Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XodRP0reOarsErvxdWvhoioWSwM.roa
File: XodRP0reOarsErvxdWvhoioWSwM.roa (raw, json)
Hash identifier: 4FG2NMxgU70HR3lu6bkrcwWfQ74WiyaRy4GyRamhF0E=
Subject key identifier: 5E:87:51:3F:4A:DE:39:AA:EC:12:BB:F1:75:6B:E1:A2:2A:16:4B:03
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019EDE514656581B885C5B52A0106C771492
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XodRP0reOarsErvxdWvhoioWSwM.roa
Signing time: Fri 19 Jun 2026 05:18:48 +0000
ROA not before: Fri 19 Jun 2026 05:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
87.121.114.0/23 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.100.0/23 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jun 2026 13:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:de:51:46:56:58:1b:88:5c:5b:52:a0:10:6c:77:14:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 19 05:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e87513f4ade39aaec12bbf1756be1a22a164b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ac:5d:1c:41:b4:7b:02:9f:92:cc:84:d4:18:
a3:38:83:52:a0:33:e9:74:98:90:29:4e:d8:10:e3:
88:de:5d:3d:fe:99:98:52:e4:71:e5:5c:9b:1b:a5:
23:e8:d8:b1:bb:38:66:bd:63:ca:c1:8d:6e:5e:f6:
f0:93:5c:a5:06:36:3a:3b:64:b0:c9:f8:53:aa:fc:
65:43:d9:3d:54:94:8b:fb:0e:e5:87:61:5b:c3:ae:
f4:42:cf:1e:f5:79:cf:a3:36:7d:47:88:22:ee:0d:
a5:eb:9c:34:b9:0e:b8:97:a1:c8:23:c2:11:1b:2b:
0e:6f:ed:60:12:ac:21:a9:7a:67:e5:62:cf:aa:bf:
76:fb:f0:52:2e:2f:fc:82:22:49:2e:a7:cb:63:38:
08:74:8a:66:5a:0c:e8:3e:fe:ec:a1:1f:5a:cc:86:
d8:f0:19:6e:23:fb:c3:f7:60:0c:09:f1:7a:97:a8:
d1:41:53:70:a1:36:fc:51:1c:c9:94:4a:c3:63:2b:
e1:7a:63:41:a5:18:34:ea:ec:22:c0:01:34:eb:cf:
f2:3a:00:d4:09:29:17:62:57:f9:9e:00:29:56:fc:
13:3a:9c:b2:a6:67:b9:77:fc:74:4f:b8:3b:8b:e2:
84:13:43:03:18:16:71:70:28:a7:4f:81:d6:b2:32:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:87:51:3F:4A:DE:39:AA:EC:12:BB:F1:75:6B:E1:A2:2A:16:4B:03
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XodRP0reOarsErvxdWvhoioWSwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/23
87.121.114.0/23
87.121.221.0/24
91.92.21.0/24
92.249.50.0/24
93.123.100.0/23
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
185.252.177.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
31:44:ad:5f:7f:78:cf:4b:91:44:2f:2e:af:44:24:c6:58:ce:
2c:9d:3c:53:4f:2f:a3:50:10:9b:b7:9f:89:02:13:1e:fd:d0:
cc:c8:e6:14:43:ec:47:24:ac:ff:32:41:d8:3b:a0:e3:52:04:
37:47:7e:1b:11:f7:4a:c0:81:93:21:e1:38:1c:ac:d1:6e:7f:
e3:06:21:9c:48:1d:8e:02:f6:e3:45:86:e1:a6:5d:85:93:8f:
4f:67:1f:f9:bb:d0:16:bb:75:65:58:ff:57:6b:2d:c0:f6:91:
c3:28:7d:ad:44:88:5f:5d:a1:99:71:70:ef:ac:e2:5b:d6:49:
81:eb:f6:84:9e:8b:ba:02:83:61:96:d2:2f:13:43:5b:90:54:
22:a9:d6:dc:f0:11:35:bf:a6:af:fe:4f:08:38:13:fa:47:f3:
58:92:e3:1f:3d:b5:a3:06:b2:b8:81:44:d2:ad:8b:e1:c4:3d:
bc:a1:e5:d6:19:f8:60:a6:45:8e:00:f8:b7:e7:ca:8f:cb:5b:
dd:01:66:db:af:94:1f:58:a5:21:3c:99:b5:21:bc:71:4e:36:
17:9b:73:b3:b2:79:4f:43:25:d4:17:1c:2a:17:60:00:2d:85:
0c:10:b2:8e:7c:96:c4:c4:ae:74:5d:ea:1c:31:5a:c4:1c:e3:
ef:bf:28:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:21:51 2026 by rpki-client