b7:b8:
44:8e:4c:c7:0e:4a:17:b6:6e:6d:69:47:13:c9:01:2a:49:7a:
bb:7a:96:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:36:02 2025 by rpki-client