Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/69DxXkT6zpZhY1Xdj5xILHtq6kY.roa
File: 69DxXkT6zpZhY1Xdj5xILHtq6kY.roa (raw, json)
Hash identifier: JQeDRdetXOU9PcwBYLpyn6iTc0L8GnC0/oQDffl5jC0=
Subject key identifier: EB:D0:F1:5E:44:FA:CE:96:61:63:55:DD:8F:9C:48:2C:7B:6A:EA:46
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D49B140193F3666691DD98DDDCB2AAFBD
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/69DxXkT6zpZhY1Xdj5xILHtq6kY.roa
Signing time: Wed 01 Apr 2026 15:37:26 +0000
ROA not before: Wed 01 Apr 2026 15:37:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 46.102.237.0/24 maxlen: 24
78.17.7.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.125.125.0/24 maxlen: 24
89.125.126.0/24 maxlen: 24
89.125.188.0/24 maxlen: 24
91.132.50.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
167.17.191.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.152.0/22 maxlen: 22
206.245.156.0/24 maxlen: 24
206.245.158.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.22.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Apr 2026 17:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:b1:40:19:3f:36:66:69:1d:d9:8d:dd:cb:2a:af:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 1 15:37:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebd0f15e44face96616355dd8f9c482c7b6aea46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5a:ef:b3:3b:1d:e9:90:67:6b:47:d4:2d:f8:
b4:dd:62:e0:00:2b:2f:79:78:56:41:31:39:85:84:
4d:b0:9f:e4:e8:a4:e5:30:d9:fd:29:24:f7:2a:bd:
30:49:ed:ae:44:41:da:3d:86:25:96:08:d2:fa:47:
dd:29:2a:a8:89:f6:9a:40:d5:88:eb:0a:d1:70:7e:
e1:3e:24:4d:53:ac:d0:33:7c:44:5a:19:4a:e1:c6:
db:1c:e5:33:89:a2:1e:b5:2e:9e:4a:b0:d6:2c:6f:
cb:5b:aa:f2:8b:30:8c:f3:f9:ed:ab:17:c3:fb:70:
1a:62:6e:9c:b9:bc:c9:91:41:be:c4:89:a0:e6:aa:
90:0b:2d:41:30:fd:3f:64:20:63:16:39:42:78:59:
cd:37:94:9d:31:9c:dc:1f:88:f4:8f:23:78:bc:e7:
f9:4b:17:db:44:61:23:0a:9d:e2:34:b1:f2:f7:cf:
7d:65:fa:1e:c0:d6:f6:b9:f8:49:99:8e:a8:7b:6a:
51:ee:5b:b4:f6:d8:3d:fe:15:b2:f1:62:b5:a0:ef:
9a:29:8c:33:1f:34:41:f9:81:3f:77:b6:b1:e2:9a:
e9:76:4b:fd:ad:e7:c9:f4:be:f1:d8:fc:fa:1c:55:
1a:9b:f1:e1:92:01:f7:e5:78:e1:f8:a2:23:83:e0:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D0:F1:5E:44:FA:CE:96:61:63:55:DD:8F:9C:48:2C:7B:6A:EA:46
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/69DxXkT6zpZhY1Xdj5xILHtq6kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
78.17.7.0/24
89.34.106.0/24
89.125.125.0-89.125.126.255
89.125.188.0/24
91.132.50.0/24
93.114.183.0/24
103.245.228.0/24
167.17.191.0/24
194.58.47.0/24
206.245.152.0-206.245.156.255
206.245.158.0/24
212.192.7.0-212.192.8.255
212.192.10.0/24
212.192.22.0/24
212.192.30.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
67:9f:fa:5b:e8:76:b4:99:79:4d:8e:36:8f:c3:d6:b8:d9:15:
10:b6:3e:03:22:34:8c:58:e8:7c:20:41:f2:9b:ce:1e:dd:96:
c6:6a:78:24:5c:07:e1:0a:d2:cd:cf:9a:c5:2e:34:34:41:f0:
ff:64:09:02:f0:05:65:fa:80:f4:3b:21:c6:08:78:5c:a2:ea:
74:68:fb:e0:6c:c8:db:cb:71:ef:e5:85:b8:3b:87:68:90:73:
5c:c5:81:30:2c:fb:9a:25:a6:66:48:ab:85:95:53:65:fc:4b:
9f:97:de:95:9e:32:83:33:0f:fa:4e:f8:1e:48:ed:fd:3b:6d:
b3:32:d5:60:ff:30:b0:ee:5a:26:73:aa:8a:ca:83:f9:45:03:
1a:a2:56:1e:8f:bc:b9:61:d6:e6:a8:dc:c5:fd:d4:21:25:7e:
fd:ad:e0:df:4b:ca:ef:dc:15:7b:21:fc:65:f4:a6:f4:09:55:
a9:11:29:da:f7:19:43:85:66:ba:0c:c5:ee:55:49:24:de:8f:
a2:92:76:42:bd:f7:c1:62:a3:24:e5:bf:03:ec:22:54:e1:91:
c4:b3:6e:92:af:0a:00:0a:34:4b:95:13:87:00:7a:a6:1f:0b:
d5:25:8a:34:d6:70:a0:6e:79:80:73:4a:e2:5c:09:36:89:f2:
bf:96:01:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:55 2026 by rpki-client