Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/n1xEkTT_MhjakzF_5cRo0og8Qts.roa
File: n1xEkTT_MhjakzF_5cRo0og8Qts.roa (raw, json)
Hash identifier: uY6Wc2XhZxT0BIUcVgDLjzYi0WzNPWr54lNYw4r5RAU=
Subject key identifier: 9F:5C:44:91:34:FF:32:18:DA:93:31:7F:E5:C4:68:D2:88:3C:42:DB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196EDF9268A5CF5B3E29D3CC5F1A9D5A09A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/n1xEkTT_MhjakzF_5cRo0og8Qts.roa
Signing time: Tue 20 May 2025 13:54:10 +0000
ROA not before: Tue 20 May 2025 13:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.94.47.0/24 maxlen: 24
85.209.130.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
195.66.26.0/24 maxlen: 24
2a0f:8100::/29 maxlen: 29
2a0f:e7c4:10::/48 maxlen: 48
2a11:3500::/29 maxlen: 29
2a13:8c86:120::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 10:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:f9:26:8a:5c:f5:b3:e2:9d:3c:c5:f1:a9:d5:a0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 20 13:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f5c449134ff3218da93317fe5c468d2883c42db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:c5:4f:54:9c:a4:63:f7:e0:ae:f8:54:71:
6c:51:40:8c:0b:1b:49:2c:e9:68:f1:31:7a:f0:a4:
82:a0:8b:2b:16:87:59:97:45:eb:14:a7:14:33:d9:
11:3e:74:41:67:7f:ac:7c:67:a0:0f:cd:de:ce:a4:
01:0c:5d:53:1f:8f:a8:2d:b7:0b:60:41:0e:e9:42:
d3:98:87:4e:e1:d3:ec:38:8a:3d:d9:04:df:0b:2a:
15:ea:bd:d4:09:47:4a:7d:47:b3:70:ea:26:b8:84:
ea:95:82:56:66:be:01:44:31:a8:a5:77:97:23:a0:
4b:c5:f8:a0:6c:b0:3b:e4:69:33:00:24:a7:a7:6e:
99:87:08:93:4f:f6:9b:57:82:7b:c4:60:1d:f4:d4:
f0:c4:43:f1:2b:98:78:49:e4:0a:f2:7c:69:11:19:
87:d1:77:85:85:43:ad:3f:52:ee:3b:9d:a1:40:3f:
51:c1:a2:66:d4:e9:fd:ca:aa:e0:04:af:be:42:de:
ce:b6:67:0f:a8:c8:18:12:0b:b3:77:e5:21:db:08:
7c:5d:ef:5b:40:54:e9:25:47:90:87:71:40:30:15:
b1:02:3d:d1:ac:66:95:32:f8:b8:e8:aa:a0:3c:5e:
f1:95:82:cc:61:40:fc:66:7c:40:06:b7:59:97:8c:
2f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5C:44:91:34:FF:32:18:DA:93:31:7F:E5:C4:68:D2:88:3C:42:DB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/n1xEkTT_MhjakzF_5cRo0og8Qts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.47.0/24
85.209.130.0/24
185.164.59.0/24
195.66.26.0/24
IPv6:
2a0f:8100::/29
2a0f:e7c4:10::/48
2a11:3500::/29
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
13:11:73:32:ce:4f:8e:e2:1c:bf:9e:e8:4c:20:54:f8:78:e8:
5e:24:1d:5d:46:35:7e:55:65:e0:76:ab:1d:75:50:3e:e9:2d:
40:36:15:85:2f:f6:26:b1:42:9e:4d:b0:8a:4d:1e:bd:a2:9d:
e0:5b:d6:22:77:d6:63:63:ea:c8:c7:2c:ce:7d:53:f0:51:6a:
5a:6d:75:d2:8a:75:3f:a4:e8:13:91:eb:a6:c5:9f:a8:4e:0a:
df:98:83:30:80:b5:e9:1a:dc:48:21:e5:25:ee:23:e0:bb:99:
ad:f5:ca:c5:e8:48:32:d8:d6:bc:0b:4a:ea:55:0f:5d:42:cd:
c5:87:5b:dd:5d:bc:15:c9:9a:9c:18:08:4b:d4:89:68:7a:bc:
3d:29:d7:69:45:97:a4:00:86:f8:0e:9c:da:ce:12:d3:82:a2:
90:c6:1a:af:1a:6d:e2:d5:90:1b:2a:1e:cb:54:74:c2:2b:7d:
cd:47:b5:48:12:88:40:81:ad:64:1b:2c:e5:a5:92:17:f5:ed:
76:66:f2:db:67:c5:8e:86:1c:7f:02:d6:a5:f2:a1:6c:57:71:
80:af:9f:e3:f2:56:6a:02:10:b5:24:55:11:55:04:95:5a:b6:
2b:ea:4d:12:be:60:ad:e5:58:a1:8f:c3:16:b9:fa:c3:9b:ba:
25:ea:54:3a
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZbt+SaKXPWz4p08xfGp1aCaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNTIwMTM1NDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjVjNDQ5MTM0ZmYzMjE4ZGE5MzMxN2ZlNWM0NjhkMjg4M2M0MmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHfFT1ScpGP34K74VHFsUUCMCxtJ
LOlo8TF68KSCoIsrFodZl0XrFKcUM9kRPnRBZ3+sfGegD83ezqQBDF1TH4+oLbcL
YEEO6ULTmIdO4dPsOIo92QTfCyoV6r3UCUdKfUezcOomuITqlYJWZr4BRDGopXeX
I6BLxfigbLA75GkzACSnp26ZhwiTT/abV4J7xGAd9NTwxEPxK5h4SeQK8nxpERmH
0XeFhUOtP1LuO52hQD9RwaJm1On9yqrgBK++Qt7OtmcPqMgYEguzd+Uh2wh8Xe9b
QFTpJUeQh3FAMBWxAj3RrGaVMvi46KqgPF7xlYLMYUD8ZnxABrdZl4wvoQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFJ9cRJE0/zIY2pMxf+XEaNKIPELbMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvbjF4RWtUVF9NaGpha3pGXzVjUm8wb2c4UXRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAeBAIAATAYAwQALV4vAwQA
VdGCAwQAuaQ7AwQAw0IaMCYEAgACMCADBQMqD4EAAwcAKg/nxAAQAwUDKhE1AAMH
ACoTjIYBIDANBgkqhkiG9w0BAQsFAAOCAQEAExFzMs5PjuIcv57oTCBU+HjoXiQd
XUY1flVl4HarHXVQPuktQDYVhS/2JrFCnk2wik0evaKd4FvWInfWY2PqyMcszn1T
8FFqWm110op1P6ToE5HrpsWfqE4K35iDMIC16RrcSCHlJe4j4LuZrfXKxehIMtjW
vAtK6lUPXULNxYdb3V28FcmanBgIS9SJaHq8PSnXaUWXpACG+A6c2s4S04KikMYa
rxpt4tWQGyoey1R0wit9zUe1SBKIQIGtZBss5aWSF/Xtdmby22fFjoYcfwLWpfKh
bFdxgK+f4/JWagIQtSRVEVUElVq2K+pNEr5greVYoY/DFrn6w5u6JepUOg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:46:27 2025 by rpki-client