Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/McrzfZBG58lAoIZVbLchA8ozW3U.roa
File: McrzfZBG58lAoIZVbLchA8ozW3U.roa (raw, json)
Hash identifier: x2EKm20EGVU0hx9hQ/okWee8AkPy9jBR7Mbs+24ZZmc=
Subject key identifier: 31:CA:F3:7D:90:46:E7:C9:40:A0:86:55:6C:B7:21:03:CA:33:5B:75
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A129DFCD6E3747273255CD803FD7EB5523
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/McrzfZBG58lAoIZVbLchA8ozW3U.roa
Signing time: Sun 11 Oct 2026 07:31:35 +0000
ROA not before: Sun 11 Oct 2026 07:31:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211056
IP address blocks: 45.81.16.0/24 maxlen: 24
45.81.17.0/24 maxlen: 24
45.81.18.0/24 maxlen: 24
45.81.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Oct 2026 08:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:df:cd:6e:37:47:27:32:55:cd:80:3f:d7:eb:55:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Oct 11 07:31:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31caf37d9046e7c940a086556cb72103ca335b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b9:83:73:13:46:4a:59:a2:e4:06:16:96:4d:
c7:0d:b9:47:2c:ad:e3:60:4c:86:0a:a3:dd:a2:a2:
ea:df:09:68:aa:9c:5b:af:0f:d1:c9:d9:03:aa:1b:
66:6e:34:f5:68:20:1b:24:51:07:e5:85:48:19:59:
fa:31:bb:d6:08:e6:82:0b:3c:6b:8e:26:e8:b9:c6:
b5:bc:03:53:18:27:5b:a8:8c:95:cf:a4:db:45:52:
1e:9c:c0:4e:d7:8f:6d:c0:3d:a1:b4:c5:cb:b6:b0:
15:d7:4c:de:31:f3:70:e1:a1:59:79:95:d7:73:78:
1e:6e:35:08:86:f7:31:7d:38:5f:fe:40:07:c9:e8:
5f:8c:4c:7c:4c:ca:53:a5:d0:73:4b:92:ac:1e:73:
3e:6d:e1:c6:c0:f2:87:e3:e5:da:03:84:8f:67:6b:
75:6a:45:fe:e4:2b:6c:07:be:50:48:85:f9:3e:d5:
1b:89:cd:7e:18:43:22:b0:7e:ea:84:a9:24:05:a2:
b5:54:7f:ac:3b:aa:29:72:77:16:1e:cb:a0:05:99:
7a:c9:45:e9:fe:85:0f:5c:bc:75:9a:73:fc:f7:21:
4d:ac:a8:91:cb:98:47:38:53:83:e8:f0:42:81:2d:
43:b5:6f:d7:71:9c:57:0d:bb:83:0c:7f:3e:65:48:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CA:F3:7D:90:46:E7:C9:40:A0:86:55:6C:B7:21:03:CA:33:5B:75
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/McrzfZBG58lAoIZVbLchA8ozW3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.16.0/22
Signature Algorithm: sha256WithRSAEncryption
13:47:65:4a:e8:f5:00:7f:3c:40:82:8f:01:60:d9:a2:22:61:
7a:8c:8e:ee:b6:be:a6:35:6a:aa:1e:52:a1:72:3d:0f:db:56:
5d:b7:f6:f3:8f:08:e0:b8:d1:f2:9d:9c:03:24:df:54:45:bf:
9a:aa:20:11:8a:d6:de:0e:a6:a5:f2:94:c7:c3:63:c7:70:89:
ab:8d:09:19:49:44:f8:3d:53:31:0f:09:6a:74:0d:aa:d9:10:
3d:3c:2b:8f:2e:53:60:2a:a3:9f:fc:47:c3:2e:b3:de:00:8f:
75:e2:c3:f8:ef:cf:18:02:20:fd:d1:91:b0:65:ad:ea:0d:f7:
30:16:52:ae:db:82:46:fc:b0:1c:b9:96:3a:7d:7d:ef:e3:53:
ee:50:f0:1a:7c:84:30:1d:39:62:5b:b1:74:13:60:87:b0:ff:
55:2b:4e:e3:bd:ba:ac:83:99:bb:90:d7:2c:47:f0:8a:0e:08:
04:08:61:cd:56:35:a9:fb:d7:de:c0:db:40:74:f5:29:f6:a4:
8c:50:c9:4d:c9:ed:a0:00:31:cb:e6:86:89:f1:5c:bb:61:1e:
fd:46:cb:d6:b7:76:41:2a:8f:fe:ac:f7:2c:4e:a3:38:25:b0:
bc:d4:2a:bd:e2:55:b9:34:c3:fd:25:92:10:b8:f0:c1:e1:3d:
8f:d1:c9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 12:55:46 2026 by rpki-client