Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/BOPtzd61oRmyYV3nTFyO5cypcr0.roa
File: BOPtzd61oRmyYV3nTFyO5cypcr0.roa (raw, json)
Hash identifier: dh6CG1dMctwpuTkTfzBF6ajPqSyy3TFcPPvBxP8svSI=
Subject key identifier: 04:E3:ED:CD:DE:B5:A1:19:B2:61:5D:E7:4C:5C:8E:E5:CC:A9:72:BD
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01975918F77E0000D2AD84565D27B9380F64
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/BOPtzd61oRmyYV3nTFyO5cypcr0.roa
Signing time: Tue 10 Jun 2025 09:08:17 +0000
ROA not before: Tue 10 Jun 2025 09:08:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20973
IP address blocks: 185.254.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 15:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:18:f7:7e:00:00:d2:ad:84:56:5d:27:b9:38:0f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jun 10 09:08:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04e3edcddeb5a119b2615de74c5c8ee5cca972bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:b2:f2:31:ca:44:60:27:80:be:43:f5:06:
95:6a:10:c8:f6:1c:9a:55:bf:11:7a:e5:9d:a3:9e:
8a:db:9f:96:f7:97:65:d5:b8:4e:d4:53:2f:9d:dd:
e9:85:55:5c:a0:e5:f9:49:0c:81:e6:50:bf:70:10:
4c:06:99:66:5b:e1:0a:47:bf:bc:a9:1b:19:f3:ef:
80:19:29:90:b3:67:5e:76:83:e2:6f:12:80:ad:7b:
4f:f4:7e:60:0c:9b:84:18:0a:ed:e7:5e:f2:dc:c3:
d7:b0:f5:95:54:b2:e0:d2:38:34:b3:5c:80:3a:28:
b2:e3:7a:27:30:29:56:f9:96:c9:28:4d:a3:6a:59:
90:3c:ca:01:bd:6c:99:9f:80:68:a9:0f:77:d2:ba:
51:87:75:9a:0f:0e:5f:0c:06:3f:e5:71:94:00:d7:
f3:08:20:7a:f0:5b:67:43:5a:05:11:91:e6:2b:ac:
0d:20:fa:e5:67:70:6c:1f:71:8c:ce:1b:17:ac:42:
18:62:0f:a6:f8:95:aa:42:c8:d7:cd:59:3f:e8:01:
53:63:0a:9f:82:39:4d:50:4f:da:0a:68:dd:12:f5:
d1:28:7a:e5:18:74:ef:27:c4:00:57:6d:ec:27:b1:
e5:d4:fa:1a:e3:47:1d:6e:ea:33:21:30:a2:82:f6:
6f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E3:ED:CD:DE:B5:A1:19:B2:61:5D:E7:4C:5C:8E:E5:CC:A9:72:BD
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/BOPtzd61oRmyYV3nTFyO5cypcr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
65:24:c3:41:3f:c9:16:c1:11:05:b5:58:e4:ca:8f:5c:9b:1a:
10:1a:dd:aa:94:e0:12:0f:b3:d9:eb:9e:5c:d9:41:25:ea:0d:
e5:b5:71:e2:f8:14:fc:45:b6:99:78:bb:a0:a0:18:22:80:ca:
83:8a:00:b0:61:11:a1:a6:06:6f:c3:8b:95:48:00:d2:5c:69:
a6:bb:f3:e9:fd:a3:c8:12:35:44:69:dd:50:03:2e:0a:42:c8:
51:b0:da:33:f4:b7:b8:ff:0d:f9:4e:f3:2a:b7:7f:75:d5:ce:
96:11:e7:bf:a7:f9:8c:92:24:56:ea:2d:ac:71:12:4c:db:c4:
6d:20:78:57:d1:33:ab:d2:f2:60:f3:50:10:c3:01:7d:af:db:
ec:27:54:e8:b1:d8:9e:bf:2d:c9:b2:29:2b:14:c2:24:37:7d:
d2:d7:ef:c3:60:0e:4b:df:b3:ec:3b:0d:66:d6:90:89:26:8c:
87:64:f2:b8:56:a3:93:a9:d4:c9:fa:15:b2:fb:25:e9:33:8c:
56:8f:63:06:21:dc:02:1b:3c:76:ac:e4:1a:c0:71:6c:98:28:
5e:36:33:8f:fd:24:b4:84:ac:19:da:8c:87:c0:82:54:23:35:
9f:42:e5:6c:88:68:d3:ef:88:c2:20:6b:74:11:a3:d6:51:7a:
fe:12:d2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:10:54 2025 by rpki-client