Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ff2_2Zu4t_PhM1yK-cpXXwvnY1I.roa
File: Ff2_2Zu4t_PhM1yK-cpXXwvnY1I.roa (raw, json)
Hash identifier: w3vGHb4WYkhC+iBLEsluealYXZvDrADYyROq5IQ24o0=
Subject key identifier: 15:FD:BF:D9:9B:B8:B7:F3:E1:33:5C:8A:F9:CA:57:5F:0B:E7:63:52
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019622005FCF459F5B059FBE4CF197AC37BE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ff2_2Zu4t_PhM1yK-cpXXwvnY1I.roa
Signing time: Thu 10 Apr 2025 23:19:31 +0000
ROA not before: Thu 10 Apr 2025 23:19:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.231.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.220.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
194.36.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 23:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:22:00:5f:cf:45:9f:5b:05:9f:be:4c:f1:97:ac:37:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 10 23:19:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15fdbfd99bb8b7f3e1335c8af9ca575f0be76352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:29:21:0c:b0:2d:80:47:f5:a6:ee:63:97:21:
36:44:6f:51:1c:3b:71:40:86:42:b0:c6:36:bc:7b:
6e:18:5f:d0:5d:cf:62:fc:b1:90:86:c8:21:ac:d1:
7f:db:f6:31:9e:22:bd:ff:a7:70:e1:2d:7b:2b:cc:
00:59:c1:18:b1:d4:f9:60:aa:5b:ad:c8:90:b0:dc:
be:c5:d8:61:99:30:d9:1b:92:d1:c6:4b:70:53:fd:
dd:6d:4c:ba:5b:72:3d:da:00:14:1f:c7:2b:12:37:
c7:2b:3a:76:94:26:c0:bd:46:9c:55:2e:db:dd:cf:
bf:64:d2:87:ae:3f:9b:b3:c4:8a:99:ad:7a:53:a4:
df:76:c7:ad:a4:e2:bb:eb:ca:82:f5:54:7b:8b:5f:
10:89:77:7e:64:d7:1d:12:4c:ad:c9:6d:e1:c3:7f:
73:34:5f:74:fa:35:cf:11:62:4e:d3:2c:c7:f3:64:
b7:66:7d:78:f4:f2:0e:47:da:bb:5c:9e:71:ac:ba:
9f:95:91:41:78:a5:94:f8:f7:ef:8a:b0:b5:85:eb:
56:60:44:3c:31:7a:30:26:ba:f0:3c:9f:2b:d9:c5:
ae:9a:f2:87:7c:e9:56:f9:e7:cc:99:55:4e:de:2f:
89:fd:cf:da:7c:8d:71:29:0e:7a:1a:7e:95:d2:0e:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FD:BF:D9:9B:B8:B7:F3:E1:33:5C:8A:F9:CA:57:5F:0B:E7:63:52
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ff2_2Zu4t_PhM1yK-cpXXwvnY1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
14.102.231.0/24
77.111.96.0/22
77.111.102.0/23
94.229.212.0/24
94.229.220.0/24
94.229.223.0/24
194.36.32.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f1:bd:19:99:4a:9e:54:58:62:32:f1:99:89:d1:c9:5a:0b:
21:a6:68:9e:04:3c:8c:f0:41:21:98:89:eb:9f:38:d2:80:c8:
05:5d:01:95:01:09:79:7b:06:69:b5:d5:1a:9e:38:5e:b5:e4:
b9:dc:78:cd:30:5f:7a:88:a3:b2:ca:a2:70:7a:84:64:97:c8:
13:51:55:22:78:f5:83:7a:28:13:ef:72:6f:15:86:2b:cc:3f:
cd:f6:a2:05:7f:02:96:71:ae:f3:7a:4b:99:08:e3:43:ea:d3:
a6:4b:ee:75:1b:83:83:ca:53:a8:1a:67:a2:11:4d:91:1a:d0:
82:62:ba:ea:8d:f1:fd:42:7d:c7:f6:90:cb:0f:55:92:29:be:
44:f7:cd:df:90:66:d8:52:17:df:39:0d:67:94:ef:14:68:8a:
14:e7:d5:72:58:e4:70:f3:ef:d4:e7:87:48:35:b6:1c:98:db:
c0:0f:58:ff:7d:64:ff:52:c9:73:09:af:cd:75:01:96:13:0c:
51:21:1b:d4:eb:7c:be:1b:d7:b7:71:86:19:16:76:3f:c1:c1:
70:65:bb:d9:dc:0a:80:41:c6:17:6f:64:c2:f0:63:11:54:4d:
69:11:c8:6f:2d:62:39:64:f4:20:91:29:1e:9c:fb:c3:75:7d:
b7:55:86:7c
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZYiAF/PRZ9bBZ++TPGXrDe+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwNDEwMjMxOTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWZkYmZkOTliYjhiN2YzZTEzMzVjOGFmOWNhNTc1ZjBiZTc2MzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CkhDLAtgEf1pu5jlyE2RG9RHDtx
QIZCsMY2vHtuGF/QXc9i/LGQhsghrNF/2/YxniK9/6dw4S17K8wAWcEYsdT5YKpb
rciQsNy+xdhhmTDZG5LRxktwU/3dbUy6W3I92gAUH8crEjfHKzp2lCbAvUacVS7b
3c+/ZNKHrj+bs8SKma16U6TfdsetpOK768qC9VR7i18QiXd+ZNcdEkytyW3hw39z
NF90+jXPEWJO0yzH82S3Zn149PIOR9q7XJ5xrLqflZFBeKWU+PfvirC1hetWYEQ8
MXowJrrwPJ8r2cWumvKHfOlW+efMmVVO3i+J/c/afI1xKQ56Gn6V0g5TJQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFBX9v9mbuLfz4TNcivnKV18L52NSMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvRmYyXzJadTR0X1BoTTF5Sy1jcFhYd3ZuWTFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBDmbiAwQA
DmbnAwQCTW9gAwQBTW9mAwQAXuXUAwQAXuXcAwQAXuXfAwQAwiQgMA0GCSqGSIb3
DQEBCwUAA4IBAQBR8b0ZmUqeVFhiMvGZidHJWgshpmieBDyM8EEhmInrnzjSgMgF
XQGVAQl5ewZptdUanjheteS53HjNMF96iKOyyqJweoRkl8gTUVUiePWDeigT73Jv
FYYrzD/N9qIFfwKWca7zekuZCOND6tOmS+51G4ODylOoGmeiEU2RGtCCYrrqjfH9
Qn3H9pDLD1WSKb5E983fkGbYUhffOQ1nlO8UaIoU59VyWORw8+/U54dINbYcmNvA
D1j/fWT/UslzCa/NdQGWEwxRIRvU63y+G9e3cYYZFnY/wcFwZbvZ3AqAQcYXb2TC
8GMRVE1pEchvLWI5ZPQgkSkenPvDdX23VYZ8
-----END CERTIFICATE-----
Generated at Thu Jun 19 11:40:22 2025 by rpki-client