Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/FE0c1VvpWzRV2ZfkFWDrtMTG7aA.roa
File: FE0c1VvpWzRV2ZfkFWDrtMTG7aA.roa (raw, json)
Hash identifier: xKTg3UgZU5B9LJC1eWYo71uat6vXqftS36KjjNPDiq4=
Subject key identifier: 14:4D:1C:D5:5B:E9:5B:34:55:D9:97:E4:15:60:EB:B4:C4:C6:ED:A0
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0197122BE0B63E877E8D2E12FEA9A8447048
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/FE0c1VvpWzRV2ZfkFWDrtMTG7aA.roa
Signing time: Tue 27 May 2025 14:35:54 +0000
ROA not before: Tue 27 May 2025 14:35:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211619
IP address blocks: 45.9.168.0/24 maxlen: 24
77.242.152.0/24 maxlen: 24
77.242.153.0/24 maxlen: 24
77.242.155.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 11:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:2b:e0:b6:3e:87:7e:8d:2e:12:fe:a9:a8:44:70:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 27 14:35:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=144d1cd55be95b3455d997e41560ebb4c4c6eda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:46:8f:00:19:45:cc:6c:9c:33:16:60:fa:
4c:e5:a5:df:10:1c:05:1a:f7:9e:18:9b:3f:80:18:
f0:47:e8:a4:1c:4f:d6:31:05:00:ed:30:1a:aa:e9:
4b:3a:52:c5:c1:f9:0f:9a:7d:ae:e1:0c:71:b3:e4:
9b:7f:26:7d:9c:63:d5:11:d6:14:4d:4d:2a:b5:cc:
ed:1d:e9:2a:9a:3e:d1:b9:63:1a:ec:7b:f3:94:56:
8f:73:03:2a:42:e7:ac:77:f8:ec:38:1e:59:18:1f:
01:ed:03:eb:cd:73:45:18:f4:76:e8:c3:6c:4e:54:
85:2c:5b:95:fb:b8:af:43:01:31:9f:35:72:ef:5a:
e2:15:2e:1f:14:d9:5e:25:b0:cc:29:dc:9f:19:1a:
08:e8:d9:bf:a6:25:a8:c0:2c:25:30:1e:ac:55:16:
23:41:d9:82:c9:eb:40:99:0d:5e:38:e2:aa:88:73:
3b:e1:b8:1e:41:24:0c:97:89:27:43:55:45:63:c8:
62:16:35:24:4b:71:71:6b:12:88:63:92:7e:0e:09:
d4:93:cf:af:0b:c6:37:46:05:e8:d1:34:a4:51:d7:
68:f0:ba:ca:bb:bb:64:70:8e:8a:7c:7e:94:2f:6b:
a5:6c:5f:b8:c6:8a:87:a2:d3:94:2e:e1:03:8e:ed:
43:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4D:1C:D5:5B:E9:5B:34:55:D9:97:E4:15:60:EB:B4:C4:C6:ED:A0
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/FE0c1VvpWzRV2ZfkFWDrtMTG7aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.168.0/24
77.242.152.0/23
77.242.155.0/24
92.52.217.0/24
Signature Algorithm: sha256WithRSAEncryption
41:aa:79:ef:ef:ef:32:10:7b:f9:ff:92:b0:39:4b:84:34:cf:
9f:28:13:ab:4c:01:e9:c6:f1:6c:f5:ac:31:da:63:64:b1:30:
db:73:e8:c2:cc:f7:1e:15:3a:89:f9:4f:93:13:b7:2a:9f:70:
a2:d9:c9:ab:7c:54:8f:a8:55:af:39:9f:54:7c:20:30:75:dc:
b1:b6:63:75:1e:16:ed:dd:71:d0:d3:61:81:99:fb:f7:b7:67:
e2:9e:ef:35:32:12:a7:47:27:c9:ab:b3:e5:cc:b0:d9:cf:9b:
16:a4:33:52:be:9c:a6:c8:88:5f:2e:c6:7a:6e:a4:42:a8:b7:
fa:f7:29:73:66:8e:02:31:9e:68:7f:7f:dd:ae:bb:42:03:84:
57:fc:fc:94:d9:65:4c:52:17:9f:91:b9:92:29:51:92:b6:5c:
10:84:69:73:2e:46:c8:b2:64:02:76:4e:f5:ae:bb:6a:34:81:
c8:5c:29:e2:ad:82:bc:72:ab:78:33:d2:cd:21:a5:ef:50:b7:
b7:a0:a1:9d:08:2f:77:ce:7a:a4:79:a2:50:e2:cd:24:8e:49:
02:3c:61:59:ca:e9:db:fd:65:61:0a:3c:a2:4f:bd:61:23:aa:
2d:c1:99:e8:76:13:89:71:48:c2:2b:a3:d1:b3:6d:4d:b2:58:
57:96:27:0f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZcSK+C2Pod+jS4S/qmoRHBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjUwNTI3MTQzNTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDRkMWNkNTViZTk1YjM0NTVkOTk3ZTQxNTYwZWJiNGM0YzZlZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwURGjwAZRcxsnDMWYPpM5aXfEBwF
GveeGJs/gBjwR+ikHE/WMQUA7TAaqulLOlLFwfkPmn2u4Qxxs+SbfyZ9nGPVEdYU
TU0qtcztHekqmj7RuWMa7HvzlFaPcwMqQuesd/jsOB5ZGB8B7QPrzXNFGPR26MNs
TlSFLFuV+7ivQwExnzVy71riFS4fFNleJbDMKdyfGRoI6Nm/piWowCwlMB6sVRYj
QdmCyetAmQ1eOOKqiHM74bgeQSQMl4knQ1VFY8hiFjUkS3FxaxKIY5J+DgnUk8+v
C8Y3RgXo0TSkUddo8LrKu7tkcI6KfH6UL2ulbF+4xoqHotOULuEDju1DewIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBRNHNVb6Vs0VdmX5BVg67TExu2gMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvRkUwYzFWdnBXelJWMlpma0ZXRHJ0TVRHN2FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQmoAwQB
TfKYAwQATfKbAwQAXDTZMA0GCSqGSIb3DQEBCwUAA4IBAQBBqnnv7+8yEHv5/5Kw
OUuENM+fKBOrTAHpxvFs9awx2mNksTDbc+jCzPceFTqJ+U+TE7cqn3Ci2cmrfFSP
qFWvOZ9UfCAwddyxtmN1Hhbt3XHQ02GBmfv3t2finu81MhKnRyfJq7PlzLDZz5sW
pDNSvpymyIhfLsZ6bqRCqLf69ylzZo4CMZ5of3/drrtCA4RX/PyU2WVMUhefkbmS
KVGStlwQhGlzLkbIsmQCdk71rrtqNIHIXCnirYK8cqt4M9LNIaXvULe3oKGdCC93
znqkeaJQ4s0kjkkCPGFZyunb/WVhCjyiT71hI6otwZnodhOJcUjCK6PRs21NslhX
licP
-----END CERTIFICATE-----
Generated at Mon Jun 30 15:05:30 2025 by rpki-client