Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/cmOcVJUKbyFpM84xRVhA7JIMh0U.roa
File: cmOcVJUKbyFpM84xRVhA7JIMh0U.roa (raw, json)
Hash identifier: w5lyGV8Lt+0ecxFt/aZngM0yqlHuC/psH+2cNZ/pyAA=
Subject key identifier: 72:63:9C:54:95:0A:6F:21:69:33:CE:31:45:58:40:EC:92:0C:87:45
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019A2A7F1734A8F935E0C8E97E0ACE1694B3
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/cmOcVJUKbyFpM84xRVhA7JIMh0U.roa
Signing time: Tue 28 Oct 2025 11:06:03 +0000
ROA not before: Tue 28 Oct 2025 11:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.149.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb05::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 04 Nov 2025 08:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7f:17:34:a8:f9:35:e0:c8:e9:7e:0a:ce:16:94:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 28 11:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72639c54950a6f216933ce31455840ec920c8745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b3:f7:7a:4b:b2:ba:70:06:1b:bc:1b:8b:f3:
e1:7a:b4:1e:22:22:13:24:e4:20:f7:e4:98:98:6b:
bb:b7:93:bc:c3:ce:9f:98:50:f3:05:4b:75:b5:68:
fc:0d:80:4d:12:b1:d9:1e:e7:95:be:95:09:ea:1a:
f0:94:c4:9f:f8:1c:b2:70:10:0c:2f:79:da:3c:cb:
83:0c:c5:d0:67:ec:b5:a0:39:a1:f9:d2:5b:4b:05:
6c:24:e7:31:fa:b8:17:d5:88:0c:a7:ca:bd:f5:61:
2e:2d:75:ab:36:04:18:5f:95:3d:8f:30:e6:b2:64:
4a:a0:16:88:71:c2:be:53:ae:5c:cf:90:c8:a8:3c:
66:43:03:c3:fe:0b:6d:48:e1:da:51:f3:5b:e0:33:
43:40:3b:cb:e1:4a:f0:7e:6e:f5:24:4e:dd:66:23:
91:e2:45:2e:33:3b:df:bf:f5:52:0f:49:04:13:21:
14:69:57:38:54:57:36:52:fe:c0:fc:29:d1:7b:4e:
3f:6f:55:f1:97:a0:9b:17:5e:ab:84:14:4b:11:59:
a2:fc:cf:99:34:c8:43:d4:51:d2:d2:0e:2c:71:13:
a7:40:b8:38:55:c5:22:66:4d:ac:19:71:79:04:2c:
99:4b:b0:6a:e1:b6:51:d5:47:e3:6e:81:a6:1c:02:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:63:9C:54:95:0A:6F:21:69:33:CE:31:45:58:40:EC:92:0C:87:45
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/cmOcVJUKbyFpM84xRVhA7JIMh0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/22
45.136.4.0/24
45.141.148.0/23
45.147.44.0/24
77.83.200.0-77.83.202.255
194.116.237.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:7::/48
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
94:51:2f:ad:ae:1e:9a:a3:40:da:d7:13:3b:6a:a3:11:b2:06:
95:4d:a2:de:75:fa:66:a4:59:ef:61:c4:14:39:ca:53:0c:a2:
0e:d8:39:3d:f9:70:4e:4c:b2:c5:f5:3a:56:27:1c:3f:05:71:
d3:e6:f7:af:91:a3:98:bc:f8:ad:b0:b8:60:a2:c4:e2:d3:03:
7a:77:bd:67:40:d5:15:8e:14:1d:32:d6:64:e7:8a:65:21:cb:
69:13:09:1f:ce:d0:7f:8a:fa:01:cb:7c:7c:d5:48:3e:aa:13:
61:0a:6c:ea:c8:cd:e5:7f:99:16:f4:2e:21:04:5b:d3:c4:d8:
78:a1:46:cf:ef:d7:8d:11:e0:40:6e:5a:c0:cb:6f:86:48:03:
0b:63:5f:ae:a4:39:50:54:32:22:a7:d9:c4:9f:03:a4:38:cc:
00:59:3b:0b:eb:1e:00:71:9e:22:28:0e:0d:ef:42:cd:bc:ef:
74:21:a8:52:9e:6b:37:aa:44:48:1d:72:8f:44:d0:11:a0:58:
3f:90:ef:16:47:07:51:9a:31:e1:21:80:b6:c9:08:a1:fb:8f:
d6:bd:08:b4:a2:4d:0e:d4:6c:86:fa:41:75:e7:f9:7c:69:a0:
5e:59:7b:dc:c0:97:a6:6d:68:50:03:b3:5a:62:e6:5a:96:c9:
18:80:80:30
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgISAZoqfxc0qPk14MjpfgrOFpSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjUxMDI4MTEwNjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjYzOWM1NDk1MGE2ZjIxNjkzM2NlMzE0NTU4NDBlYzkyMGM4NzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rP3ekuyunAGG7wbi/PherQeIiIT
JOQg9+SYmGu7t5O8w86fmFDzBUt1tWj8DYBNErHZHueVvpUJ6hrwlMSf+ByycBAM
L3naPMuDDMXQZ+y1oDmh+dJbSwVsJOcx+rgX1YgMp8q99WEuLXWrNgQYX5U9jzDm
smRKoBaIccK+U65cz5DIqDxmQwPD/gttSOHaUfNb4DNDQDvL4Urwfm71JE7dZiOR
4kUuMzvfv/VSD0kEEyEUaVc4VFc2Uv7A/CnRe04/b1Xxl6CbF16rhBRLEVmi/M+Z
NMhD1FHS0g4scROnQLg4VcUiZk2sGXF5BCyZS7Bq4bZR1UfjboGmHAICpQIDAQAB
o4ICnDCCApgwHQYDVR0OBBYEFHJjnFSVCm8haTPOMUVYQOySDIdFMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvY21PY1ZKVUtieUZwTTg0eFJWaEE3SklNaDBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjBMBAIAATBGMAwDBAAF
tGkDBAIFtGgDBAItgwADBAAtiAQDBAEtjZQDBAAtkywwDAMEA01TyAMEAE1TygME
AMJ07QMEAMKSJAMEAMKSLzBOBAIAAjBIAwUDKgmHgAMFAyoPtwADBQMqD+kAAwUD
Kg/rAAMFAyoP7QADBQMqD/kAAwcAKhOkQAAHAwUAKhOkQQMFACoTpEUDBQAqE6RH
MA0GCSqGSIb3DQEBCwUAA4IBAQCUUS+trh6ao0Da1xM7aqMRsgaVTaLedfpmpFnv
YcQUOcpTDKIO2Dk9+XBOTLLF9TpWJxw/BXHT5vevkaOYvPitsLhgosTi0wN6d71n
QNUVjhQdMtZk54plIctpEwkfztB/ivoBy3x81Ug+qhNhCmzqyM3lf5kW9C4hBFvT
xNh4oUbP79eNEeBAblrAy2+GSAMLY1+upDlQVDIip9nEnwOkOMwAWTsL6x4AcZ4i
KA4N70LNvO90IahSnms3qkRIHXKPRNARoFg/kO8WRwdRmjHhIYC2yQih+4/WvQi0
ok0O1GyG+kF15/l8aaBeWXvcwJembWhQA7NaYuZalskYgIAw
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:54:40 2025 by rpki-client