Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/f-3Lo5dcxOAxBDEde0HmgHIbct4.roa
File: f-3Lo5dcxOAxBDEde0HmgHIbct4.roa (raw, json)
Hash identifier: mgFxEzVL/pbV1J0eAWqUMDjfDQfC/s6T6qQOHej87B8=
Subject key identifier: 7F:ED:CB:A3:97:5C:C4:E0:31:04:31:1D:7B:41:E6:80:72:1B:72:DE
Certificate issuer: /CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Certificate serial: 0197F94920A46157F4324ED7A392585FD238
Authority key identifier: 82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/f-3Lo5dcxOAxBDEde0HmgHIbct4.roa
Signing time: Fri 11 Jul 2025 11:40:08 +0000
ROA not before: Fri 11 Jul 2025 11:40:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216456
IP address blocks: 89.35.53.0/24 maxlen: 24
117.55.199.0/24 maxlen: 24
194.54.146.0/24 maxlen: 24
194.164.87.0/24 maxlen: 24
202.181.153.0/24 maxlen: 24
203.28.15.0/24 maxlen: 24
212.6.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Jul 2025 16:44:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:49:20:a4:61:57:f4:32:4e:d7:a3:92:58:5f:d2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Validity
Not Before: Jul 11 11:40:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fedcba3975cc4e03104311d7b41e680721b72de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:14:9c:3a:a7:80:cc:1d:78:80:29:22:92:
33:2a:7b:40:05:5c:7a:ff:db:b2:ee:4f:78:02:55:
21:7b:e0:fc:f9:b6:5e:93:86:f1:42:22:87:4d:85:
00:8e:b7:27:52:82:e6:0a:b1:13:94:aa:11:af:cc:
8c:2c:a3:76:ee:14:cd:92:52:fd:48:01:b2:95:a8:
67:ce:28:ee:80:e9:a4:ac:c2:4c:c6:4e:1f:94:1a:
cc:6c:7f:68:59:22:cb:d8:ad:34:21:47:c8:68:86:
1a:b9:59:99:fa:cd:89:c0:b7:65:fb:7b:27:d5:9c:
44:d7:98:bb:cd:df:f5:70:a0:c9:dc:42:f5:5a:84:
ad:50:13:4c:5d:20:98:6d:6a:f5:7f:05:5e:07:35:
15:4d:8a:a9:0a:86:d9:70:ac:c5:1b:09:74:3a:1d:
0a:29:99:fe:ea:21:0e:fc:a7:f9:6b:81:fa:13:33:
0d:b7:a1:c1:7a:78:30:d1:e6:d0:e3:8d:20:45:43:
46:a4:1c:91:e0:0a:0c:81:df:9a:f9:94:c5:4a:89:
4f:df:09:67:10:53:99:37:e8:66:19:74:ae:a0:4a:
0d:67:86:d2:c9:e4:b0:f3:6f:f7:1e:6a:f9:1b:2e:
fc:cf:f4:bc:b4:08:91:56:c5:c9:69:0e:58:c4:61:
aa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:ED:CB:A3:97:5C:C4:E0:31:04:31:1D:7B:41:E6:80:72:1B:72:DE
X509v3 Authority Key Identifier:
keyid:82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/f-3Lo5dcxOAxBDEde0HmgHIbct4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.53.0/24
117.55.199.0/24
194.54.146.0/24
194.164.87.0/24
202.181.153.0/24
203.28.15.0/24
212.6.53.0/24
Signature Algorithm: sha256WithRSAEncryption
22:69:48:e9:7d:07:d5:a9:2b:f4:62:c3:fa:c4:cb:3b:12:3b:
41:c3:ea:cf:c2:c0:d4:ee:7b:33:45:9f:f5:36:8a:37:26:66:
61:ab:1f:19:e3:41:b7:a8:12:64:70:48:61:78:6f:fb:04:44:
90:9c:fd:84:6b:5b:09:50:6d:e3:0e:e3:77:16:36:7a:eb:ac:
42:f3:80:9a:84:30:bc:f3:16:b3:9e:02:ba:97:92:f0:2b:37:
24:bf:bb:d6:e7:19:52:94:de:d9:f0:e5:30:ea:47:3d:aa:dd:
2d:6f:f4:ea:7c:22:49:8f:22:f4:37:dc:f5:df:56:5e:bc:d5:
a6:2c:c9:59:9c:eb:2d:5b:5c:9f:11:74:a1:41:b6:ca:83:1a:
22:ff:ec:5b:6d:cb:9c:52:2e:64:d6:68:62:e5:ef:00:6e:08:
a6:51:9d:34:f1:fb:b9:bb:8a:0f:47:d7:ff:54:87:66:10:72:
7d:ae:6a:4f:4b:d5:be:b9:e9:e6:52:a0:42:12:83:1b:f0:52:
30:6e:69:94:cf:9a:22:50:ca:43:f6:50:4e:56:4e:6f:c4:22:
3c:2c:09:5a:e2:2b:58:31:1d:ad:63:c1:0e:a2:1f:e8:40:7b:
f5:00:66:a7:df:c8:89:92:8c:00:ae:74:32:fc:be:ae:27:63:
63:4b:09:2a
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZf5SSCkYVf0Mk7Xo5JYX9I4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYjJlMGQwMGRkNzcxYTllNGQ2MGJiZjRiZTUyMTE0ZWE3
N2RiMDMwHhcNMjUwNzExMTE0MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmVkY2JhMzk3NWNjNGUwMzEwNDMxMWQ3YjQxZTY4MDcyMWI3MmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8AUnDqngMwdeIApIpIzKntABVx6
/9uy7k94AlUhe+D8+bZek4bxQiKHTYUAjrcnUoLmCrETlKoRr8yMLKN27hTNklL9
SAGylahnzijugOmkrMJMxk4flBrMbH9oWSLL2K00IUfIaIYauVmZ+s2JwLdl+3sn
1ZxE15i7zd/1cKDJ3EL1WoStUBNMXSCYbWr1fwVeBzUVTYqpCobZcKzFGwl0Oh0K
KZn+6iEO/Kf5a4H6EzMNt6HBengw0ebQ440gRUNGpByR4AoMgd+a+ZTFSolP3wln
EFOZN+hmGXSuoEoNZ4bSyeSw82/3Hmr5Gy78z/S8tAiRVsXJaQ5YxGGqIQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFH/ty6OXXMTgMQQxHXtB5oByG3LeMB8GA1UdIwQY
MBaAFIKy4NAN13Gp5NYLv0vlIRTqd9sDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3JMZzBBM1hjYW5rMWd1X1MtVWhGT3AzMndNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zNzk0YjEtY2E3Zi00YTU3LThiN2It
MDZkM2M0ZTYzYzIwLzEvZi0zTG81ZGN4T0F4QkRFZGUwSG1nSEliY3Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8zNzk0YjEtY2E3Zi00YTU3LThiN2ItMDZkM2M0ZTYzYzIw
LzEvZ3JMZzBBM1hjYW5rMWd1X1MtVWhGT3AzMndNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAWSM1AwQA
dTfHAwQAwjaSAwQAwqRXAwQAyrWZAwQAyxwPAwQA1AY1MA0GCSqGSIb3DQEBCwUA
A4IBAQAiaUjpfQfVqSv0YsP6xMs7EjtBw+rPwsDU7nszRZ/1Noo3JmZhqx8Z40G3
qBJkcEhheG/7BESQnP2Ea1sJUG3jDuN3FjZ666xC84CahDC88xazngK6l5LwKzck
v7vW5xlSlN7Z8OUw6kc9qt0tb/TqfCJJjyL0N9z131ZevNWmLMlZnOstW1yfEXSh
QbbKgxoi/+xbbcucUi5k1mhi5e8AbgimUZ008fu5u4oPR9f/VIdmEHJ9rmpPS9W+
uenmUqBCEoMb8FIwbmmUz5oiUMpD9lBOVk5vxCI8LAla4itYMR2tY8EOoh/oQHv1
AGan38iJkowArnQy/L6uJ2NjSwkq
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:40 2025 by rpki-client