Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bRG3CfMMhWT8LECk1suYZ3kC1ls.roa
File: bRG3CfMMhWT8LECk1suYZ3kC1ls.roa (raw, json)
Hash identifier: vg8fWya0nTFOJPa8CXMi/L5J2WY1MVnquq9L+wO1cYc=
Subject key identifier: 6D:11:B7:09:F3:0C:85:64:FC:2C:40:A4:D6:CB:98:67:79:02:D6:5B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195FADA5F5DF6FB58BF6CA6313DCD5BB71A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bRG3CfMMhWT8LECk1suYZ3kC1ls.roa
Signing time: Thu 03 Apr 2025 08:52:50 +0000
ROA not before: Thu 03 Apr 2025 08:52:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 217.60.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 10:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fa:da:5f:5d:f6:fb:58:bf:6c:a6:31:3d:cd:5b:b7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 3 08:52:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d11b709f30c8564fc2c40a4d6cb98677902d65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:34:26:e7:5c:1a:3b:14:ac:8e:77:df:f4:
56:d9:56:7c:af:1e:9f:fe:76:37:99:8e:69:64:cb:
8c:85:da:fe:ab:9e:97:60:8e:35:94:0a:fd:f3:02:
df:b5:2c:8e:82:43:f5:bb:12:d3:55:cc:4b:bb:73:
c4:7d:c6:81:5f:5a:e5:d4:62:b0:5d:c4:a1:e7:a2:
ae:07:ec:32:5a:8b:5b:df:0b:c0:f1:31:c0:6e:26:
6b:44:b4:02:9f:67:83:c1:b7:f9:fd:9d:e9:12:97:
dd:06:92:86:15:50:1e:d9:ab:d0:20:75:20:de:dc:
84:e0:4d:1b:fd:9d:2a:91:4c:bf:bf:28:40:ff:9a:
e1:b2:f2:87:27:30:54:4a:da:b2:81:7f:9a:74:d5:
c0:ac:ca:df:b8:b6:fd:6c:8c:eb:f6:41:26:ba:ae:
19:49:9d:7a:d4:2f:25:19:c3:22:40:2f:37:50:4f:
a7:71:f1:e3:7a:38:98:1c:aa:96:bc:03:1f:da:a1:
c6:41:34:53:29:09:b8:bc:ae:e7:57:b8:89:6c:a1:
d0:8b:7a:db:09:7e:3f:eb:74:19:78:49:8e:cf:b2:
87:24:70:92:ab:f1:d8:6d:44:82:9e:8c:06:2e:73:
d7:69:5a:08:cc:1b:28:ae:5f:39:41:35:e2:79:b5:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:11:B7:09:F3:0C:85:64:FC:2C:40:A4:D6:CB:98:67:79:02:D6:5B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bRG3CfMMhWT8LECk1suYZ3kC1ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:49:c7:2c:f6:ad:85:5f:08:28:33:74:95:26:b0:03:a3:95:
26:a4:72:fb:ab:c6:8a:e2:4d:ca:89:a1:58:a0:13:cc:c8:c6:
64:5c:b3:6d:78:1b:83:7c:cf:b3:7d:42:b1:99:8e:c0:d0:29:
53:4e:53:2c:81:39:c1:ac:5a:44:c6:03:dc:e8:91:c5:38:ee:
33:5c:60:a7:7f:a2:66:5d:4a:98:ed:40:89:a8:b2:4a:24:c0:
13:fb:e8:bf:44:3b:4c:c9:98:81:f2:64:75:aa:b7:67:a9:c9:
c7:ed:90:1c:75:c4:10:50:80:28:18:bb:0e:01:31:18:25:52:
ad:c3:33:0d:29:e5:c2:4e:e7:23:2b:8e:43:31:54:f6:9f:15:
18:4b:b0:6c:ad:bc:df:71:3b:db:42:56:e1:76:0e:38:de:ba:
cf:f4:10:af:b1:27:00:b0:bf:af:df:30:1c:4f:ee:b9:21:f2:
96:67:92:ab:ea:7f:09:3d:49:fb:f3:bc:58:0c:05:a9:1d:4e:
85:5f:46:5d:ea:bc:ae:c2:11:e0:ef:b9:5b:be:5d:8d:92:4e:
15:b4:27:41:d6:1b:d9:65:08:40:5a:4c:18:35:b4:c7:ff:5f:
9d:bf:db:42:2e:e7:ba:4e:c8:b2:92:d1:78:72:88:c8:ca:4e:
33:f3:27:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZX62l9d9vtYv2ymMT3NW7caMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDAzMDg1MjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDExYjcwOWYzMGM4NTY0ZmMyYzQwYTRkNmNiOTg2Nzc5MDJkNjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXI0JudcGjsUrI533/RW2VZ8rx6f
/nY3mY5pZMuMhdr+q56XYI41lAr98wLftSyOgkP1uxLTVcxLu3PEfcaBX1rl1GKw
XcSh56KuB+wyWotb3wvA8THAbiZrRLQCn2eDwbf5/Z3pEpfdBpKGFVAe2avQIHUg
3tyE4E0b/Z0qkUy/vyhA/5rhsvKHJzBUStqygX+adNXArMrfuLb9bIzr9kEmuq4Z
SZ161C8lGcMiQC83UE+ncfHjejiYHKqWvAMf2qHGQTRTKQm4vK7nV7iJbKHQi3rb
CX4/63QZeEmOz7KHJHCSq/HYbUSCnowGLnPXaVoIzBsorl85QTXiebUwFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG0RtwnzDIVk/CxApNbLmGd5AtZbMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYlJHM0NmTU1oV1Q4TEVDazFzdVlaM2tDMWxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Tz/MA0G
CSqGSIb3DQEBCwUAA4IBAQC3Sccs9q2FXwgoM3SVJrADo5UmpHL7q8aK4k3KiaFY
oBPMyMZkXLNteBuDfM+zfUKxmY7A0ClTTlMsgTnBrFpExgPc6JHFOO4zXGCnf6Jm
XUqY7UCJqLJKJMAT++i/RDtMyZiB8mR1qrdnqcnH7ZAcdcQQUIAoGLsOATEYJVKt
wzMNKeXCTucjK45DMVT2nxUYS7BsrbzfcTvbQlbhdg443rrP9BCvsScAsL+v3zAc
T+65IfKWZ5Kr6n8JPUn787xYDAWpHU6FX0Zd6ryuwhHg77lbvl2Nkk4VtCdB1hvZ
ZQhAWkwYNbTH/1+dv9tCLue6TsiyktF4cojIyk4z8yel
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:32:33 2025 by rpki-client