Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/RcDSx8RQleqItwhSMdLXQBgrgHI.roa
File: RcDSx8RQleqItwhSMdLXQBgrgHI.roa (raw, json)
Hash identifier: AUAoaBAp5tKcoo9PUk1RIm0JKTWCVCMkqBXFZuLNi4s=
Subject key identifier: 45:C0:D2:C7:C4:50:95:EA:88:B7:08:52:31:D2:D7:40:18:2B:80:72
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A17C99066215FB1D0553536CE4A02E5BDC
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/RcDSx8RQleqItwhSMdLXQBgrgHI.roa
Signing time: Tue 27 Oct 2026 09:02:45 +0000
ROA not before: Tue 27 Oct 2026 09:02:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 45.6.44.0/24 maxlen: 24
45.6.46.0/23 maxlen: 23
45.120.220.0/22 maxlen: 22
62.106.67.0/24 maxlen: 24
80.174.2.0/23 maxlen: 23
80.174.4.0/22 maxlen: 22
80.174.128.0/17 maxlen: 17
80.174.128.0/21 maxlen: 21
80.174.144.0/22 maxlen: 22
80.174.146.0/24 maxlen: 24
80.174.147.0/24 maxlen: 24
80.174.152.0/21 maxlen: 21
80.174.160.0/22 maxlen: 22
80.174.165.0/24 maxlen: 24
80.174.166.0/24 maxlen: 24
80.174.167.0/24 maxlen: 24
80.174.168.0/21 maxlen: 21
80.174.176.0/20 maxlen: 20
80.174.200.0/23 maxlen: 23
80.174.202.0/23 maxlen: 23
80.174.244.0/23 maxlen: 23
80.174.246.0/24 maxlen: 24
83.143.168.0/21 maxlen: 21
83.143.171.0/24 maxlen: 24
83.143.174.0/23 maxlen: 23
93.95.16.0/23 maxlen: 23
93.95.16.0/24 maxlen: 24
93.95.18.0/24 maxlen: 24
93.95.20.0/22 maxlen: 22
128.0.40.0/24 maxlen: 24
181.201.0.0/17 maxlen: 24
202.58.108.0/22 maxlen: 22
212.86.98.0/24 maxlen: 24
212.118.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Oct 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:99:06:62:15:fb:1d:05:53:53:6c:e4:a0:2e:5b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 27 09:02:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45c0d2c7c45095ea88b7085231d2d740182b8072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:60:43:75:ba:da:94:4f:93:14:e1:0e:90:
6b:c3:a0:f9:26:b9:ea:83:d2:8d:35:39:3e:49:ab:
1c:c2:05:68:58:d8:6e:2e:9b:72:3b:f9:52:36:20:
e7:61:42:1c:b8:d6:8d:1b:1d:fe:24:5b:60:ec:09:
37:dc:5a:66:1c:76:2a:57:cb:36:13:43:bf:95:78:
9c:95:e5:b7:be:67:00:ce:f5:df:97:04:55:01:a3:
25:20:74:11:6d:9d:dc:78:61:c0:79:2d:96:bd:4c:
b0:9e:a6:d6:ad:51:ef:10:e6:77:ff:30:28:15:fb:
da:13:b6:83:98:e8:20:e4:d1:77:96:01:19:74:f4:
03:54:95:16:a1:91:18:2c:0e:c5:49:b4:98:c8:2c:
57:db:bc:ff:b1:5a:af:9b:ff:a3:cf:95:c7:41:b3:
a4:3c:37:75:df:0d:34:f0:f1:53:3d:a6:cb:4c:10:
d1:bf:0d:e9:74:dc:9c:0f:93:f6:22:65:8e:bc:86:
bd:bf:2c:17:ae:b5:74:14:7f:4b:85:6f:d4:49:bf:
86:e3:6d:58:3b:bf:fe:fc:a4:8d:cd:b4:77:c4:a9:
e6:34:83:12:f0:19:85:6d:02:b1:4f:56:b7:cd:f5:
8d:b7:da:8d:a6:2c:77:3a:d2:23:f3:d2:2d:fc:0f:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C0:D2:C7:C4:50:95:EA:88:B7:08:52:31:D2:D7:40:18:2B:80:72
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/RcDSx8RQleqItwhSMdLXQBgrgHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.44.0/24
45.6.46.0/23
45.120.220.0/22
62.106.67.0/24
80.174.2.0-80.174.7.255
80.174.128.0/17
83.143.168.0/21
93.95.16.0-93.95.18.255
93.95.20.0/22
128.0.40.0/24
181.201.0.0/17
202.58.108.0/22
212.86.98.0/24
212.118.61.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:fa:3c:d0:9a:6a:3b:c6:15:1c:96:ce:5f:48:d8:da:12:af:
13:a9:ca:77:5b:8e:e8:b5:4c:e2:0f:2d:0b:f1:60:9c:cb:cb:
91:86:0f:25:77:9c:1e:00:7d:b4:4e:5f:95:82:9d:12:e9:fc:
a1:d5:7f:46:7a:38:86:43:22:6a:6f:49:db:61:bf:28:3c:6a:
be:6c:cf:79:67:e1:18:a3:95:49:60:fa:e5:34:b1:ac:6d:30:
e4:2d:3f:fd:ab:e5:b9:be:f1:ba:3f:86:12:99:46:e6:c0:8d:
72:c9:1d:b2:6f:b8:f4:96:c6:17:60:d8:97:9b:0d:e4:21:db:
86:cd:42:9b:b0:23:01:36:86:c8:17:68:99:2c:76:32:6e:f5:
55:cd:d6:20:e9:04:2c:d1:cf:67:b6:fa:0a:a8:35:b3:45:4c:
a3:39:08:2c:1b:f1:6c:9d:b2:b7:af:bf:9f:55:87:f5:cf:36:
63:3e:4b:c1:37:f6:b8:42:c1:fd:ef:2d:d7:b4:45:16:7e:af:
8b:7e:ba:11:38:e6:e9:36:02:40:6a:0f:b6:80:2b:19:5e:4b:
5b:f5:0b:e4:49:9e:06:ef:ed:25:f7:77:a1:bd:7a:e4:45:6a:
f7:c6:e7:15:b5:60:06:ba:be:79:e0:46:35:25:69:24:14:c0:
fc:f6:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 03:53:31 2026 by rpki-client