Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fs-EZdEiYd0MTR9fBPBPAJ3FHfY.roa
File: fs-EZdEiYd0MTR9fBPBPAJ3FHfY.roa (raw, json)
Hash identifier: NEDmzhYqYprUf3N1zhJiwPzk0bWHL7ApNNQ+caJ1psM=
Subject key identifier: 7E:CF:84:65:D1:22:61:DD:0C:4D:1F:5F:04:F0:4F:00:9D:C5:1D:F6
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A18BDF9D03CE66E3B0BC471D5D118C2829
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fs-EZdEiYd0MTR9fBPBPAJ3FHfY.roa
Signing time: Fri 30 Oct 2026 08:14:10 +0000
ROA not before: Fri 30 Oct 2026 08:14:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
82.115.9.0/24 maxlen: 24
89.251.10.0/24 maxlen: 24
103.25.85.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
178.173.232.0/24 maxlen: 24
185.215.247.0/24 maxlen: 24
185.231.172.0/24 maxlen: 24
185.231.173.0/24 maxlen: 24
188.209.156.0/22 maxlen: 24
202.133.90.0/23 maxlen: 24
212.90.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Nov 2026 08:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:df:9d:03:ce:66:e3:b0:bc:47:1d:5d:11:8c:28:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 30 08:14:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ecf8465d12261dd0c4d1f5f04f04f009dc51df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:80:07:ae:39:52:df:69:b7:67:64:74:70:ba:
ad:b7:c9:52:a1:e3:97:40:fa:61:c4:0f:93:d1:80:
42:93:b7:e6:eb:a0:58:10:02:c6:c3:0b:ac:3a:c6:
b5:bc:9f:24:34:73:56:60:ca:f7:e4:15:ed:3c:40:
7a:a1:82:2f:72:40:c7:e6:7c:c9:33:73:fa:64:56:
0d:40:17:91:e0:d2:42:2a:35:17:bf:72:18:01:fa:
6f:1c:a6:55:11:ec:48:9e:a3:b0:d4:71:f7:00:b4:
b4:71:b0:b4:fd:6b:1a:19:9b:1b:8d:ce:fc:ed:43:
72:9a:97:bb:bc:1a:da:32:f9:3e:21:52:42:83:b6:
6e:72:e4:3d:1f:0b:c5:bc:75:27:39:88:8c:24:0c:
02:ec:07:3e:fd:31:b1:23:d9:28:a2:7e:e7:dd:83:
25:48:f7:cb:8f:68:39:df:4a:1f:b2:97:f0:45:20:
02:ac:9e:24:4e:18:32:ef:78:00:82:b9:91:ed:57:
1e:38:e7:9f:a1:22:77:ea:60:d7:63:69:ea:de:75:
7a:3a:aa:a6:e7:57:7c:f9:78:9e:79:4a:3f:00:dd:
35:78:8c:73:c1:37:23:29:b2:8c:f2:d9:01:52:18:
60:85:45:e7:04:22:b4:dd:a7:59:f3:3f:1b:02:7c:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CF:84:65:D1:22:61:DD:0C:4D:1F:5F:04:F0:4F:00:9D:C5:1D:F6
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fs-EZdEiYd0MTR9fBPBPAJ3FHfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
82.115.9.0/24
89.251.10.0/24
103.25.85.0/24
159.255.32.0/21
178.173.232.0/24
185.215.247.0/24
185.231.172.0/23
188.209.156.0/22
202.133.90.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:ee:db:6e:8c:7b:2c:3a:ea:00:20:ac:29:92:e9:8f:b7:d2:
9f:ed:c1:75:d4:fb:29:a4:0a:93:ac:81:57:d4:f3:54:57:72:
8b:ff:e9:d6:6e:b7:c5:08:b9:0b:25:f1:d1:9d:a0:a7:68:02:
10:dc:c4:90:a9:07:4d:74:98:92:6f:ed:61:6c:cc:2e:45:c9:
9d:cd:99:97:1e:6f:60:ea:c8:0c:49:de:ca:b4:4d:89:49:67:
c8:de:29:1f:88:2b:3d:d1:a1:80:1e:a0:7a:cb:5c:55:d8:d7:
2b:c9:b8:ff:60:52:3d:b4:87:eb:73:e2:62:f3:fa:cd:ad:1b:
47:9e:39:00:86:a4:28:4a:46:a4:5c:ed:d3:55:28:b5:52:4e:
f3:66:6f:1a:6d:42:18:43:12:8a:69:30:66:34:2c:f8:cd:7e:
8a:56:3e:d3:06:a4:08:69:8b:86:8c:36:50:ab:a4:87:98:3d:
be:99:99:f7:ef:04:ee:43:40:e1:29:37:38:ba:c9:e6:e5:d6:
ed:ba:1e:fd:d5:d9:2d:bc:ef:57:98:c8:8e:85:04:ef:8d:a8:
e1:18:88:c6:5e:94:ff:9c:a0:67:bf:b1:3b:e1:bf:de:87:6f:
e5:ca:ff:33:af:62:7b:8c:96:a2:e0:08:b5:88:59:96:37:68:
3f:3b:0f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:11:03 2026 by rpki-client