Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_o2vspnfvGdjndCs5esRG1fpHuw.roa
File: _o2vspnfvGdjndCs5esRG1fpHuw.roa (raw, json)
Hash identifier: uVSLpiODIrmWNECpX48TDTz/aeZYVCXgrJaEJIvh2xo=
Subject key identifier: FE:8D:AF:B2:99:DF:BC:67:63:9D:D0:AC:E5:EB:11:1B:57:E9:1E:EC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019E2A4FDDAB023D6FE86A9B3DBF29DE8A1F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_o2vspnfvGdjndCs5esRG1fpHuw.roa
Signing time: Fri 15 May 2026 06:25:37 +0000
ROA not before: Fri 15 May 2026 06:25:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.13.224.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.100.0/23 maxlen: 24
93.123.109.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 May 2026 13:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:4f:dd:ab:02:3d:6f:e8:6a:9b:3d:bf:29:de:8a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 15 06:25:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe8dafb299dfbc67639dd0ace5eb111b57e91eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:77:2e:fe:80:9d:93:c0:99:10:33:31:04:
5c:54:37:d2:b0:3b:fc:79:19:9c:c4:81:c8:7a:06:
8d:d0:c4:09:28:b4:4e:f6:81:d3:d3:12:2f:36:e7:
97:bf:3d:74:85:ea:62:fe:7c:c8:71:94:e3:d9:c5:
8f:94:63:a9:00:be:35:2c:2c:7c:41:ee:6a:ce:0d:
fb:24:92:67:1e:e9:77:2f:a8:44:70:cf:26:0d:64:
21:04:d1:39:99:56:1f:ba:73:18:97:fb:a5:2f:8d:
d8:aa:cd:0b:00:66:b5:ab:8c:14:53:d8:be:78:a1:
53:3d:61:46:db:5c:19:82:6a:f2:b8:21:4d:e2:4a:
82:14:df:5f:fa:2e:6b:69:48:e3:ef:22:41:17:94:
e3:c3:ad:5f:c6:35:b5:c4:3a:1e:3d:6a:c3:7a:28:
f3:10:ae:7f:3b:8a:98:e4:c0:10:c3:29:eb:28:d7:
fa:d2:8d:e8:38:62:81:d1:83:df:34:ea:c7:03:52:
da:07:0f:36:15:b7:cc:a8:89:5a:71:11:f7:00:af:
a5:65:68:01:9f:0b:2f:b1:43:0d:5d:29:ce:67:37:
7b:8c:bb:5f:0c:eb:e0:b0:4e:71:d3:ac:fa:9e:29:
43:f0:b4:91:26:e4:1e:8b:ab:f3:2c:87:96:53:3d:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8D:AF:B2:99:DF:BC:67:63:9D:D0:AC:E5:EB:11:1B:57:E9:1E:EC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_o2vspnfvGdjndCs5esRG1fpHuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
84.54.51.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
92.249.50.0/24
93.123.100.0/23
93.123.109.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:76:81:a6:3b:85:e2:88:7b:55:25:b4:b7:9e:d0:82:9b:b0:
77:46:9f:a2:a8:0b:39:63:ce:57:35:36:06:b0:10:32:c3:b5:
a5:50:63:3f:b6:2c:33:fb:6f:e5:39:15:66:a4:6e:17:38:2b:
26:be:5d:00:ef:5b:81:34:57:4b:5c:a3:a2:72:b4:3b:58:a7:
f3:a3:6d:e3:0f:9d:da:8f:8d:77:fb:94:34:1e:7b:00:8b:a4:
8b:ef:fc:9a:7d:c3:17:25:ea:b9:11:9d:57:16:77:ed:3b:d1:
16:d9:e6:d7:3b:2a:4f:ad:45:5f:21:8d:63:d0:95:3b:ed:92:
e2:af:8e:ed:f7:32:46:d6:e0:a2:6e:5b:4e:d4:40:5e:61:56:
3b:7b:e6:c6:13:5c:6e:41:b7:28:a2:a8:3e:56:1b:c7:ec:8b:
e8:b9:f1:81:a0:bb:e0:bb:b9:2b:fa:77:cf:f9:8f:4d:f2:39:
a6:83:f0:77:14:ee:4c:a4:c0:1d:e1:e9:fc:b0:f2:04:64:3c:
c8:67:39:e8:1a:91:97:c6:70:97:92:4e:51:75:d6:dd:70:ad:
83:d3:36:22:bd:e0:25:10:8c:db:d7:db:6d:dc:68:80:dd:ea:
a9:7e:7d:8c:d6:16:c0:07:8e:fa:ec:52:af:d6:18:fd:5b:64:
1c:03:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 15:27:23 2026 by rpki-client