Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8xmVL8dCw9C_U4cGHVQ9EBHDwkk.roa
File: 8xmVL8dCw9C_U4cGHVQ9EBHDwkk.roa (raw, json)
Hash identifier: Vj6O4eefcHGfO661CfxcMKKXPyNc9BCbd1xdz8qNghU=
Subject key identifier: F3:19:95:2F:C7:42:C3:D0:BF:53:87:06:1D:54:3D:10:11:C3:C2:49
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A4F2E93338A55F364869D8317D1550F6A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8xmVL8dCw9C_U4cGHVQ9EBHDwkk.roa
Signing time: Tue 04 Nov 2025 14:04:03 +0000
ROA not before: Tue 04 Nov 2025 14:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201178
IP address blocks: 45.84.220.0/24 maxlen: 24
45.84.221.0/24 maxlen: 24
91.92.70.0/24 maxlen: 24
193.148.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Nov 2025 07:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2e:93:33:8a:55:f3:64:86:9d:83:17:d1:55:0f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 4 14:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f319952fc742c3d0bf5387061d543d1011c3c249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dd:3b:4a:dd:90:7a:58:79:93:ac:68:f9:a2:
42:94:2f:a0:31:53:3c:57:1c:b8:4f:48:b5:48:73:
ac:f4:65:d1:6b:38:90:ee:9b:2c:9b:1a:9e:b7:aa:
37:f4:b1:66:6f:5e:d4:92:7a:a6:73:e6:62:a5:b4:
6a:89:45:22:da:75:be:32:9d:ac:aa:a4:c9:5e:2f:
01:22:d9:a6:7b:3a:b8:2a:76:a4:92:48:b3:c7:db:
ea:04:85:7c:47:2e:6e:e7:fb:e1:12:07:3f:f6:a5:
f1:86:e9:15:e4:69:22:36:e1:1a:c9:eb:33:07:19:
a2:df:3f:7f:62:48:2b:8b:ba:c3:eb:5b:2e:d6:83:
5e:7f:36:93:77:a3:b1:d7:c7:9c:89:73:c6:bf:ed:
48:56:11:e9:80:9c:dd:eb:a1:66:4f:d1:ee:ae:98:
fc:6e:a6:59:ba:00:b5:dc:69:7c:5a:83:ad:b5:67:
f2:a9:16:15:c1:cb:e7:49:9d:9b:5e:15:ad:9a:13:
a5:79:29:1b:5f:71:59:02:b7:55:d8:be:18:2d:a9:
b0:93:38:46:9d:67:b3:c2:91:65:03:1c:e2:dc:ce:
1c:1f:c5:df:24:67:66:13:b0:f8:b9:a6:67:12:94:
fb:d8:c8:de:1e:da:73:60:c3:4c:01:e3:d3:a6:68:
fd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:19:95:2F:C7:42:C3:D0:BF:53:87:06:1D:54:3D:10:11:C3:C2:49
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8xmVL8dCw9C_U4cGHVQ9EBHDwkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.220.0/23
91.92.70.0/24
193.148.252.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f2:f4:75:2c:47:73:31:b0:6e:7b:64:35:25:80:60:1d:96:
54:6e:c1:56:eb:18:cd:6c:97:bd:b2:13:14:f5:a5:53:3f:e3:
28:2a:d5:1d:44:1a:17:06:fc:22:46:02:4f:87:6a:c1:eb:d8:
a8:d5:6c:02:61:db:fa:1d:64:88:e3:c2:d4:6a:97:2f:14:fe:
6d:4c:ba:bf:fc:09:22:e2:da:9b:7f:e3:54:23:d7:d8:26:ee:
7d:b3:5d:7b:24:12:fa:5f:48:d1:29:07:e9:11:30:61:85:35:
55:df:46:c5:6d:5e:1d:46:98:fa:51:96:b3:49:6d:e1:97:f4:
f9:62:ea:79:1a:75:28:c5:e8:28:d9:4a:14:95:5b:7d:93:99:
5e:f8:be:e6:7b:8e:35:a9:be:d9:44:d0:45:2e:05:14:47:11:
d1:d7:e9:8e:4e:54:17:ea:0d:ce:19:4c:06:4c:e9:b7:8c:3f:
f8:fb:c6:4e:a5:56:46:9a:8a:66:56:3d:2d:c7:01:b4:30:4e:
28:6e:6f:b1:78:86:6c:0b:f6:b8:2a:ba:f8:70:b8:7a:e1:a9:
e6:21:54:b4:88:93:97:c5:da:f4:0a:c3:a9:cf:d2:d7:fa:7a:
cf:d7:93:39:a3:6a:7e:96:3a:16:46:57:d5:be:ae:89:6e:7b:
76:75:b4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:52:30 2025 by rpki-client