Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VNJ1RYJTSnb6FMRYdXxsIIxqkPA.roa
File: VNJ1RYJTSnb6FMRYdXxsIIxqkPA.roa (raw, json)
Hash identifier: CWo/3uKVxBhQZJ1/zwKepnELUPyZPOa6vieOP+W7Fl4=
Subject key identifier: 54:D2:75:45:82:53:4A:76:FA:14:C4:58:75:7C:6C:20:8C:6A:90:F0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019E54C06CA426489F5A5DB6A5D325B2CE12
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VNJ1RYJTSnb6FMRYdXxsIIxqkPA.roa
Signing time: Sat 23 May 2026 12:12:37 +0000
ROA not before: Sat 23 May 2026 12:12:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 62.76.226.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
195.133.56.0/24 maxlen: 24
195.133.60.0/24 maxlen: 24
195.133.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jun 2026 07:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:54:c0:6c:a4:26:48:9f:5a:5d:b6:a5:d3:25:b2:ce:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 23 12:12:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54d2754582534a76fa14c458757c6c208c6a90f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:10:eb:8f:6f:03:89:03:7b:dc:93:44:a2:
16:41:73:5f:cf:8e:6a:ba:f6:c6:c2:b5:a5:8d:84:
e1:5e:5c:ff:b7:d3:04:6d:53:0c:de:de:25:1a:b4:
e4:64:aa:ff:de:b0:1c:f2:2b:99:4d:86:e6:d7:8c:
80:a0:e7:c9:a4:54:35:f9:5e:cc:09:d2:e1:35:cc:
43:c1:9b:a2:29:b2:aa:d9:40:48:d7:27:bd:7a:94:
44:ed:92:f9:21:27:41:47:7e:8a:20:6d:92:23:bd:
9c:cd:d1:64:d5:65:26:2c:9a:42:9b:48:28:38:54:
e4:7c:b8:7f:f6:44:26:8b:36:80:f1:4a:e6:43:6d:
0b:26:2c:21:f5:09:02:37:bb:52:48:b4:b9:4d:b4:
bf:2a:43:55:f4:da:75:16:82:82:49:75:1e:11:fa:
bd:e7:c8:6b:b6:ea:b6:8a:93:06:97:89:14:7a:f8:
f9:80:66:39:5a:36:7f:e0:f3:d1:9d:34:2c:f1:b2:
67:05:b8:49:73:4e:7a:5e:c8:07:27:3f:9b:20:97:
22:89:38:8c:52:b1:4e:65:d7:75:8e:b0:98:88:67:
7f:5d:86:87:b0:84:6c:2d:60:6f:80:ba:23:7f:20:
e3:5e:d6:d7:d4:cc:61:1d:22:22:4c:f7:a7:0e:fa:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D2:75:45:82:53:4A:76:FA:14:C4:58:75:7C:6C:20:8C:6A:90:F0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VNJ1RYJTSnb6FMRYdXxsIIxqkPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
192.124.188.0/24
194.87.3.0/24
194.87.7.0/24
194.87.36.0/24
194.87.90.0/24
194.87.165.0-194.87.166.255
195.133.56.0/24
195.133.60.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:9b:cf:90:f4:3a:a5:d5:81:6d:db:47:03:be:78:62:f8:86:
3d:f5:06:85:fa:88:2f:54:37:6f:56:4a:85:67:82:51:cf:62:
74:22:c8:85:b8:1f:06:a8:70:e8:08:b3:d1:8c:db:d5:bb:13:
be:15:6d:83:a6:e6:fc:21:a2:a3:3c:9a:d2:a5:83:3e:28:cc:
82:c1:e5:9c:fc:2d:c2:c8:2d:db:ef:90:0e:af:3d:52:07:8b:
1a:5b:39:bf:8b:da:e8:63:0e:0d:51:99:23:f0:d9:48:d3:48:
56:8d:60:10:b7:ab:9b:b7:ba:c4:1d:8e:72:4b:b7:ac:dc:63:
54:3e:23:b5:08:4b:13:62:1e:f4:09:b8:e3:a3:2b:1c:8d:02:
64:bf:b1:6b:98:86:65:2b:3c:d0:07:73:cc:42:47:32:ee:61:
67:ac:c9:a5:66:b1:f9:cd:d8:aa:30:0d:49:a3:3c:28:c5:c3:
99:fa:d8:52:e5:8c:96:37:52:25:bb:50:b5:d4:a8:70:5a:40:
19:1c:1a:7b:cb:d4:e5:b7:a3:e8:f7:b7:8f:86:fe:cb:52:5f:
ed:4f:90:8c:af:41:5c:40:f1:01:00:7d:4d:66:94:84:9c:29:
be:03:73:6c:ff:7e:7c:ed:8a:33:b2:47:33:0e:35:87:d5:d1:
fb:1e:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:15 2026 by rpki-client