Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/k3p2-IPI15oJvXF90Qvz3rf7gqE.roa
File: k3p2-IPI15oJvXF90Qvz3rf7gqE.roa (raw, json)
Hash identifier: E+MNSmoz3Y6HV5t4XiQH7HlXERy4ISUh+Kr74F2Yo34=
Subject key identifier: 93:7A:76:F8:83:C8:D7:9A:09:BD:71:7D:D1:0B:F3:DE:B7:FB:82:A1
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 01A0EEEACA3EC53DF6E0A1583D83607A2BB8
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/k3p2-IPI15oJvXF90Qvz3rf7gqE.roa
Signing time: Tue 29 Sep 2026 20:45:59 +0000
ROA not before: Tue 29 Sep 2026 20:45:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12722
IP address blocks: 46.150.248.0/24 maxlen: 24
46.150.249.0/24 maxlen: 24
85.235.81.0/24 maxlen: 24
91.241.181.0/24 maxlen: 24
176.103.82.0/24 maxlen: 24
192.109.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Sep 2026 16:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:ea:ca:3e:c5:3d:f6:e0:a1:58:3d:83:60:7a:2b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Sep 29 20:45:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=937a76f883c8d79a09bd717dd10bf3deb7fb82a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:76:6d:54:c4:2f:80:ed:f7:2e:a2:7f:ea:
41:cd:02:c2:6e:51:69:70:56:df:5d:97:84:2e:11:
3d:93:5e:ef:01:e6:73:48:06:d8:49:a3:8a:09:06:
f2:6d:9b:4c:07:b9:30:fd:f7:99:94:80:dc:74:70:
e6:fe:93:01:2a:6f:3b:99:e9:e3:3c:8e:90:5d:35:
c7:1d:e5:64:58:22:ca:00:9f:0e:47:75:09:68:27:
5a:85:3c:84:c3:33:3a:d3:da:d0:5b:f3:3a:d1:d5:
f9:d0:08:73:8d:7f:da:30:4f:e7:89:f2:8c:20:6d:
f0:16:ae:7a:85:8f:ae:28:61:75:ec:6d:e3:b6:7b:
33:3e:5a:56:66:f6:5c:71:34:93:30:f2:3c:16:67:
98:01:ca:5a:7c:1a:15:ba:79:8e:82:92:2a:3a:46:
02:1c:50:55:73:60:8d:67:38:b0:e7:99:42:ec:2b:
8f:66:0f:0f:cf:f5:19:88:a5:bf:f3:48:13:ba:d4:
c4:5d:19:a1:81:0d:9b:eb:7d:c3:dc:66:34:d3:30:
00:e9:2a:0e:0a:22:bb:57:78:ec:d8:3d:38:bb:82:
4c:76:e4:0f:18:2f:dc:1f:b7:bb:e9:c6:72:74:ab:
19:34:83:b0:96:bf:83:b5:85:79:fc:6c:0e:7f:67:
4b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7A:76:F8:83:C8:D7:9A:09:BD:71:7D:D1:0B:F3:DE:B7:FB:82:A1
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/k3p2-IPI15oJvXF90Qvz3rf7gqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.248.0/23
85.235.81.0/24
91.241.181.0/24
176.103.82.0/24
192.109.97.0/24
Signature Algorithm: sha256WithRSAEncryption
01:db:e2:59:7a:c4:d6:0f:36:a3:2b:dd:e7:75:21:60:f0:45:
0a:d5:54:78:2e:5b:99:63:52:a4:b8:35:1b:91:59:3b:b5:f7:
c4:da:c3:f4:8d:d5:94:88:5a:72:37:b0:e9:5f:4e:fb:3a:3b:
39:52:b5:74:37:63:55:74:70:7c:37:f5:74:85:57:00:7f:8e:
c7:40:c1:70:be:be:81:f9:fc:23:79:ab:f8:16:9b:23:c5:a3:
9e:69:a7:ac:3f:0f:35:cf:b7:76:dc:cf:b4:21:48:05:2f:66:
5c:ff:77:a5:00:25:34:bb:89:93:49:f7:14:6b:9f:ab:6d:28:
e8:82:a9:cc:3a:f1:6d:6a:2a:ff:86:3f:6b:b8:a8:93:73:6c:
ee:c6:72:11:88:35:55:78:c9:ed:ca:27:cd:4a:8b:b1:ac:05:
57:79:11:dc:72:87:7d:25:8e:e5:b6:b5:57:23:8e:f2:58:b4:
4f:fe:29:d2:d3:70:9d:b2:31:46:65:a7:25:34:6a:b0:40:e3:
24:67:13:1c:ad:a5:2f:47:1e:ed:02:a6:ae:2d:6d:b5:25:7c:
78:39:ea:63:af:3e:20:9b:e8:95:99:64:e3:12:7d:56:2d:5a:
8b:6a:cf:92:27:e3:8e:54:00:4a:07:63:f2:b3:b4:83:de:f1:
cf:50:06:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:07:30 2026 by rpki-client