Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/BcEwr1j85GQdNM0BSJkW3Dhxxfg.roa
File: BcEwr1j85GQdNM0BSJkW3Dhxxfg.roa (raw, json)
Hash identifier: V7GTuMwEQdI96xWzVoroU4d0Fc1cgoqIfOSHSaa/vzY=
Subject key identifier: 05:C1:30:AF:58:FC:E4:64:1D:34:CD:01:48:99:16:DC:38:71:C5:F8
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018DF86115911808FB3DDE16F01595925CD4
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/BcEwr1j85GQdNM0BSJkW3Dhxxfg.roa
Signing time: Fri 01 Mar 2024 04:58:48 +0000
ROA not before: Fri 01 Mar 2024 04:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 37.49.150.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 04:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f8:61:15:91:18:08:fb:3d:de:16:f0:15:95:92:5c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Mar 1 04:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05c130af58fce4641d34cd01489916dc3871c5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:97:8a:c5:15:65:e8:ac:2b:77:57:0b:0e:e4:
af:c4:bf:bd:ca:3f:a8:70:2d:26:70:09:fc:c6:55:
c9:90:19:e2:14:32:6d:1b:d5:40:4d:99:93:21:fb:
f5:4e:4f:7b:8e:6d:b1:aa:19:bc:2e:ee:b4:b1:6a:
10:6b:21:91:ba:20:85:0d:2d:82:01:c2:42:64:e8:
7b:d8:48:6b:4d:c3:f9:d8:71:22:ff:da:47:58:d0:
52:df:be:87:73:fb:b5:ed:86:7a:5e:e4:f5:37:3f:
b3:42:8a:97:27:af:4a:6c:1b:de:da:fe:c2:44:19:
61:fd:e7:9b:74:94:9b:b8:09:54:0e:ce:53:a3:98:
b8:ea:66:01:61:6a:f0:38:41:cf:fe:c4:2b:43:64:
15:21:35:2c:8f:2d:7e:32:30:98:83:d5:14:4b:6e:
d4:7d:48:04:4e:f2:6e:8b:12:26:87:71:ff:d8:99:
d7:43:84:6a:03:d0:7d:cb:c9:42:07:1d:e0:97:26:
a5:98:1d:f9:d6:b4:ed:53:7c:2e:1d:f1:5e:30:55:
d3:f1:02:16:ff:9a:13:26:9f:a6:2e:b1:c3:ab:47:
c1:d7:1b:79:07:57:1f:9d:94:72:f6:15:20:c8:ce:
eb:b6:00:55:21:a9:9f:48:48:1c:19:8a:3d:7b:6b:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C1:30:AF:58:FC:E4:64:1D:34:CD:01:48:99:16:DC:38:71:C5:F8
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/BcEwr1j85GQdNM0BSJkW3Dhxxfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.150.0/24
176.46.143.0/24
176.46.146.0/24
Signature Algorithm: sha256WithRSAEncryption
91:11:71:ce:20:7e:c7:22:87:f0:41:9e:29:9c:f7:49:78:08:
18:14:d5:1d:6a:42:fa:ae:bb:41:3a:99:a1:ba:80:d6:53:01:
3c:8a:8c:a3:f1:46:02:f9:c6:45:66:83:8a:d9:41:93:fa:56:
97:09:7b:18:c0:ad:8a:b1:ac:26:61:1c:55:29:50:e5:b2:87:
9e:c7:75:7a:40:38:c5:b8:33:85:7e:64:c3:0a:6f:25:08:83:
ed:31:55:c7:92:07:2e:fd:02:98:4d:15:f3:a5:88:ae:7c:b4:
99:0a:76:82:89:96:27:41:90:47:e9:50:e0:ce:5c:15:85:1e:
fd:95:9b:42:83:fe:63:32:20:e1:2f:c6:b9:c8:07:61:e4:08:
26:39:e9:ec:f4:95:81:25:04:e5:f2:3d:aa:89:45:41:42:ce:
87:66:7b:48:e5:e2:4e:26:3f:74:a1:8f:ff:60:c9:b3:a8:96:
1a:39:8f:57:61:79:00:30:36:63:6e:08:d7:e6:43:22:eb:51:
fb:67:bc:3e:7e:fe:5d:a0:da:5b:12:32:0c:ce:78:12:41:e2:
91:96:b0:98:7f:5b:3d:9c:3a:fa:00:2f:ab:a0:48:23:9d:0f:
07:e3:71:5a:4b:aa:23:22:0c:e7:15:e2:ee:41:7c:2e:11:76:
35:24:41:1a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY34YRWRGAj7Pd4W8BWVklzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjQwMzAxMDQ1ODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWMxMzBhZjU4ZmNlNDY0MWQzNGNkMDE0ODk5MTZkYzM4NzFjNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpeKxRVl6Kwrd1cLDuSvxL+9yj+o
cC0mcAn8xlXJkBniFDJtG9VATZmTIfv1Tk97jm2xqhm8Lu60sWoQayGRuiCFDS2C
AcJCZOh72EhrTcP52HEi/9pHWNBS376Hc/u17YZ6XuT1Nz+zQoqXJ69KbBve2v7C
RBlh/eebdJSbuAlUDs5To5i46mYBYWrwOEHP/sQrQ2QVITUsjy1+MjCYg9UUS27U
fUgETvJuixImh3H/2JnXQ4RqA9B9y8lCBx3glyalmB351rTtU3wuHfFeMFXT8QIW
/5oTJp+mLrHDq0fB1xt5B1cfnZRy9hUgyM7rtgBVIamfSEgcGYo9e2th3wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAXBMK9Y/ORkHTTNAUiZFtw4ccX4MB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvQmNFd3Ixajg1R1FkTk0wQlNKa1czRGh4eGZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJTGWAwQA
sC6PAwQAsC6SMA0GCSqGSIb3DQEBCwUAA4IBAQCREXHOIH7HIofwQZ4pnPdJeAgY
FNUdakL6rrtBOpmhuoDWUwE8ioyj8UYC+cZFZoOK2UGT+laXCXsYwK2KsawmYRxV
KVDlsoeex3V6QDjFuDOFfmTDCm8lCIPtMVXHkgcu/QKYTRXzpYiufLSZCnaCiZYn
QZBH6VDgzlwVhR79lZtCg/5jMiDhL8a5yAdh5AgmOens9JWBJQTl8j2qiUVBQs6H
ZntI5eJOJj90oY//YMmzqJYaOY9XYXkAMDZjbgjX5kMi61H7Z7w+fv5doNpbEjIM
zngSQeKRlrCYf1s9nDr6AC+roEgjnQ8H43FaS6ojIgznFeLuQXwuEXY1JEEa
-----END CERTIFICATE-----
Generated at Tue Jun 17 23:01:05 2025 by rpki-client