Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-a7oFcvrB6Es7Y9nEk5tSrShoXs.roa
File: 1-a7oFcvrB6Es7Y9nEk5tSrShoXs.roa (raw, json)
Hash identifier: +xuXBN3tW19zCfjHnwC4uzyL3CJ1sc1kKvCk04uP4ZM=
Subject key identifier: F9:AE:E8:15:CB:EB:07:A1:2C:ED:8F:67:12:4E:6D:4A:B4:A1:A1:7B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01970DE8916F35B5C3D741255F93C4C4FB39
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-a7oFcvrB6Es7Y9nEk5tSrShoXs.roa
Signing time: Mon 26 May 2025 18:43:54 +0000
ROA not before: Mon 26 May 2025 18:43:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.220.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
194.36.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 16:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:e8:91:6f:35:b5:c3:d7:41:25:5f:93:c4:c4:fb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 26 18:43:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9aee815cbeb07a12ced8f67124e6d4ab4a1a17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dc:23:38:16:22:60:b9:4f:43:81:13:2e:8f:
1d:5f:50:68:72:c1:73:35:67:a9:d7:34:ae:3b:f1:
03:da:1b:ea:20:1d:14:35:d9:b0:af:5f:c6:68:8b:
6d:63:a2:11:02:a2:7e:e8:32:3f:41:db:4e:82:40:
09:40:ff:c8:84:4d:34:61:0c:4d:00:5f:c1:f7:65:
6c:3d:db:29:56:5b:02:69:82:90:4b:1a:95:1b:ff:
a2:92:57:85:99:18:59:b9:51:d9:6e:8d:75:ea:03:
90:47:72:f2:ba:1d:d3:e1:de:98:99:d6:f6:a5:f7:
f5:de:4b:a6:76:4d:35:7a:64:32:91:6f:ea:f7:0e:
47:c3:8b:6d:01:c2:b3:af:db:eb:12:82:f5:35:b4:
03:0f:5d:14:db:01:a0:d1:33:e6:7b:96:94:36:d5:
9c:51:c4:72:2b:c4:fc:b0:97:81:77:93:c5:0e:89:
df:28:86:5d:5e:41:0b:b1:90:e3:95:c7:ec:15:dc:
48:53:00:0b:f7:3c:76:dc:de:9d:73:b2:2f:ed:33:
e1:8c:68:35:53:88:34:e3:1c:ac:8a:4b:47:62:e0:
08:0b:dc:95:a2:33:de:95:59:da:ac:71:d9:3b:1a:
72:30:fe:91:30:e3:0d:0b:89:cb:53:14:1d:c0:b1:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AE:E8:15:CB:EB:07:A1:2C:ED:8F:67:12:4E:6D:4A:B4:A1:A1:7B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-a7oFcvrB6Es7Y9nEk5tSrShoXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
77.111.96.0/22
77.111.102.0/23
94.229.212.0/24
94.229.220.0/24
94.229.222.0/23
194.36.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:a6:a0:e0:61:58:a6:be:5f:a1:60:1f:7e:6e:3e:e3:76:97:
8d:c6:a5:47:fe:bb:aa:76:93:ca:6d:50:fa:d8:e6:95:44:69:
a7:ea:6c:c1:da:1e:d3:d8:3c:2c:d6:6a:38:ff:93:79:2c:56:
00:51:ef:39:45:21:99:55:3e:64:56:47:f8:df:4d:0d:1e:c3:
74:2d:fc:19:6b:8a:da:ad:95:8d:35:23:7e:0d:29:41:48:cd:
17:e9:5b:4c:4f:c1:38:c6:39:be:14:35:43:5d:56:5a:bc:dc:
88:e0:69:8c:72:a7:34:0c:34:4d:6e:2c:d2:44:71:ba:d2:0c:
29:a1:80:54:10:3d:80:1d:bf:1b:dd:a7:68:4f:29:04:81:26:
6c:21:9e:ab:0c:5b:d0:f2:e8:fb:b6:ec:0d:aa:29:74:c6:56:
a9:d6:5b:77:e8:f0:61:f4:5e:e0:cf:32:de:fe:47:a1:a3:26:
a1:98:e3:bb:c5:8d:d6:43:fb:94:e7:e9:b8:eb:9b:fd:ca:0a:
c3:c9:45:77:89:6c:f8:74:dc:64:36:e5:9c:a7:9b:77:a4:f3:
01:9d:90:85:ca:c9:3d:dc:1b:c0:22:d4:49:f4:42:55:0f:6f:
ca:2c:da:10:f3:5b:4d:b0:65:83:f1:05:11:24:64:03:78:cf:
4d:47:95:b8
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAZcN6JFvNbXD10ElX5PExPs5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwNTI2MTg0MzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWFlZTgxNWNiZWIwN2ExMmNlZDhmNjcxMjRlNmQ0YWI0YTFhMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dwjOBYiYLlPQ4ETLo8dX1BocsFz
NWep1zSuO/ED2hvqIB0UNdmwr1/GaIttY6IRAqJ+6DI/QdtOgkAJQP/IhE00YQxN
AF/B92VsPdspVlsCaYKQSxqVG/+ikleFmRhZuVHZbo116gOQR3Lyuh3T4d6Ymdb2
pff13kumdk01emQykW/q9w5Hw4ttAcKzr9vrEoL1NbQDD10U2wGg0TPme5aUNtWc
UcRyK8T8sJeBd5PFDonfKIZdXkELsZDjlcfsFdxIUwAL9zx23N6dc7Iv7TPhjGg1
U4g04xysiktHYuAIC9yVojPelVnarHHZOxpyMP6RMOMNC4nLUxQdwLF6wwIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFPmu6BXL6wehLO2PZxJObUq0oaF7MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvMS1hN29GY3ZyQjZFczdZOW5FazV0U3JTaG9Ycy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWIvMWZmNDRmLTUxZDYtNDU0NS1hZDM2LWI0YjhkYjIwYjFm
Yi8xLzdodzBjc0phelRSelpMZldNU1lZcWpVd3kyTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBDBggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAQ5m4gME
Ak1vYAMEAU1vZgMEAF7l1AMEAF7l3AMEAV7l3gMEAMIkIjANBgkqhkiG9w0BAQsF
AAOCAQEAtqag4GFYpr5foWAffm4+43aXjcalR/67qnaTym1Q+tjmlURpp+pswdoe
09g8LNZqOP+TeSxWAFHvOUUhmVU+ZFZH+N9NDR7DdC38GWuK2q2VjTUjfg0pQUjN
F+lbTE/BOMY5vhQ1Q11WWrzciOBpjHKnNAw0TW4s0kRxutIMKaGAVBA9gB2/G92n
aE8pBIEmbCGeqwxb0PLo+7bsDaopdMZWqdZbd+jwYfRe4M8y3v5HoaMmoZjju8WN
1kP7lOfpuOub/coKw8lFd4ls+HTcZDblnKebd6TzAZ2QhcrJPdwbwCLUSfRCVQ9v
yizaEPNbTbBlg/EFESRkA3jPTUeVuA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:42:46 2025 by rpki-client