Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/LvniOZJEgj2IeVxoloGXtMYMiE8.roa
File: LvniOZJEgj2IeVxoloGXtMYMiE8.roa (raw, json)
Hash identifier: YD0Q4n6vr+5uVi2GVVDD6ns+no2yUgI1zZE9EIIy9gY=
Subject key identifier: 2E:F9:E2:39:92:44:82:3D:88:79:5C:68:96:81:97:B4:C6:0C:88:4F
Certificate issuer: /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial: 01A13EBA3394FCD6EBA19EA81A98B102B03A
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/LvniOZJEgj2IeVxoloGXtMYMiE8.roa
Signing time: Thu 15 Oct 2026 08:42:32 +0000
ROA not before: Thu 15 Oct 2026 08:42:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41959
IP address blocks: 84.234.113.0/24 maxlen: 24
84.234.123.0/24 maxlen: 24
91.206.96.0/23 maxlen: 23
185.79.32.0/22 maxlen: 22
193.242.146.0/23 maxlen: 23
194.126.229.0/24 maxlen: 24
194.140.250.0/24 maxlen: 24
195.80.229.0/24 maxlen: 24
195.93.142.0/23 maxlen: 23
195.226.207.0/24 maxlen: 24
195.245.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Oct 2026 10:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:ba:33:94:fc:d6:eb:a1:9e:a8:1a:98:b1:02:b0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Validity
Not Before: Oct 15 08:42:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ef9e2399244823d88795c68968197b4c60c884f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:ab:e2:bc:e3:d9:78:79:66:c4:dc:ed:da:
2d:d7:2a:3d:35:64:e3:1e:9b:00:05:87:a2:a5:0a:
51:47:4f:95:a9:89:53:a5:67:8a:8b:e2:a4:a5:2a:
3e:50:e5:9e:e3:2c:6b:b1:57:57:43:96:3d:7f:47:
af:50:7a:7a:2a:3b:fc:17:88:28:1c:da:59:ff:ff:
47:38:2c:ad:81:21:f9:f0:0d:54:07:de:84:15:fd:
55:ce:3b:e7:f0:b6:28:d4:c6:d0:c6:5b:37:6c:94:
cb:ca:6c:97:fb:59:a9:55:fb:43:8b:bb:90:82:98:
77:c9:da:88:0b:e8:2d:43:5a:5f:88:63:a0:b0:24:
6d:0e:b3:8c:69:3d:ec:2d:5a:2a:ae:8f:4c:05:73:
3e:3f:a9:7d:45:2c:1d:0c:69:24:a7:0c:99:8a:7e:
68:21:76:fb:8a:4e:d5:b6:38:1d:dd:af:d6:0d:b6:
46:10:94:9b:dd:d8:2e:ea:67:91:79:6f:68:79:f2:
88:ca:c3:5f:f2:e8:fd:d6:74:d3:a4:73:b9:0a:08:
a3:7c:02:26:2a:84:68:5e:00:c0:a4:91:4c:b4:e9:
b7:84:59:1b:05:d8:ea:ef:f1:87:20:3d:8c:88:7f:
16:c9:bb:04:c0:c5:9c:bd:87:6e:13:ca:37:6a:91:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F9:E2:39:92:44:82:3D:88:79:5C:68:96:81:97:B4:C6:0C:88:4F
X509v3 Authority Key Identifier:
keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/LvniOZJEgj2IeVxoloGXtMYMiE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.113.0/24
84.234.123.0/24
91.206.96.0/23
185.79.32.0/22
193.242.146.0/23
194.126.229.0/24
194.140.250.0/24
195.80.229.0/24
195.93.142.0/23
195.226.207.0/24
195.245.204.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a4:1d:92:8c:22:9a:6a:db:62:39:49:20:c9:89:e1:9f:8e:
94:f6:e4:91:fc:cb:2c:a4:6d:f8:8a:e2:89:d8:5f:ce:94:f6:
c5:a5:25:5c:9b:3e:9e:aa:75:c2:9a:59:bd:b7:5d:53:bc:69:
77:dd:40:8c:3d:bc:4a:ad:2c:d1:86:6c:a8:5e:a5:5a:df:72:
3d:20:f1:b1:b9:d0:06:63:fc:fb:db:7c:0a:d3:a9:3b:87:34:
6d:6c:5e:f0:9d:60:5b:8d:26:c4:90:78:49:98:6e:73:c2:58:
fc:33:e1:25:dd:4c:b2:06:14:7e:99:c2:1c:82:49:04:e6:73:
21:62:71:28:e3:d7:84:b6:d2:f3:1b:d9:6a:32:c5:bf:41:a1:
65:8d:9a:e0:bd:8a:32:c0:95:41:95:58:c9:90:b2:1f:1e:9c:
f3:01:0d:25:a2:ee:39:d9:0a:55:a3:c5:1f:cc:a2:82:ce:59:
16:43:b1:2a:51:c5:92:80:23:67:b6:d9:44:ba:bf:8a:c0:e9:
4d:2a:e8:91:86:48:93:a8:90:23:c1:0d:e1:30:18:da:5a:de:
2e:49:5b:f7:e9:4a:5e:c9:d0:e9:8a:4a:d5:10:0d:02:d1:74:
09:34:c3:be:8d:ba:a9:f2:db:9c:f1:30:9f:ba:b4:9c:51:8e:
4d:10:a4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:30:28 2026 by rpki-client