Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/Bcm_g9WWFX_874bnewA0x1gSZeo.roa
File: Bcm_g9WWFX_874bnewA0x1gSZeo.roa (raw, json)
Hash identifier: zdVxd81Y7RBjArvsFoOaXmsrSAEE38Fiexd9/xE57Q8=
Subject key identifier: 05:C9:BF:83:D5:96:15:7F:FC:EF:86:E7:7B:00:34:C7:58:12:65:EA
Certificate issuer: /CN=58e02f2ca81ab802939530156e9631b18f515840
Certificate serial: 01960170C595E77006F94D5F6BCB8A787A4D
Authority key identifier: 58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/Bcm_g9WWFX_874bnewA0x1gSZeo.roa
Signing time: Fri 04 Apr 2025 15:34:49 +0000
ROA not before: Fri 04 Apr 2025 15:34:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44925
IP address blocks: 93.95.224.0/21 maxlen: 21
195.246.230.0/23 maxlen: 23
2a00:5ee0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 04 Apr 2025 22:37:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:01:70:c5:95:e7:70:06:f9:4d:5f:6b:cb:8a:78:7a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e02f2ca81ab802939530156e9631b18f515840
Validity
Not Before: Apr 4 15:34:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05c9bf83d596157ffcef86e77b0034c7581265ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:c5:04:10:b0:8b:33:da:10:1e:ed:a2:77:
04:74:14:ef:67:e8:4e:bb:45:82:b2:5d:df:12:68:
87:5b:ae:60:fe:7d:24:68:c3:9e:1d:29:cd:93:c2:
88:4f:7c:54:ee:ae:03:ad:33:3f:6c:b6:b1:69:9c:
c8:b7:f4:b1:38:03:19:bf:46:37:ab:98:ef:e4:db:
1e:75:2a:7d:9a:cc:ce:f9:95:f2:c8:f1:64:e9:17:
ad:0b:60:77:77:94:38:ae:f9:8b:32:c8:a8:12:9c:
98:04:36:14:14:d7:f1:4c:f7:36:44:c4:a7:3b:ae:
6f:40:72:66:87:15:79:5b:ef:80:6b:2a:d5:1f:45:
36:99:be:db:65:3e:15:12:ee:cd:ab:24:f9:14:77:
32:f8:8f:8f:cd:b8:d3:d0:9a:53:ef:be:4b:b6:49:
69:c1:35:fa:b0:69:a2:72:a5:88:fe:dd:dd:73:1a:
05:6d:0d:b0:a1:24:5b:3b:f3:82:dd:d7:1b:5a:d8:
63:de:b6:fb:e2:67:8b:1f:f6:f1:b2:2b:70:d0:11:
dc:2f:6b:65:fb:c5:7f:8d:da:76:ad:3c:4b:0b:8e:
96:5e:c3:9d:8b:a9:96:64:8a:50:3c:15:18:3a:34:
e5:dd:5e:df:01:45:37:f9:d7:19:44:78:05:bd:22:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C9:BF:83:D5:96:15:7F:FC:EF:86:E7:7B:00:34:C7:58:12:65:EA
X509v3 Authority Key Identifier:
keyid:58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/Bcm_g9WWFX_874bnewA0x1gSZeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.224.0/21
195.246.230.0/23
IPv6:
2a00:5ee0::/32
Signature Algorithm: sha256WithRSAEncryption
40:d5:15:35:4d:17:51:98:de:6b:86:83:f0:8b:95:7c:c6:c2:
6c:3f:a9:48:fc:02:03:67:70:46:0f:96:2c:2d:3f:91:12:ec:
ee:a8:b8:87:9c:db:bd:3b:0f:20:d3:81:8f:0c:3e:41:86:96:
03:6f:ed:e0:06:ce:cc:31:18:27:a9:67:b5:b0:48:e0:77:c2:
02:d8:f8:ca:97:00:89:13:cf:f5:65:9b:81:c1:46:a8:1c:45:
11:8f:44:d6:34:27:40:85:da:bd:7a:0c:90:ad:4a:a6:da:21:
a5:e0:a0:d1:eb:5c:ac:2a:9a:64:c2:80:35:e9:0a:d9:3d:aa:
38:1f:39:1b:3a:58:fa:8e:0c:1a:27:0c:d1:7b:46:54:eb:1e:
b4:92:3e:06:92:d0:24:a7:a8:5d:c1:15:15:76:95:7c:cd:3d:
31:dc:5f:87:09:d5:5a:ff:09:98:21:e5:7c:97:8a:af:93:6f:
00:7c:8e:da:cc:6b:5b:4d:d0:f1:fe:2a:f5:af:85:a2:f3:4d:
3b:c1:d9:fe:84:9a:0d:33:a4:0f:45:7c:98:09:dc:9d:8a:47:
83:06:03:fb:26:8a:23:b9:6e:7c:d9:7a:49:f5:62:5c:ad:2f:
e7:91:1a:72:c9:4c:10:4e:8d:05:ca:1a:d0:20:ef:d9:6b:9a:
6d:4c:7a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:39 2025 by rpki-client