Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/RFXWipKO3e425-P7okLjy2h-tJI.roa
File: RFXWipKO3e425-P7okLjy2h-tJI.roa (raw, json)
Hash identifier: 21ayP+34N4JS0B5aHeXXkCWOQAki0a/rW0HU8Ezu5uk=
Subject key identifier: 44:55:D6:8A:92:8E:DD:EE:36:E7:E3:FB:A2:42:E3:CB:68:7E:B4:92
Certificate issuer: /CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Certificate serial: 01967EFE81B1688EFA00B9A9D287CECE1441
Authority key identifier: 7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/RFXWipKO3e425-P7okLjy2h-tJI.roa
Signing time: Tue 29 Apr 2025 00:42:10 +0000
ROA not before: Tue 29 Apr 2025 00:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49604
IP address blocks: 45.151.4.0/23 maxlen: 23
45.151.6.0/23 maxlen: 23
85.222.232.0/22 maxlen: 24
85.234.242.0/23 maxlen: 23
85.234.244.0/23 maxlen: 23
85.234.246.0/23 maxlen: 24
185.31.240.0/22 maxlen: 24
217.146.64.0/20 maxlen: 24
2a02:29ea::/32 maxlen: 32
2a02:29ea:a::/48 maxlen: 48
2a02:29ea:14::/48 maxlen: 48
2a02:29ea:1e::/48 maxlen: 48
2a02:29ea:ffff::/48 maxlen: 48
2a02:29eb::/32 maxlen: 32
2a02:29ec::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 02 May 2025 01:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:fe:81:b1:68:8e:fa:00:b9:a9:d2:87:ce:ce:14:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Validity
Not Before: Apr 29 00:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4455d68a928eddee36e7e3fba242e3cb687eb492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f5:41:3c:dc:1c:a2:92:80:ec:bf:b4:80:46:
e0:da:fd:b0:99:e0:89:36:b5:f7:2b:70:bb:4b:7e:
24:0c:60:b9:51:41:69:22:51:e3:6b:aa:d3:96:b1:
0f:93:00:33:97:a1:74:c8:b3:2e:fe:e1:2f:32:e0:
1f:70:a4:37:ea:da:ff:23:09:92:95:13:04:59:4d:
99:c3:f9:a7:c8:e5:87:c6:c1:35:0a:94:03:36:e0:
28:6b:c7:20:59:82:4c:8a:da:66:67:4e:40:03:33:
ca:7b:c5:a6:6b:20:a9:94:f0:58:c9:e4:20:bb:f6:
ac:8f:b3:69:10:2e:c1:08:6f:db:cc:ab:a1:ee:84:
fd:0c:d5:fe:a7:64:77:27:71:3f:53:c4:b2:01:2f:
cd:00:0d:2c:05:66:a0:7f:2e:17:30:1a:85:07:63:
1d:f6:32:54:72:70:c9:ca:1f:d5:50:64:1f:73:ab:
2d:4f:88:9e:10:49:a4:63:d9:f2:8b:81:20:82:73:
9d:d1:b7:0c:f4:71:3c:37:3a:d0:dc:d6:09:2a:76:
bc:08:43:bc:f9:10:1e:19:85:21:f5:fe:a0:0c:a6:
bd:61:f9:f0:21:7a:94:40:5b:90:22:3f:42:47:14:
76:e5:71:0b:4c:75:35:cf:e4:55:9a:c8:e8:14:e6:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:55:D6:8A:92:8E:DD:EE:36:E7:E3:FB:A2:42:E3:CB:68:7E:B4:92
X509v3 Authority Key Identifier:
keyid:7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/RFXWipKO3e425-P7okLjy2h-tJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.4.0/22
85.222.232.0/22
85.234.242.0-85.234.247.255
185.31.240.0/22
217.146.64.0/20
IPv6:
2a02:29ea::-2a02:29ec:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0c:61:db:1e:1a:6b:e9:3f:82:b4:de:ed:49:22:fc:13:16:a3:
90:4a:22:17:bf:03:b7:5c:69:36:85:8e:f7:2b:ba:40:31:0a:
20:6a:06:e6:d3:32:b6:55:74:a1:b7:8c:25:c3:a1:1a:09:09:
ea:a6:5c:d5:4c:cb:8b:1e:0d:c6:99:1e:98:2e:22:43:4c:8f:
f1:f3:d4:f2:b2:92:34:c1:eb:ea:92:f8:e9:4f:33:cf:c8:74:
6b:a5:91:dd:30:c6:15:39:9b:89:03:e4:07:4c:5c:82:08:c8:
ee:2c:49:4a:2d:be:2e:de:61:58:0b:ae:fb:95:da:77:e7:98:
10:e6:4c:6a:a3:07:f4:f3:ec:6f:9f:3d:8a:ee:4b:45:6f:6e:
cd:a5:b8:78:b1:ae:64:2e:84:44:6b:05:d3:2d:56:f3:0d:e8:
20:4b:af:6a:5c:6f:5d:a5:64:1b:8f:5d:61:92:2a:02:22:bf:
5b:59:f1:65:20:0d:07:22:af:0d:9b:84:7d:f8:92:65:a0:07:
a5:be:38:71:45:16:ea:1a:5d:7c:a2:bf:15:a3:58:0d:c9:5a:
41:b5:6c:9b:e8:0c:80:ff:d5:6a:69:50:11:34:4a:f6:c5:9b:
ee:09:82:5d:3c:76:5e:42:85:4e:5e:0e:0a:e0:a8:41:0d:4f:
a1:fa:fe:4c
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZZ+/oGxaI76ALmp0ofOzhRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNjczNWI3YTU1M2ExNjgwYzExYWRkM2U0OGMzNjM1YjUz
OTc5Y2EwHhcNMjUwNDI5MDA0MjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDU1ZDY4YTkyOGVkZGVlMzZlN2UzZmJhMjQyZTNjYjY4N2ViNDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/VBPNwcopKA7L+0gEbg2v2wmeCJ
NrX3K3C7S34kDGC5UUFpIlHja6rTlrEPkwAzl6F0yLMu/uEvMuAfcKQ36tr/IwmS
lRMEWU2Zw/mnyOWHxsE1CpQDNuAoa8cgWYJMitpmZ05AAzPKe8WmayCplPBYyeQg
u/asj7NpEC7BCG/bzKuh7oT9DNX+p2R3J3E/U8SyAS/NAA0sBWagfy4XMBqFB2Md
9jJUcnDJyh/VUGQfc6stT4ieEEmkY9nyi4EggnOd0bcM9HE8NzrQ3NYJKna8CEO8
+RAeGYUh9f6gDKa9YfnwIXqUQFuQIj9CRxR25XELTHU1z+RVmsjoFOZRZwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFERV1oqSjt3uNufj+6JC48tofrSSMB8GA1UdIwQY
MBaAFHpnNbelU6FoDBGt0+SMNjW1OXnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW1jMXQ2VlRvV2dNRWEzVDVJdzJOYlU1ZWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iYjI2NDctMDk1MC00NmE0LWI1NmQt
MzRlYjY3YjQ3NWY2LzEvUkZYV2lwS08zZTQyNS1QN29rTGp5MmgtdEpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iYjI2NDctMDk1MC00NmE0LWI1NmQtMzRlYjY3YjQ3NWY2
LzEvZW1jMXQ2VlRvV2dNRWEzVDVJdzJOYlU1ZWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAsBAIAATAmAwQCLZcEAwQC
Vd7oMAwDBAFV6vIDBANV6vADBAK5H/ADBATZkkAwFgQCAAIwEDAOAwUBKgIp6gMF
ACoCKewwDQYJKoZIhvcNAQELBQADggEBAAxh2x4aa+k/grTe7Uki/BMWo5BKIhe/
A7dcaTaFjvcrukAxCiBqBubTMrZVdKG3jCXDoRoJCeqmXNVMy4seDcaZHpguIkNM
j/Hz1PKykjTB6+qS+OlPM8/IdGulkd0wxhU5m4kD5AdMXIIIyO4sSUotvi7eYVgL
rvuV2nfnmBDmTGqjB/Tz7G+fPYruS0Vvbs2luHixrmQuhERrBdMtVvMN6CBLr2pc
b12lZBuPXWGSKgIiv1tZ8WUgDQcirw2bhH34kmWgB6W+OHFFFuoaXXyivxWjWA3J
WkG1bJvoDID/1WppUBE0SvbFm+4Jgl08dl5ChU5eDgrgqEENT6H6/kw=
-----END CERTIFICATE-----
Generated at Tue Jun 10 17:24:41 2025 by rpki-client