Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/fpWY6Y9VXzivv5GBgH7j6L1vMlc.roa
File: fpWY6Y9VXzivv5GBgH7j6L1vMlc.roa (raw, json)
Hash identifier: /kS/0FTwCXGWg2bHjsbKMvyizuDTYZHe1VCAlhYXVrI=
Subject key identifier: 7E:95:98:E9:8F:55:5F:38:AF:BF:91:81:80:7E:E3:E8:BD:6F:32:57
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01980D3C323289AA19C8686E6B2A061E8EB8
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/fpWY6Y9VXzivv5GBgH7j6L1vMlc.roa
Signing time: Tue 15 Jul 2025 08:38:25 +0000
ROA not before: Tue 15 Jul 2025 08:38:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.148.132.0/22 maxlen: 24
95.155.128.0/24 maxlen: 24
95.155.129.0/24 maxlen: 24
95.155.130.0/24 maxlen: 24
95.155.131.0/24 maxlen: 24
95.155.132.0/24 maxlen: 24
95.155.144.0/24 maxlen: 24
95.155.145.0/24 maxlen: 24
95.155.146.0/24 maxlen: 24
95.155.147.0/24 maxlen: 24
95.155.148.0/24 maxlen: 24
95.155.149.0/24 maxlen: 24
95.155.150.0/24 maxlen: 24
95.155.151.0/24 maxlen: 24
95.155.156.0/24 maxlen: 24
95.155.157.0/24 maxlen: 24
95.155.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Jul 2025 12:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:3c:32:32:89:aa:19:c8:68:6e:6b:2a:06:1e:8e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jul 15 08:38:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e9598e98f555f38afbf9181807ee3e8bd6f3257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:87:86:d8:be:af:20:c8:82:8e:9f:58:c2:af:
ec:8e:d1:33:ec:80:da:ab:79:2f:93:86:22:e6:97:
13:c0:36:21:60:55:ce:1f:c8:88:c5:08:5c:c7:9a:
0f:ac:47:e9:e2:f9:86:76:1e:3d:14:c5:ce:98:db:
e2:11:64:0a:28:d5:3a:6c:12:80:20:b8:b9:6c:9d:
8a:e0:5f:57:9a:e5:c6:7f:c3:85:09:4a:51:4c:98:
c8:d5:db:41:d9:1d:ff:45:82:c2:62:02:57:49:87:
b3:9f:1b:61:a6:06:5b:e0:2c:c2:92:d7:29:a7:25:
ee:32:6e:79:89:47:3b:9e:41:8b:77:f4:12:78:66:
a5:d7:59:af:fc:fd:d2:15:90:f2:32:02:da:63:9e:
ff:2a:f7:1a:4e:77:27:fc:c6:8d:ef:77:9d:e2:96:
50:19:33:b6:7d:79:d0:b6:f5:36:89:67:4c:49:b9:
f1:ff:73:38:7d:5d:30:18:e4:02:68:d2:24:9b:3a:
62:84:4c:80:e6:14:1b:1a:3b:bb:76:7c:4f:48:1a:
bd:ee:71:83:05:c6:af:df:b0:df:05:82:d6:bf:17:
8c:26:6e:6a:3d:10:3d:62:17:e2:84:24:72:09:19:
14:cf:aa:2c:98:20:a9:13:c1:8f:27:1f:04:8b:27:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:95:98:E9:8F:55:5F:38:AF:BF:91:81:80:7E:E3:E8:BD:6F:32:57
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/fpWY6Y9VXzivv5GBgH7j6L1vMlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.132.0/22
95.155.128.0-95.155.132.255
95.155.144.0/21
95.155.156.0-95.155.158.255
Signature Algorithm: sha256WithRSAEncryption
21:f7:27:d3:a4:73:fc:68:64:0a:5d:05:56:25:0a:d4:b3:57:
2f:e1:6c:53:8a:19:19:bb:7c:88:16:7d:82:62:91:07:b0:9d:
76:e2:8d:3a:38:81:e2:aa:e7:84:36:d7:55:4f:7c:b6:83:ab:
f8:0e:18:45:2a:2d:8d:d1:b8:db:c3:b0:ed:6a:b7:e9:6c:b1:
de:ff:d4:42:17:83:00:6b:75:57:98:10:d8:c7:51:08:49:e1:
52:53:84:2c:a3:09:e2:59:b3:0c:6c:71:81:4f:26:08:3c:71:
e9:0e:50:cb:74:f9:fb:75:3e:69:1a:d5:e6:b0:a5:c7:d6:34:
d0:6c:46:1f:f3:04:f7:ec:84:f2:59:4e:4d:f1:f5:c7:00:c4:
94:14:2c:66:14:5e:36:95:20:2e:a1:35:91:c3:b5:50:f8:bb:
61:0b:4d:23:fa:f8:40:d8:4a:50:c0:de:2e:ab:91:96:00:67:
e6:6f:97:ba:cd:5b:9f:70:de:4d:9c:85:ae:56:28:be:2e:e1:
02:8d:24:c9:25:33:9b:19:1c:2f:86:3d:87:9a:47:c2:4f:35:
15:e6:3d:28:71:ff:12:fd:1b:59:75:24:64:0b:da:35:46:a9:
39:7c:c1:ac:ed:9a:92:32:17:75:98:03:40:62:1b:47:14:bd:
3d:1a:4f:e3
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZgNPDIyiaoZyGhuayoGHo64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjUwNzE1MDgzODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTk1OThlOThmNTU1ZjM4YWZiZjkxODE4MDdlZTNlOGJkNmYzMjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oeG2L6vIMiCjp9Ywq/sjtEz7IDa
q3kvk4Yi5pcTwDYhYFXOH8iIxQhcx5oPrEfp4vmGdh49FMXOmNviEWQKKNU6bBKA
ILi5bJ2K4F9XmuXGf8OFCUpRTJjI1dtB2R3/RYLCYgJXSYeznxthpgZb4CzCktcp
pyXuMm55iUc7nkGLd/QSeGal11mv/P3SFZDyMgLaY57/KvcaTncn/MaN73ed4pZQ
GTO2fXnQtvU2iWdMSbnx/3M4fV0wGOQCaNIkmzpihEyA5hQbGju7dnxPSBq97nGD
Bcav37DfBYLWvxeMJm5qPRA9YhfihCRyCRkUz6osmCCpE8GPJx8EiyeHkQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFH6VmOmPVV84r7+RgYB+4+i9bzJXMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvZnBXWTZZOVZYeml2djVHQmdIN2o2TDF2TWxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQCJZSEMAwD
BAdfm4ADBABfm4QDBANfm5AwDAMEAl+bnAMEAF+bnjANBgkqhkiG9w0BAQsFAAOC
AQEAIfcn06Rz/GhkCl0FViUK1LNXL+FsU4oZGbt8iBZ9gmKRB7CdduKNOjiB4qrn
hDbXVU98toOr+A4YRSotjdG428Ow7Wq36Wyx3v/UQheDAGt1V5gQ2MdRCEnhUlOE
LKMJ4lmzDGxxgU8mCDxx6Q5Qy3T5+3U+aRrV5rClx9Y00GxGH/ME9+yE8llOTfH1
xwDElBQsZhReNpUgLqE1kcO1UPi7YQtNI/r4QNhKUMDeLquRlgBn5m+Xus1bn3De
TZyFrlYovi7hAo0kySUzmxkcL4Y9h5pHwk81FeY9KHH/Ev0bWXUkZAvaNUapOXzB
rO2akjIXdZgDQGIbRxS9PRpP4w==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:45:19 2025 by rpki-client