Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_MDfiCV3kKV4YUSAVLK_mVO8Fhc.roa
File: _MDfiCV3kKV4YUSAVLK_mVO8Fhc.roa (raw, json)
Hash identifier: HvSaB7Y4+z/93NKdqYju/swplokpkt3dStEjGrIwVew=
Subject key identifier: FC:C0:DF:88:25:77:90:A5:78:61:44:80:54:B2:BF:99:53:BC:16:17
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0197C1118F087CEC8DDC26D9E5E6122B7D28
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_MDfiCV3kKV4YUSAVLK_mVO8Fhc.roa
Signing time: Mon 30 Jun 2025 13:40:42 +0000
ROA not before: Mon 30 Jun 2025 13:40:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62300
IP address blocks: 5.183.153.0/24 maxlen: 24
45.133.234.0/24 maxlen: 24
213.166.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Jul 2025 11:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:11:8f:08:7c:ec:8d:dc:26:d9:e5:e6:12:2b:7d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jun 30 13:40:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcc0df88257790a57861448054b2bf9953bc1617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:c2:db:1b:5e:db:a5:2f:45:8e:a9:94:63:
da:62:e8:c8:53:62:03:0c:25:b8:9e:27:c7:b4:19:
9c:53:0c:3d:7a:9d:84:02:04:b9:3e:4b:8f:b9:71:
71:51:03:6c:d8:a8:da:46:fd:fb:b2:84:36:55:00:
1e:ca:9a:4d:d3:dc:38:a8:06:7d:02:3f:60:39:ec:
ec:b8:b6:cb:30:4c:ba:5d:b0:44:91:03:c8:6f:6f:
0c:70:40:21:50:73:e6:3d:e6:92:7b:d9:9d:38:43:
11:dc:25:57:57:90:3c:5a:af:7b:a6:c0:01:7a:97:
d9:d5:e7:2c:6b:49:47:cb:26:c1:f8:06:2e:72:0f:
a4:c3:b5:54:9b:45:5e:38:07:bd:89:0c:9f:d8:a9:
d9:2b:5c:6a:c8:dc:f3:d5:b5:7e:0a:8d:4d:73:38:
0a:c6:d7:4e:61:2f:1a:af:63:59:06:4b:e6:7e:8c:
9e:94:11:c2:de:0d:f9:d6:8f:f6:e6:dd:28:8e:00:
f0:a0:d1:16:6e:ac:33:cd:24:4f:66:7f:66:7d:c4:
49:87:92:ac:43:ef:e1:d3:3b:b2:7a:51:1d:e6:d3:
a4:f8:26:51:03:b5:44:8d:ac:1c:f7:ad:80:28:0e:
22:6f:3b:79:26:34:80:df:ec:6c:a8:a8:99:22:80:
27:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C0:DF:88:25:77:90:A5:78:61:44:80:54:B2:BF:99:53:BC:16:17
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_MDfiCV3kKV4YUSAVLK_mVO8Fhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.153.0/24
45.133.234.0/24
213.166.80.0/24
Signature Algorithm: sha256WithRSAEncryption
76:63:13:f1:77:81:f4:09:24:66:a2:aa:ed:58:a8:87:f8:5d:
e1:09:33:45:72:53:3e:e4:48:43:e0:92:e4:b6:a1:2c:69:1d:
89:b3:a0:18:66:5b:f5:f7:a8:d3:34:e2:a7:f9:48:0f:38:b9:
c2:5a:7d:dd:38:cb:c1:fc:cc:bc:ea:61:57:c5:2e:fc:d1:4c:
0f:cc:e9:1c:26:e3:11:59:4a:35:00:8e:8f:86:0c:0b:c5:20:
af:ac:f4:d8:e5:1e:91:10:56:4d:b4:3a:10:0f:94:dd:f6:dc:
08:bd:0b:59:64:d5:1b:93:fe:cb:2f:be:c8:bd:95:24:d4:d7:
b8:6b:be:c9:79:60:46:c2:f1:31:04:2b:82:af:bd:66:22:7b:
1f:2e:5a:61:6d:d0:80:d2:50:a5:af:4f:71:8f:5e:7a:db:96:
52:74:26:a7:c7:08:8b:b0:41:1d:92:7f:8e:b9:7e:22:68:a3:
74:65:ec:b2:fc:68:cb:20:11:08:ba:da:ad:95:b1:99:d8:2b:
2f:db:90:82:66:16:50:be:0b:af:64:47:25:48:62:e0:5e:92:
f7:5e:2f:1c:ba:a7:15:2b:b7:cc:da:5b:3a:b5:fe:a1:8b:8b:
b8:b9:f5:e4:3b:d7:10:b9:4f:a3:90:a6:f4:07:d2:cf:88:ec:
0e:0f:a7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:49:07 2025 by rpki-client