Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C-7TZj35HnPLAO0jj1ECR80qV50.roa
File: C-7TZj35HnPLAO0jj1ECR80qV50.roa (raw, json)
Hash identifier: LyDBkqrYBZekqRkGLgLtcL/BYjiMQcoe3CLb3Mzf3IE=
Subject key identifier: 0B:EE:D3:66:3D:F9:1E:73:CB:00:ED:23:8F:51:02:47:CD:2A:57:9D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0ED9D8D93A7857F73117CFBF55A62D1C8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C-7TZj35HnPLAO0jj1ECR80qV50.roa
Signing time: Tue 29 Sep 2026 14:42:00 +0000
ROA not before: Tue 29 Sep 2026 14:42:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.253.67.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.125.102.0/24 maxlen: 24
94.125.103.0/24 maxlen: 24
94.154.160.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Oct 2026 09:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:9d:8d:93:a7:85:7f:73:11:7c:fb:f5:5a:62:d1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 29 14:42:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0beed3663df91e73cb00ed238f510247cd2a579d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:cb:ae:15:a4:65:11:93:d9:23:cd:67:54:
e6:b7:91:37:d6:e7:c1:d1:5f:13:cf:ce:72:1a:69:
8a:86:bd:eb:5c:e7:39:32:a0:81:ec:a5:24:95:07:
07:70:85:49:37:21:7c:98:26:27:7e:45:7d:29:16:
b6:e0:db:e7:39:05:be:e5:44:0e:05:e9:06:72:ab:
c5:86:a2:7e:02:ec:8f:36:3b:79:35:ca:1a:78:14:
e2:3f:18:5a:be:cd:c1:3b:db:3b:f8:ed:bc:94:70:
78:98:71:ea:30:fb:a4:a8:16:3a:40:14:a4:ea:fb:
2e:12:72:d5:ce:f0:3e:19:47:8d:36:71:b9:e4:bf:
c3:dd:a7:fd:e3:fe:ee:c4:cf:ad:43:9a:14:09:7f:
68:3a:bd:7c:d3:a0:dd:34:6c:0f:3a:77:46:ab:f8:
7c:6e:a2:09:ed:6a:c1:19:d4:a9:e2:f1:ad:ec:82:
2f:8e:4e:a4:c9:6d:dc:ef:39:a2:0d:08:0f:4d:77:
5e:1e:09:42:83:96:af:b0:a7:43:1a:22:bb:f4:d9:
6c:32:9f:af:31:6c:54:d2:52:17:1c:ba:0f:98:d6:
3d:12:04:b2:5f:6d:42:6f:e6:fa:9a:f4:ba:6c:96:
e2:3f:96:d7:81:04:aa:e6:ed:42:b5:7b:3c:c9:f0:
83:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EE:D3:66:3D:F9:1E:73:CB:00:ED:23:8F:51:02:47:CD:2A:57:9D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C-7TZj35HnPLAO0jj1ECR80qV50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.67.0/24
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.128.235.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
85.217.130.0/23
87.120.87.0/24
87.120.108.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.120.196.0/24
87.121.114.0/24
87.121.221.0/24
91.92.21.0/24
92.249.50.0/24
93.123.109.0/24
94.125.102.0/23
94.154.160.0/24
94.156.14.0/24
94.156.188.0/24
147.78.101.0/24
178.215.239.0/24
185.246.221.0/24
185.252.177.0/24
194.48.251.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:28:bb:ad:8e:d3:c9:5c:da:43:1d:26:08:9d:d9:d6:d8:7a:
b6:e9:fb:71:9f:e5:fd:d4:22:f9:70:cf:a6:ff:b9:53:fc:3e:
8f:dd:f7:56:7c:fc:37:87:93:cb:a8:b8:e5:fe:3b:3a:e7:a8:
a8:3b:9f:e5:45:6d:60:46:a4:07:28:56:ff:39:95:4e:8f:eb:
8d:ae:ec:20:83:7c:af:b5:69:d1:96:29:7d:12:37:cf:b1:ed:
db:ba:b9:11:6d:64:97:70:c1:d9:a2:b1:62:ed:7e:6b:c9:e6:
7b:02:32:01:6b:39:d0:a8:aa:38:ae:07:6e:b0:e1:23:c2:ad:
14:92:90:11:4e:f0:87:aa:fb:40:1d:c3:59:73:ca:ec:d2:f6:
f6:31:71:2a:d6:d1:a2:82:1a:bc:06:56:27:60:f6:aa:37:09:
d0:78:aa:da:18:c8:2f:ee:65:0f:5c:a5:86:68:60:88:cf:b2:
0e:2a:3e:72:b8:68:cd:18:24:19:48:c8:b3:21:22:da:04:b1:
7e:31:a2:a6:6e:8b:1f:d1:22:b7:bb:0a:0e:e8:50:4b:57:3d:
d4:ca:0d:88:d1:35:b1:47:bf:77:19:e7:e5:de:9f:04:74:22:
a3:27:7d:92:bd:d4:20:4e:79:ea:e6:da:2b:15:0b:72:83:bc:
76:cc:db:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:29:27 2026 by rpki-client