Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/bQAmIe96VqX02XK0O6AxfY1NaWM.roa
File: bQAmIe96VqX02XK0O6AxfY1NaWM.roa (raw, json)
Hash identifier: bIAKqRUrK70pUulw/215JaxBRkdKy3LyWg3au6fiQBc=
Subject key identifier: 6D:00:26:21:EF:7A:56:A5:F4:D9:72:B4:3B:A0:31:7D:8D:4D:69:63
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019759D59185567C730D5087E4FACAFCCAD4
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/bQAmIe96VqX02XK0O6AxfY1NaWM.roa
Signing time: Tue 10 Jun 2025 12:34:17 +0000
ROA not before: Tue 10 Jun 2025 12:34:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 194.15.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jun 2025 13:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:d5:91:85:56:7c:73:0d:50:87:e4:fa:ca:fc:ca:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Jun 10 12:34:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d002621ef7a56a5f4d972b43ba0317d8d4d6963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:b5:ee:4f:3f:94:3b:ad:3d:bc:a6:4d:71:
05:e4:8a:51:29:12:cb:06:c4:0e:a0:eb:17:85:75:
7d:27:c9:12:c1:de:e3:97:6c:30:54:12:5d:31:6c:
91:f9:09:1f:51:46:fb:73:09:64:df:c7:65:00:2d:
1f:f8:17:5e:65:a2:de:2b:2a:e0:82:68:8b:d3:da:
c7:c6:6f:e7:cc:94:80:97:fb:31:0d:74:e1:73:f1:
c4:b3:da:0c:7f:c7:1a:61:eb:26:f3:9e:7e:2c:53:
91:79:26:cd:92:68:78:ab:e5:43:5e:26:36:81:d6:
98:d4:f8:4d:ea:8f:c4:96:43:15:26:dd:6b:50:ba:
80:fb:0a:38:48:02:c0:73:da:59:9b:48:de:f8:85:
4c:e2:31:c6:b1:18:f3:a5:02:06:0a:07:ca:97:86:
d2:b0:e4:c7:df:c7:74:02:f6:a3:f8:ca:73:02:ee:
94:ae:16:e8:d3:5b:9b:14:1f:d0:8c:08:4a:b2:bd:
9b:be:d9:97:68:6b:0b:40:5c:8c:d1:0d:38:ef:fe:
24:f8:72:a6:c5:60:30:1f:e7:e0:97:05:f2:ae:f4:
c6:96:4c:10:12:fc:b9:48:c7:c2:72:5c:95:ca:ff:
f8:68:76:b6:f7:ac:93:17:f9:12:6c:56:dc:10:0a:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:00:26:21:EF:7A:56:A5:F4:D9:72:B4:3B:A0:31:7D:8D:4D:69:63
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/bQAmIe96VqX02XK0O6AxfY1NaWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.98.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f0:bd:af:8f:b2:7f:2f:1d:06:39:c9:c4:38:f4:a5:00:b4:
3b:ef:7b:53:3a:9d:b9:a2:68:e5:73:fb:f4:55:10:e8:a5:ec:
82:3b:73:77:1a:ae:c1:4e:ca:af:da:cb:f9:11:96:01:34:48:
69:de:9d:ca:7c:dd:12:e6:81:40:d1:1f:2f:e5:e3:f6:dd:f9:
33:0f:00:94:0b:f8:da:c7:b9:52:35:4b:04:46:86:06:9b:84:
42:76:16:eb:15:ba:71:fe:c7:bf:c4:83:b9:ee:a5:90:c7:2c:
81:c4:65:a3:85:f2:48:de:a4:04:a6:bc:d6:df:b9:89:9a:b6:
30:4e:97:c0:d0:77:78:6e:ab:db:b5:60:a5:3b:18:1a:32:92:
b3:f9:5b:44:89:58:cf:c9:31:de:fb:b8:63:51:d8:86:26:7b:
c0:41:8e:a7:8c:78:a2:96:c6:51:1d:5d:67:7f:aa:8c:88:de:
f5:2d:d4:ab:5d:18:d6:36:23:89:b6:14:27:df:81:5c:a5:24:
05:78:59:38:94:9f:91:a7:eb:7e:0c:b6:a0:56:6c:78:a4:2b:
2f:29:97:3d:57:d5:1d:be:d4:9c:ac:c8:fc:a3:7d:25:23:18:
49:aa:a1:a7:fd:65:73:38:2b:16:e4:aa:92:ac:23:23:1a:06:
a8:a2:b0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:12:02 2025 by rpki-client