Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/45kiMoDO6uZSTk9hf58078MdEuM.roa
File: 45kiMoDO6uZSTk9hf58078MdEuM.roa (raw, json)
Hash identifier: 408wZGmQlYpYy1PNsd7uDhqVgcY+SgXmpbNJUr/8m+M=
Subject key identifier: E3:99:22:32:80:CE:EA:E6:52:4E:4F:61:7F:9F:34:EF:C3:1D:12:E3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F617EC14CA6D43BD957DAD91E434B41A7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/45kiMoDO6uZSTk9hf58078MdEuM.roa
Signing time: Tue 14 Jul 2026 16:38:44 +0000
ROA not before: Tue 14 Jul 2026 16:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 31.59.161.0/24 maxlen: 24
94.183.156.0/24 maxlen: 24
217.60.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jul 2026 07:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:7e:c1:4c:a6:d4:3b:d9:57:da:d9:1e:43:4b:41:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 14 16:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e399223280ceeae6524e4f617f9f34efc31d12e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:6e:56:51:56:d0:16:39:b4:ab:a2:fa:e0:
d8:d8:09:89:ef:11:4c:89:d8:70:e1:59:1b:de:c6:
a9:ae:16:51:7f:e5:d7:f2:5e:24:2a:f2:a1:10:e6:
74:4b:c9:e4:3f:4d:1c:39:14:17:1a:80:86:71:ba:
d1:83:f4:54:b0:c2:ad:1e:88:a0:ef:ec:87:76:79:
64:7f:9b:8e:aa:c4:de:85:8e:4d:69:da:dc:d5:33:
66:b5:f0:e2:fd:46:ea:4b:97:ef:1f:1d:36:9d:b4:
c6:b8:9d:76:aa:db:6d:89:1d:8c:e5:ae:9c:e3:00:
b0:01:69:2d:f7:a1:47:62:81:87:95:c1:b8:31:7a:
22:8f:d8:3d:90:74:a2:85:09:58:07:2a:22:8f:7a:
d5:05:ab:50:bf:23:6c:e9:ea:d8:32:4e:e3:1c:ed:
eb:38:7e:8d:a5:69:54:90:15:ca:36:41:2e:21:5a:
df:26:3e:52:db:43:02:13:81:94:68:dd:28:d5:43:
a1:ca:f6:b9:ff:9c:09:a0:68:48:df:5c:7f:1a:b1:
2c:0f:32:c9:ba:8a:2a:0a:5c:72:1f:6c:20:91:61:
1c:20:55:24:96:12:e9:9c:c3:8b:88:09:e8:12:87:
03:6c:d5:e8:6f:39:95:64:8b:d9:26:21:3c:e7:37:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:99:22:32:80:CE:EA:E6:52:4E:4F:61:7F:9F:34:EF:C3:1D:12:E3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/45kiMoDO6uZSTk9hf58078MdEuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.161.0/24
94.183.156.0/24
217.60.27.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:2e:10:4e:16:c7:fe:c8:dd:57:99:18:2f:49:10:82:e2:50:
0b:eb:2e:54:8a:42:0c:e5:9b:f3:f5:55:44:bd:4e:93:a2:9a:
34:96:09:4b:f1:5e:47:29:39:01:d7:8e:0d:a7:b4:d0:1a:84:
b1:c6:3c:7e:5d:1b:98:67:7d:76:7e:5c:45:44:ff:44:1c:05:
e7:9a:cc:12:05:83:a3:6b:2d:a2:a5:3e:a0:e4:1f:bc:04:5b:
b0:f2:38:3e:f1:98:8f:41:c1:97:b8:f9:ac:e7:23:63:e7:65:
c8:14:46:e9:5c:61:86:c8:2a:07:4c:25:f7:75:df:49:b6:d0:
59:65:7b:57:aa:00:d4:05:a5:f3:e9:a2:f6:33:67:84:96:ae:
79:e1:b6:50:f8:b3:a8:4e:5c:1e:d2:d5:2c:75:f9:83:0f:38:
3a:f1:6c:50:51:2d:d9:ed:db:7c:ab:ba:89:8d:dc:31:1c:2b:
e6:69:1c:72:46:44:50:f1:01:96:60:48:da:7b:9a:6a:61:db:
4e:56:5b:6c:05:7e:94:7f:28:02:a3:26:e3:40:88:ac:4a:df:
05:1c:d6:b5:48:55:de:3e:93:b2:cb:28:45:dd:7f:a6:b2:07:
1a:2a:60:d9:70:f8:c1:f0:f1:8e:a0:c2:45:08:84:24:68:a6:
76:d7:d5:2f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ9hfsFMptQ72Vfa2R5DS0GnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzE0MTYzODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzk5MjIzMjgwY2VlYWU2NTI0ZTRmNjE3ZjlmMzRlZmMzMWQxMmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuJuVlFW0BY5tKui+uDY2AmJ7xFM
idhw4Vkb3saprhZRf+XX8l4kKvKhEOZ0S8nkP00cORQXGoCGcbrRg/RUsMKtHoig
7+yHdnlkf5uOqsTehY5Nadrc1TNmtfDi/UbqS5fvHx02nbTGuJ12qtttiR2M5a6c
4wCwAWkt96FHYoGHlcG4MXoij9g9kHSihQlYByoij3rVBatQvyNs6erYMk7jHO3r
OH6NpWlUkBXKNkEuIVrfJj5S20MCE4GUaN0o1UOhyva5/5wJoGhI31x/GrEsDzLJ
uooqClxyH2wgkWEcIFUklhLpnMOLiAnoEocDbNXobzmVZIvZJiE85zdyRwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOOZIjKAzurmUk5PYX+fNO/DHRLjMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNDVraU1vRE82dVpTVGs5aGY1ODA3OE1kRXVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzuhAwQA
XrecAwQA2TwbMA0GCSqGSIb3DQEBCwUAA4IBAQCuLhBOFsf+yN1XmRgvSRCC4lAL
6y5UikIM5Zvz9VVEvU6Topo0lglL8V5HKTkB144Np7TQGoSxxjx+XRuYZ312flxF
RP9EHAXnmswSBYOjay2ipT6g5B+8BFuw8jg+8ZiPQcGXuPms5yNj52XIFEbpXGGG
yCoHTCX3dd9JttBZZXtXqgDUBaXz6aL2M2eElq554bZQ+LOoTlwe0tUsdfmDDzg6
8WxQUS3Z7dt8q7qJjdwxHCvmaRxyRkRQ8QGWYEjae5pqYdtOVltsBX6UfygCoybj
QIisSt8FHNa1SFXePpOyyyhF3X+msgcaKmDZcPjB8PGOoMJFCIQkaKZ219Uv
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:16 2026 by rpki-client