Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/v0j-DxzIQMiQxrXL7csMAaS50uI.roa
File: v0j-DxzIQMiQxrXL7csMAaS50uI.roa (raw, json)
Hash identifier: FmzFUqjfaoOt1BPgSz54r13jzaAgl2ao4e6aBumvSQ8=
Subject key identifier: BF:48:FE:0F:1C:C8:40:C8:90:C6:B5:CB:ED:CB:0C:01:A4:B9:D2:E2
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019E93779DEBB85C9C40CACB0A77439C27AA
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/v0j-DxzIQMiQxrXL7csMAaS50uI.roa
Signing time: Thu 04 Jun 2026 16:29:10 +0000
ROA not before: Thu 04 Jun 2026 16:29:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.174.32.0/19 maxlen: 19
80.174.108.0/23 maxlen: 23
80.174.113.0/24 maxlen: 24
80.174.118.0/24 maxlen: 24
80.174.121.0/24 maxlen: 24
80.174.122.0/24 maxlen: 24
80.174.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jun 2026 19:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:77:9d:eb:b8:5c:9c:40:ca:cb:0a:77:43:9c:27:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jun 4 16:29:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf48fe0f1cc840c890c6b5cbedcb0c01a4b9d2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:82:06:81:2a:66:79:09:69:b4:86:4f:b8:
39:12:5f:2d:de:80:5f:6a:ea:16:fa:19:8a:36:1b:
a9:cb:d7:07:84:93:85:74:58:ff:19:2e:0e:50:98:
74:88:12:ec:6d:b2:72:35:1c:a8:46:f7:f0:f2:c6:
84:ff:14:25:84:d3:31:71:73:a7:b0:36:2c:be:80:
4a:55:ef:ae:51:f7:2e:a9:72:c5:f9:e5:02:00:8e:
7b:52:a8:28:6e:e3:b5:51:b6:63:31:78:33:a0:6c:
d5:f0:69:9e:22:c2:cf:50:73:09:98:92:4e:ce:9d:
aa:ce:96:b1:56:ae:3e:80:6f:32:53:d0:41:aa:5a:
e4:6d:ae:e3:3e:83:ab:ae:4c:87:4b:9a:13:76:3a:
1f:25:30:9d:bd:eb:5a:0f:a8:b7:47:79:7d:92:59:
a5:99:08:1f:9d:48:b6:30:d7:23:51:67:f5:6c:17:
be:24:d8:cb:5b:8f:59:8e:7a:b4:d9:09:9e:20:f6:
95:fd:ed:9b:39:d2:03:9a:36:76:84:1b:c7:de:eb:
05:a6:c3:df:32:2d:4f:7d:8b:1c:de:22:7b:41:a3:
fd:6a:c3:c5:78:c5:6a:b8:a6:d7:4d:2a:58:d0:95:
15:04:72:a4:8f:a9:c8:08:40:82:86:7f:46:f6:e7:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:FE:0F:1C:C8:40:C8:90:C6:B5:CB:ED:CB:0C:01:A4:B9:D2:E2
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/v0j-DxzIQMiQxrXL7csMAaS50uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.32.0/19
80.174.108.0/23
80.174.113.0/24
80.174.118.0/24
80.174.121.0-80.174.122.255
80.174.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1d:f0:2e:2b:b6:88:14:b2:17:61:0a:62:e6:fe:72:7e:73:
01:2b:11:5f:14:f6:57:7e:ce:3d:4f:95:5c:94:8a:40:60:64:
9b:56:75:6e:24:60:a6:2d:74:46:f5:da:87:3b:1a:5e:0b:d5:
a1:c5:d3:3a:ac:8f:1a:c5:c7:ca:fd:ac:fc:f6:4f:6b:e7:33:
57:2d:9d:06:81:3a:c8:d7:9d:98:68:1a:e9:2a:f7:39:6c:1b:
33:7d:f0:9f:4e:ab:3c:77:df:ec:12:1d:3a:9f:38:ab:4f:2f:
73:fa:e0:b4:f3:fb:e8:49:c8:35:b7:2e:68:1f:1c:e2:eb:07:
19:10:71:c5:da:f3:31:a3:8f:95:a0:cd:d6:00:91:3a:ec:2d:
1d:87:0b:6d:2a:9a:21:44:08:25:39:fc:5d:06:6a:32:c0:10:
17:9e:a9:c3:47:71:2e:87:6c:22:00:c3:af:83:70:1c:4b:0e:
d6:bf:18:b6:f6:67:ab:c7:87:2c:d7:a7:4f:9c:74:8b:a8:8f:
95:db:f6:3e:e7:00:8d:fd:18:b1:44:e7:10:a5:95:37:84:16:
a2:32:9a:7a:c2:c4:f3:4f:d6:9c:1b:e7:5b:aa:26:0e:2f:b6:
4d:86:5d:b9:ff:1c:31:f3:82:4d:81:ff:f1:84:56:da:2b:bb:
83:79:99:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:05:48 2026 by rpki-client