Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ImrsZJPHs5q8jUV_V2V3tKhYO7M.roa
File: ImrsZJPHs5q8jUV_V2V3tKhYO7M.roa (raw, json)
Hash identifier: Ic/UkADzH2TmrrKdGorZ9tHgMZmMStkhFk/l3cuCaXQ=
Subject key identifier: 22:6A:EC:64:93:C7:B3:9A:BC:8D:45:7F:57:65:77:B4:A8:58:3B:B3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0CCE003132B73E3F872F2A6755E27A258
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ImrsZJPHs5q8jUV_V2V3tKhYO7M.roa
Signing time: Wed 23 Sep 2026 06:07:07 +0000
ROA not before: Wed 23 Sep 2026 06:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.253.67.0/24 maxlen: 24
31.13.230.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.125.102.0/24 maxlen: 24
94.125.103.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Sep 2026 05:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:e0:03:13:2b:73:e3:f8:72:f2:a6:75:5e:27:a2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 23 06:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=226aec6493c7b39abc8d457f576577b4a8583bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:47:ba:bf:ec:ad:9f:ce:df:31:ba:7f:fe:88:
69:64:71:ed:84:b3:c5:35:f8:22:a1:2d:5f:de:46:
4b:f5:2d:36:70:d6:49:0a:54:54:82:d1:3a:2d:89:
05:a1:0f:b2:e2:01:0a:62:30:96:98:48:cf:b4:62:
4e:69:6f:46:1e:57:cc:a0:bb:0a:7f:61:49:ff:d9:
f2:a9:40:0b:34:82:87:43:1e:cb:18:7f:98:09:30:
02:7b:14:57:a4:d0:a2:d1:71:b8:6b:62:f4:c4:d4:
95:1d:94:70:c0:cd:d6:ef:c2:62:96:5e:ae:5b:9e:
b8:b2:ff:29:bb:1e:43:86:e8:5b:e5:d6:a2:bd:02:
f3:bb:4b:48:a9:e5:14:b6:61:8a:af:8c:df:de:9f:
8e:92:c9:3d:2c:27:98:b4:2e:89:3e:87:7f:b3:9e:
21:10:31:08:b7:ea:54:9b:06:df:78:8e:96:c6:b1:
1b:34:71:27:ee:8c:7c:6a:74:03:2c:93:e5:aa:1d:
ed:86:2d:73:d4:a9:01:a0:05:84:d7:5c:54:82:91:
6d:c2:8d:36:e3:41:01:0a:c1:e9:20:19:8b:78:99:
83:10:a8:f7:5d:31:fc:54:15:73:1b:37:ff:63:28:
98:e1:90:79:2e:ab:73:0e:7a:79:da:08:b5:9f:13:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6A:EC:64:93:C7:B3:9A:BC:8D:45:7F:57:65:77:B4:A8:58:3B:B3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ImrsZJPHs5q8jUV_V2V3tKhYO7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.67.0/24
31.13.230.0/24
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.128.235.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
85.209.133.0/24
85.217.130.0/23
87.120.87.0/24
87.120.108.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.120.196.0/24
87.121.79.0/24
87.121.114.0/24
87.121.221.0/24
91.92.21.0/24
91.200.192.0/22
92.249.48.0/24
92.249.50.0/24
93.123.109.0/24
94.125.102.0/23
94.154.163.0/24
94.156.14.0/24
94.156.188.0/24
147.78.101.0/24
178.215.239.0/24
185.222.160.0/24
185.246.221.0/24
185.252.177.0/24
194.48.251.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:9c:43:2f:d0:64:3c:d8:19:ac:57:fc:8e:dd:00:50:7f:c9:
39:10:50:f8:38:61:e9:57:e1:26:6c:4a:27:0c:ca:53:e0:c2:
90:1a:49:ec:41:6a:c1:42:24:a6:8d:e3:b0:94:38:ae:71:d3:
ed:14:2b:07:ee:08:e7:78:4c:9a:9e:a1:93:28:5a:3b:b4:73:
3a:60:ce:bc:6d:6a:6c:3a:ee:bf:69:3e:c2:be:c6:ae:30:c1:
58:1f:90:cb:c9:57:77:a6:03:20:95:ec:e7:38:c0:c2:3c:ee:
77:97:76:76:12:d5:f2:c7:54:cb:8b:44:d7:1f:6e:bf:16:95:
85:52:0e:8d:02:2f:5f:c0:eb:a8:23:4e:06:92:02:f6:c3:b3:
9f:62:06:f8:cd:b4:c1:56:ad:c5:a0:86:a7:a7:57:fc:95:4a:
16:db:15:85:20:53:32:73:dd:65:51:1f:18:81:d2:80:64:29:
71:13:38:c6:21:2b:83:91:a5:3a:d2:1d:f2:a9:2d:38:57:a3:
47:1f:1c:4d:2e:4e:b8:3d:68:4c:96:a7:c6:47:76:c7:72:8c:
a6:77:8b:6d:31:80:90:e3:18:d1:c6:b1:71:8d:0d:bb:8b:a4:
6c:15:ef:42:4e:8b:ad:16:05:7a:13:a4:49:fc:e3:a1:b7:87:
d1:42:29:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:12:35 2026 by rpki-client