Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/BLFCmIIQVSw5xcOc_2xILilm9sg.roa
File: BLFCmIIQVSw5xcOc_2xILilm9sg.roa (raw, json)
Hash identifier: QaGqTZ31c5AMZlisZADDzrffH2QHuEgJipalK/waQfs=
Subject key identifier: 04:B1:42:98:82:10:55:2C:39:C5:C3:9C:FF:6C:48:2E:29:66:F6:C8
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0193866D4B70FC53F3FC975521C4CA319105
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/BLFCmIIQVSw5xcOc_2xILilm9sg.roa
Signing time: Mon 02 Dec 2024 08:12:09 +0000
ROA not before: Mon 02 Dec 2024 08:12:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204582
IP address blocks: 62.76.248.0/24 maxlen: 24
62.76.249.0/24 maxlen: 24
62.76.250.0/24 maxlen: 24
62.76.251.0/24 maxlen: 24
62.76.252.0/24 maxlen: 24
194.85.31.0/24 maxlen: 24
194.85.77.0/24 maxlen: 24
194.85.78.0/24 maxlen: 24
194.85.79.0/24 maxlen: 24
212.193.116.0/24 maxlen: 24
212.193.117.0/24 maxlen: 24
212.193.118.0/24 maxlen: 24
212.193.119.0/24 maxlen: 24
212.193.120.0/24 maxlen: 24
212.193.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 08:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:6d:4b:70:fc:53:f3:fc:97:55:21:c4:ca:31:91:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Dec 2 08:12:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04b142988210552c39c5c39cff6c482e2966f6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7c:ad:76:1a:6e:b9:1c:ca:d3:e2:85:86:93:
f0:47:8b:bc:d1:b6:0a:f7:67:a5:1e:14:61:73:9f:
bb:e8:9c:a5:b8:35:30:d2:29:c7:df:a1:21:e8:ba:
ef:81:eb:eb:da:91:ec:a7:ac:b9:9f:02:b3:27:0f:
f0:2b:05:d3:79:a7:ed:a2:b5:e9:01:04:06:e0:fc:
5b:50:69:0c:64:60:e5:e2:8f:7d:8e:3e:32:58:a6:
86:8f:fd:af:fd:31:ad:28:ac:f6:c8:af:e3:53:51:
3e:1b:10:c1:f2:02:89:10:3b:03:f6:40:02:b5:17:
2a:43:bc:bb:7b:16:04:7d:12:03:fd:d2:f7:69:d0:
6d:e4:bf:3c:6f:62:2f:c1:bb:b0:5d:80:a5:a7:66:
ad:9d:80:af:f0:78:ed:d8:24:53:0e:12:9b:8d:9c:
58:f6:ae:fd:38:f2:90:a3:46:ea:8e:eb:e6:61:4a:
96:5f:fa:3c:29:ce:8c:05:ed:9d:88:d2:09:13:b3:
b2:2c:d0:4b:35:07:19:6b:03:c1:c5:45:57:76:c4:
99:95:f0:18:7a:d2:11:fa:c8:ec:72:c1:c3:a2:3e:
fb:cc:8e:8d:e0:5c:40:8a:c8:b8:f5:28:5b:cd:6a:
9d:a7:21:2d:a4:19:68:3b:57:26:4d:81:c9:b6:ce:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B1:42:98:82:10:55:2C:39:C5:C3:9C:FF:6C:48:2E:29:66:F6:C8
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/BLFCmIIQVSw5xcOc_2xILilm9sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.248.0-62.76.252.255
194.85.31.0/24
194.85.77.0-194.85.79.255
212.193.116.0-212.193.120.255
212.193.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:50:2c:b2:6b:ce:f9:7d:55:8f:16:71:ba:50:e3:1e:ed:ca:
1a:4c:5a:14:d5:a8:71:4f:fe:c0:97:3c:62:77:67:47:e1:bf:
c1:ee:b7:49:ab:19:7e:6c:cb:02:2b:9a:86:52:2a:b3:1f:ed:
3d:bf:31:0c:36:d8:8e:47:2a:7a:0e:5d:1c:cc:fd:eb:d0:5b:
c8:6b:e2:02:99:36:be:31:e7:0f:a2:65:8a:53:48:b2:67:57:
bc:7b:b6:d2:35:69:e3:d5:e5:9f:7d:94:cb:bc:8d:69:28:10:
8c:a0:4f:c5:a7:02:3c:65:9e:40:14:44:42:79:2f:23:20:94:
48:40:af:b8:fb:09:3d:eb:8e:81:f8:af:2b:ed:5b:f4:e7:6e:
f2:26:8e:f9:1a:08:26:b7:f7:ba:20:1d:26:7b:d6:88:c7:d4:
73:aa:b0:b1:ff:27:f5:2e:e1:a0:77:4d:f0:c6:38:3a:f3:7a:
96:e2:d2:80:0e:e4:e7:75:c6:b3:24:1c:4f:79:1a:c6:66:07:
3d:d2:08:5a:d8:3b:28:03:0a:ef:33:30:cc:57:c6:c2:90:e2:
cb:ca:26:51:a3:0b:01:39:b9:33:03:34:ca:94:2f:9e:c5:a7:
3e:4c:36:76:8d:1c:04:26:94:ed:00:8e:58:d3:c6:b5:5d:4f:
07:34:77:4d
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZOGbUtw/FPz/JdVIcTKMZEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2
OTdhMDMwHhcNMjQxMjAyMDgxMjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGIxNDI5ODgyMTA1NTJjMzljNWMzOWNmZjZjNDgyZTI5NjZmNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XytdhpuuRzK0+KFhpPwR4u80bYK
92elHhRhc5+76JyluDUw0inH36Eh6Lrvgevr2pHsp6y5nwKzJw/wKwXTeaftorXp
AQQG4PxbUGkMZGDl4o99jj4yWKaGj/2v/TGtKKz2yK/jU1E+GxDB8gKJEDsD9kAC
tRcqQ7y7exYEfRID/dL3adBt5L88b2IvwbuwXYClp2atnYCv8Hjt2CRTDhKbjZxY
9q79OPKQo0bqjuvmYUqWX/o8Kc6MBe2diNIJE7OyLNBLNQcZawPBxUVXdsSZlfAY
etIR+sjscsHDoj77zI6N4FxAisi49ShbzWqdpyEtpBloO1cmTYHJts5ZJwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFASxQpiCEFUsOcXDnP9sSC4pZvbIMB8GA1UdIwQY
MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt
Njg4ZDMzM2VkOWQ1LzEvQkxGQ21JSVFWU3c1eGNPY18yeElMaWxtOXNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1
LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2MAwDBAM+TPgD
BAA+TPwDBADCVR8wDAMEAMJVTQMEBMJVQDAMAwQC1MF0AwQA1MF4AwQA1MF7MA0G
CSqGSIb3DQEBCwUAA4IBAQBNUCyya875fVWPFnG6UOMe7coaTFoU1ahxT/7Alzxi
d2dH4b/B7rdJqxl+bMsCK5qGUiqzH+09vzEMNtiORyp6Dl0czP3r0FvIa+ICmTa+
MecPomWKU0iyZ1e8e7bSNWnj1eWffZTLvI1pKBCMoE/FpwI8ZZ5AFERCeS8jIJRI
QK+4+wk9646B+K8r7Vv0527yJo75Gggmt/e6IB0me9aIx9RzqrCx/yf1LuGgd03w
xjg683qW4tKADuTndcazJBxPeRrGZgc90gha2DsoAwrvMzDMV8bCkOLLyiZRowsB
ObkzAzTKlC+exac+TDZ2jRwEJpTtAI5Y08a1XU8HNHdN
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:57:39 2025 by rpki-client