Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/keE0Ah5-hHl-4ZAAVjS-OhO8uiU.roa
File: keE0Ah5-hHl-4ZAAVjS-OhO8uiU.roa (raw, json)
Hash identifier: a3zewJCLQiuTofLj6fCVukShg+0sUXXY4+CDTPiRAf8=
Subject key identifier: 91:E1:34:02:1E:7E:84:79:7E:E1:90:00:56:34:BE:3A:13:BC:BA:25
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01961EEFC48F31E265ABC9E2D7BAE2143AF1
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/keE0Ah5-hHl-4ZAAVjS-OhO8uiU.roa
Signing time: Thu 10 Apr 2025 09:02:31 +0000
ROA not before: Thu 10 Apr 2025 09:02:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.65.113.0/24 maxlen: 24
45.154.159.0/24 maxlen: 24
188.209.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 13:28:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:ef:c4:8f:31:e2:65:ab:c9:e2:d7:ba:e2:14:3a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Apr 10 09:02:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91e134021e7e84797ee190005634be3a13bcba25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:54:e9:06:e5:8c:69:14:96:50:91:a3:96:
2c:df:87:77:11:94:e0:fa:32:a4:b4:25:ca:9d:1f:
4e:9b:33:af:1a:39:39:51:27:11:2b:ac:b1:fa:37:
2b:dc:70:d3:ec:3b:53:8c:d9:0a:9f:e5:5c:79:02:
92:a9:2d:a7:b9:15:0e:44:84:c0:0f:88:f7:23:7f:
33:b1:bb:89:b4:c3:1d:40:a8:3b:cf:c3:df:70:5a:
83:93:ce:db:3a:3d:1a:d1:2c:a2:e7:b8:4e:a5:8e:
34:c1:f5:9f:b9:11:74:d4:27:a7:fc:cd:a8:f8:96:
64:a6:a4:29:a8:06:10:e4:c8:26:22:ca:86:82:a7:
91:31:31:ad:9c:89:c1:c7:be:f0:90:d7:67:a0:f7:
a8:d4:9a:18:0e:c4:f3:cd:9d:88:37:3d:d1:a9:96:
a9:c6:17:60:18:c7:7c:65:f0:4a:1b:9a:14:ec:39:
d9:df:56:12:f2:f5:21:11:5a:24:81:98:93:91:5d:
4b:ea:43:65:ce:7b:57:91:31:cb:66:df:7f:86:27:
ef:f3:75:e5:dc:b4:d0:69:ef:09:b9:9e:dd:cb:08:
67:c4:b5:3b:07:a7:fd:99:67:fa:b7:c4:cf:40:e2:
a5:26:f9:e6:74:bf:62:4c:45:25:5b:ff:fc:0f:5f:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E1:34:02:1E:7E:84:79:7E:E1:90:00:56:34:BE:3A:13:BC:BA:25
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/keE0Ah5-hHl-4ZAAVjS-OhO8uiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
45.154.159.0/24
188.209.131.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d3:fe:ad:89:34:21:89:f7:89:dd:86:28:12:97:bf:30:9d:
59:a2:57:a5:75:23:71:d0:4d:23:02:02:e4:cb:5b:64:c7:67:
8a:e4:ae:92:cd:58:c9:94:c1:6e:5e:a4:4d:75:7a:d0:ed:95:
92:8a:35:a3:4e:ec:d7:c7:d7:65:e2:2d:5a:50:3b:48:30:bf:
c4:e5:a3:86:6e:33:ab:02:29:43:81:cb:95:4d:d6:3a:47:ba:
24:6c:d0:7d:38:77:29:9c:0b:fd:a4:c9:65:bd:c5:17:4d:55:
46:d8:eb:ba:b5:92:c6:78:7e:b5:1e:5c:af:02:a0:0f:89:4a:
f2:92:1e:5f:d4:26:f6:f8:a4:70:e8:f7:c1:33:4d:e6:d8:fc:
3a:a6:75:07:57:c1:76:ce:a8:da:77:f4:fb:b5:99:55:d7:2c:
27:dd:6d:be:14:7c:c0:74:ce:dd:8c:24:1a:a7:65:0f:81:37:
ab:64:82:c8:a3:41:4b:06:9f:66:b1:e1:70:60:50:82:54:fc:
b6:56:e5:66:7c:ca:67:55:a8:cd:66:5d:18:22:8a:18:00:90:
63:e5:46:2d:9f:fa:bb:d3:91:21:fe:d8:5a:81:79:ce:4a:37:
13:c8:e9:23:96:28:a7:6d:ba:e7:01:f2:b1:4a:fd:6e:54:73:
cf:1d:14:ad
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZYe78SPMeJlq8ni17riFDrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz
ZmUzYWIwHhcNMjUwNDEwMDkwMjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWUxMzQwMjFlN2U4NDc5N2VlMTkwMDA1NjM0YmUzYTEzYmNiYTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDRU6QbljGkUllCRo5Ys34d3EZTg
+jKktCXKnR9OmzOvGjk5UScRK6yx+jcr3HDT7DtTjNkKn+VceQKSqS2nuRUORITA
D4j3I38zsbuJtMMdQKg7z8PfcFqDk87bOj0a0Syi57hOpY40wfWfuRF01Cen/M2o
+JZkpqQpqAYQ5MgmIsqGgqeRMTGtnInBx77wkNdnoPeo1JoYDsTzzZ2INz3RqZap
xhdgGMd8ZfBKG5oU7DnZ31YS8vUhEVokgZiTkV1L6kNlzntXkTHLZt9/hifv83Xl
3LTQae8JuZ7dywhnxLU7B6f9mWf6t8TPQOKlJvnmdL9iTEUlW//8D1+gswIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJHhNAIefoR5fuGQAFY0vjoTvLolMB8GA1UdIwQY
MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt
M2Y4YjU1ZGExYWM0LzEva2VFMEFoNS1oSGwtNFpBQVZqUy1PaE84dWlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0
LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALUFxAwQA
LZqfAwQAvNGDMA0GCSqGSIb3DQEBCwUAA4IBAQAb0/6tiTQhifeJ3YYoEpe/MJ1Z
oleldSNx0E0jAgLky1tkx2eK5K6SzVjJlMFuXqRNdXrQ7ZWSijWjTuzXx9dl4i1a
UDtIML/E5aOGbjOrAilDgcuVTdY6R7okbNB9OHcpnAv9pMllvcUXTVVG2Ou6tZLG
eH61HlyvAqAPiUrykh5f1Cb2+KRw6PfBM03m2Pw6pnUHV8F2zqjad/T7tZlV1ywn
3W2+FHzAdM7djCQap2UPgTerZILIo0FLBp9mseFwYFCCVPy2VuVmfMpnVajNZl0Y
IooYAJBj5UYtn/q705Eh/thagXnOSjcTyOkjliinbbrnAfKxSv1uVHPPHRSt
-----END CERTIFICATE-----
Generated at Fri Jun 13 11:08:00 2025 by rpki-client