Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/EpaDcNtYXuSfJu3KlSO9MdmMjTQ.roa
File: EpaDcNtYXuSfJu3KlSO9MdmMjTQ.roa (raw, json)
Hash identifier: ehxDWVeZQtVIs1Gg8TR9DZ6N1mw1420+ETccqZe+C1g=
Subject key identifier: 12:96:83:70:DB:58:5E:E4:9F:26:ED:CA:95:23:BD:31:D9:8C:8D:34
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019B06CBC425FB96C421EFDD4195D134C1B7
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/EpaDcNtYXuSfJu3KlSO9MdmMjTQ.roa
Signing time: Wed 10 Dec 2025 05:46:15 +0000
ROA not before: Wed 10 Dec 2025 05:46:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 45.154.157.0/24 maxlen: 24
188.209.139.0/24 maxlen: 24
188.209.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Dec 2025 10:55:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:06:cb:c4:25:fb:96:c4:21:ef:dd:41:95:d1:34:c1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Dec 10 05:46:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12968370db585ee49f26edca9523bd31d98c8d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:68:c5:35:cd:6c:64:7c:df:3d:da:fd:66:
7f:9e:3b:03:27:cf:5a:fd:9a:f0:6f:b2:1f:68:69:
88:35:4f:4f:54:03:7c:be:c0:e5:1d:76:6b:ed:8c:
f2:db:ef:cb:0a:96:05:d7:d7:a4:b5:3d:b6:21:c3:
c0:e0:a9:b7:e9:53:e5:01:c3:e1:12:93:be:75:a5:
39:a9:a6:ef:17:b6:48:6f:6e:a0:bb:18:eb:7d:75:
f8:3e:3b:14:3b:69:04:a2:c2:4a:61:9a:66:0c:3d:
46:e4:f8:2a:a0:33:c3:35:10:ae:68:9e:05:27:e6:
6e:6c:81:fb:b6:ad:40:5a:13:b7:9a:9e:74:ae:93:
db:f7:6d:7c:73:46:54:9b:62:e2:80:77:f4:64:01:
60:87:90:6f:fc:ff:7c:6a:2b:28:01:bc:bf:06:65:
cf:4e:b0:f4:03:3c:c4:ef:5c:f5:d9:bd:7d:1a:79:
36:81:6e:82:3c:55:9e:16:a0:0b:fc:67:32:aa:3e:
de:33:dc:ec:d0:93:0f:a5:91:2a:c6:e0:2b:46:95:
d1:db:e4:7b:5f:87:13:a9:5e:aa:29:03:32:5c:94:
03:84:52:95:11:7f:32:40:87:ec:07:bb:bd:03:3f:
65:74:9d:78:cf:fd:ef:dc:96:74:19:94:76:08:4e:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:96:83:70:DB:58:5E:E4:9F:26:ED:CA:95:23:BD:31:D9:8C:8D:34
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/EpaDcNtYXuSfJu3KlSO9MdmMjTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.157.0/24
188.209.139.0-188.209.140.255
Signature Algorithm: sha256WithRSAEncryption
9e:20:44:e1:4d:39:b3:07:26:40:71:57:ac:c3:41:9d:0e:0d:
1b:32:10:b2:d9:99:6b:92:fe:d7:d1:af:83:02:f6:68:13:94:
69:8f:10:2a:da:cf:02:c6:fe:ce:0b:c9:10:18:6b:d8:f7:da:
fc:a2:35:f7:76:75:67:d7:6b:f8:08:c2:cb:43:1c:1c:29:c6:
ee:33:cf:85:ce:ac:66:1b:ce:c0:57:34:79:82:1b:a5:22:4b:
1c:66:7c:4d:b5:2c:51:7f:25:1b:7f:8e:56:24:37:b0:05:38:
fa:fe:4c:0d:da:cc:05:00:a0:f7:3a:47:05:4d:62:7d:bd:5b:
ce:92:93:c5:ca:97:18:c2:0a:ad:2f:f0:b5:8e:ba:d6:aa:58:
5a:d1:74:c1:04:0f:7e:8f:aa:04:8a:05:5b:71:eb:38:f2:be:
43:db:80:42:df:84:46:53:f6:31:70:38:ea:5f:fc:f3:e6:54:
37:15:4f:4b:f0:7a:f3:bd:3d:12:f5:31:0a:d0:3a:e4:13:06:
4f:f1:ec:2a:cb:bb:dc:09:ce:7c:de:20:01:fc:56:e9:75:8d:
dd:63:a3:b6:d5:ec:75:c4:5c:9e:77:4c:34:6b:02:8b:46:92:
34:7a:87:39:ce:4f:fe:ec:b3:22:6e:e7:34:8f:ae:e3:0a:96:
eb:23:b5:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Mar 3 14:47:46 2026 by rpki-client