Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/bx2ev9VffKbt5wiMK9GsxlOfzUc.roa
File: bx2ev9VffKbt5wiMK9GsxlOfzUc.roa (raw, json)
Hash identifier: n+3wj/gywZeK3RDJeXl9fkugU/hP2GhngH1+FRvriLA=
Subject key identifier: 6F:1D:9E:BF:D5:5F:7C:A6:ED:E7:08:8C:2B:D1:AC:C6:53:9F:CD:47
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0198F040A1D845DBA4A613F42CB031D07706
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/bx2ev9VffKbt5wiMK9GsxlOfzUc.roa
Signing time: Thu 28 Aug 2025 10:37:04 +0000
ROA not before: Thu 28 Aug 2025 10:37:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.206.0/23 maxlen: 24
194.143.207.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.4.0/24 maxlen: 24
213.220.9.0/24 maxlen: 24
213.220.20.0/24 maxlen: 24
213.220.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Sep 2025 16:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:40:a1:d8:45:db:a4:a6:13:f4:2c:b0:31:d0:77:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Aug 28 10:37:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f1d9ebfd55f7ca6ede7088c2bd1acc6539fcd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:9b:97:9a:ad:3a:55:ee:35:fa:4e:2a:f3:
2e:d4:b7:f7:dc:b1:23:2b:45:34:da:9b:d8:ed:5c:
aa:89:9f:1d:4e:bb:d9:05:2e:90:3e:a7:57:f6:cc:
a1:69:3c:07:ba:09:16:7f:52:46:66:9a:c8:d5:00:
cb:d3:75:35:94:d4:48:d2:8d:be:98:d7:7d:47:76:
ef:91:ea:18:98:d5:f9:87:19:90:98:74:ec:74:60:
2f:2d:e2:6f:2c:b2:aa:55:05:23:77:ab:ee:2c:03:
a8:c7:f0:6e:35:c5:90:11:03:37:d0:85:72:bf:26:
2d:cf:28:a4:b0:47:84:30:c8:0f:87:d9:c2:59:12:
fd:3d:66:22:a7:f5:61:f7:5e:0f:31:bf:b6:93:0e:
c4:fd:e2:79:92:14:d2:23:e1:24:00:8c:18:5e:84:
12:29:f7:46:d9:fb:15:54:ee:c7:f3:81:91:d6:50:
a1:19:97:3d:27:dc:7a:c9:4a:90:62:c0:1c:b2:5c:
62:70:f9:eb:d3:7e:55:c8:fc:31:d8:5b:9b:45:43:
0e:a3:29:93:40:ed:19:42:b0:9b:67:3e:23:be:63:
aa:f4:49:1f:e4:c5:e1:6f:7f:f2:49:0d:cd:f7:46:
ad:bb:de:06:83:43:a2:bf:db:2e:60:47:64:53:b4:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1D:9E:BF:D5:5F:7C:A6:ED:E7:08:8C:2B:D1:AC:C6:53:9F:CD:47
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/bx2ev9VffKbt5wiMK9GsxlOfzUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/24
45.155.242.0/24
194.143.205.0-194.143.207.255
194.143.221.0/24
195.114.192.0/24
195.114.195.0-195.114.198.255
195.114.202.0/24
213.220.2.0/24
213.220.4.0/24
213.220.9.0/24
213.220.20.0/24
213.220.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:7e:e2:1f:bd:ea:2d:93:94:c0:39:6e:ce:f2:71:02:b8:e1:
a8:2f:73:38:c4:9a:69:24:30:7e:a0:a6:d6:e4:1a:2e:81:77:
0b:4a:a8:a3:5f:39:8f:f3:17:0f:e3:40:df:18:b9:75:7a:47:
e3:a0:07:38:56:f5:90:a3:67:71:e2:8b:48:00:ef:18:19:1d:
2d:b0:fa:51:1d:a4:c1:fc:ee:ae:5d:24:67:88:62:c3:e2:c0:
38:09:bd:95:c2:18:fb:8f:4a:4f:f2:13:2d:9c:f6:9c:dd:b2:
ec:73:99:dd:8c:3b:85:d4:d7:be:34:f6:fa:58:bc:8b:3c:3c:
50:5c:ef:2d:61:fe:0a:1c:f7:97:ce:fa:04:ba:72:be:1f:a6:
ac:b1:47:a7:22:b1:4e:2b:a6:c7:2a:15:2c:e5:0d:50:10:50:
73:fc:aa:08:16:e9:69:8e:40:67:4e:91:c1:99:3e:b7:19:43:
08:52:84:52:70:81:41:5d:cc:83:b6:f4:c3:d4:f1:66:60:69:
6c:e1:99:fb:02:5a:1b:b1:09:51:48:84:34:bf:ef:cb:a4:c6:
6e:fa:86:8d:9a:8f:10:bb:87:be:a1:cb:1d:d8:8e:f5:ba:bb:
f8:9f:18:89:d8:1a:07:c7:ab:81:75:fe:72:95:d8:d8:40:78:
ff:7b:6d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:19:23 2025 by rpki-client