Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/bJflSCgSoid_tp3Ovr1ewRDLSCo.roa
File: bJflSCgSoid_tp3Ovr1ewRDLSCo.roa (raw, json)
Hash identifier: GH8NSFiWd+byLm4CD3RL9Ao/lP6MGrMPCa/Y6N+MGG4=
Subject key identifier: 6C:97:E5:48:28:12:A2:27:7F:B6:9D:CE:BE:BD:5E:C1:10:CB:48:2A
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 0199F5395490BF14489E7539D59A1C08DB0B
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/bJflSCgSoid_tp3Ovr1ewRDLSCo.roa
Signing time: Sat 18 Oct 2025 02:49:59 +0000
ROA not before: Sat 18 Oct 2025 02:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.11.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Oct 2025 12:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f5:39:54:90:bf:14:48:9e:75:39:d5:9a:1c:08:db:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Oct 18 02:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c97e5482812a2277fb69dcebebd5ec110cb482a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c7:ce:be:ff:de:8d:02:e3:5c:33:1b:b8:ba:
cf:0e:36:24:7e:8c:c7:42:10:7c:12:2c:19:2b:a4:
72:b4:14:6b:a0:49:3b:07:52:bb:65:ce:89:1b:60:
e2:97:56:b1:87:c5:00:c9:c4:d5:63:9b:bb:a5:5d:
10:7c:7f:0b:c0:6a:33:3f:d8:c6:6c:32:1f:92:ec:
fb:75:f3:c4:af:fc:28:b4:af:09:c0:0e:30:3a:09:
68:76:50:ee:20:ab:51:b0:e9:70:bc:a3:e3:cb:09:
f7:f1:33:6e:01:44:1e:0b:a1:5a:97:ac:56:c7:0c:
ac:2c:8e:cd:6e:a4:2c:2f:65:b5:ab:fd:39:9f:e2:
97:cd:fb:09:99:f4:cb:33:9c:5e:55:33:24:8a:27:
72:c0:13:9d:79:43:3a:48:5e:9a:6c:18:0f:ef:26:
68:06:e2:ca:c6:80:7e:f4:6b:b7:84:d4:e7:83:89:
f8:dc:42:49:19:09:34:32:6b:9c:75:74:fd:ca:84:
22:28:bb:d6:ce:7a:23:0d:1a:7a:2e:b1:ec:ec:c6:
ec:f0:1c:33:cd:47:b7:3d:02:1b:4c:36:17:36:7e:
f5:11:6a:ca:0d:31:94:1b:c3:8f:86:29:22:fc:b7:
04:90:e6:69:0f:e6:38:62:a5:35:e3:53:ca:df:06:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:97:E5:48:28:12:A2:27:7F:B6:9D:CE:BE:BD:5E:C1:10:CB:48:2A
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/bJflSCgSoid_tp3Ovr1ewRDLSCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.173.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:03:18:f9:a0:02:8a:cb:b0:d3:55:6f:1c:fa:45:3e:e2:58:
0b:ce:b6:95:7e:c8:0b:0c:77:cf:1f:36:46:c6:de:06:c8:fb:
e5:4a:52:e3:d7:39:4e:6b:11:a1:97:4c:fe:26:b0:3b:5e:e5:
c9:f5:41:5e:c9:c1:fd:28:e9:dc:87:84:a8:fb:f4:82:f9:42:
d5:d6:8d:db:7a:77:ec:63:dd:18:ab:24:58:a1:61:60:62:fe:
af:4a:94:2f:bf:8d:6e:26:02:66:04:99:0f:c9:58:25:b5:f7:
aa:83:1a:39:31:18:4d:3e:17:b2:f3:b6:a5:48:ac:13:e6:03:
e1:65:eb:7b:89:58:a3:88:d2:53:09:9f:62:67:0e:26:6d:7f:
75:08:61:0e:c3:59:c8:a7:7b:d2:24:d9:d8:f2:19:03:a7:24:
63:0e:34:9e:fb:8a:b1:2c:4d:5e:c6:42:05:b3:8d:9b:09:f0:
8a:f1:71:b4:36:09:e0:e3:32:62:9b:5d:5c:6d:09:00:c9:f8:
e7:4d:43:cf:92:f0:2f:be:4f:28:a7:64:a1:ef:2a:3c:cd:99:
2a:63:28:39:b3:91:61:3f:be:95:43:20:78:07:32:dc:2c:4e:
9c:95:8a:6c:40:1e:c8:c1:52:d5:10:15:d9:5f:26:23:1d:47:
81:1a:78:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZn1OVSQvxRInnU51ZocCNsLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTY5NTc4NmY4NDUwZDEwNDFkYzg4YWQ4OTJjYmI1NzBk
NTk3MmIwHhcNMjUxMDE4MDI0OTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzk3ZTU0ODI4MTJhMjI3N2ZiNjlkY2ViZWJkNWVjMTEwY2I0ODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsfOvv/ejQLjXDMbuLrPDjYkfozH
QhB8EiwZK6RytBRroEk7B1K7Zc6JG2Dil1axh8UAycTVY5u7pV0QfH8LwGozP9jG
bDIfkuz7dfPEr/wotK8JwA4wOglodlDuIKtRsOlwvKPjywn38TNuAUQeC6Fal6xW
xwysLI7NbqQsL2W1q/05n+KXzfsJmfTLM5xeVTMkiidywBOdeUM6SF6abBgP7yZo
BuLKxoB+9Gu3hNTng4n43EJJGQk0MmucdXT9yoQiKLvWznojDRp6LrHs7Mbs8Bwz
zUe3PQIbTDYXNn71EWrKDTGUG8OPhiki/LcEkOZpD+Y4YqU141PK3waTdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGyX5UgoEqInf7adzr69XsEQy0gqMB8GA1UdIwQY
MBaAFH1WlXhvhFDRBB3IitiSy7Vw1ZcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDIt
NjNiMzM4MDhhNmE4LzEvYkpmbFNDZ1NvaWRfdHAzT3ZyMWV3UkRMU0NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDItNjNiMzM4MDhhNmE4
LzEvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQutMA0G
CSqGSIb3DQEBCwUAA4IBAQAcAxj5oAKKy7DTVW8c+kU+4lgLzraVfsgLDHfPHzZG
xt4GyPvlSlLj1zlOaxGhl0z+JrA7XuXJ9UFeycH9KOnch4So+/SC+ULV1o3benfs
Y90YqyRYoWFgYv6vSpQvv41uJgJmBJkPyVgltfeqgxo5MRhNPhey87alSKwT5gPh
Zet7iVijiNJTCZ9iZw4mbX91CGEOw1nIp3vSJNnY8hkDpyRjDjSe+4qxLE1exkIF
s42bCfCK8XG0Ngng4zJim11cbQkAyfjnTUPPkvAvvk8op2Sh7yo8zZkqYyg5s5Fh
P76VQyB4BzLcLE6clYpsQB7IwVLVEBXZXyYjHUeBGnj+
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:25 2025 by rpki-client