Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/bXNUboYch271rPtJ_dQB8tmC1fU.roa
File: bXNUboYch271rPtJ_dQB8tmC1fU.roa (raw, json)
Hash identifier: WzMjoXINx9s8J+kRp9QLAIpyHOszQVo0o0rF+J1P0io=
Subject key identifier: 6D:73:54:6E:86:1C:87:6E:F5:AC:FB:49:FD:D4:01:F2:D9:82:D5:F5
Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial: 019B791111B74651AD2E4519BE425B325E25
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/bXNUboYch271rPtJ_dQB8tmC1fU.roa
Signing time: Thu 01 Jan 2026 10:18:40 +0000
ROA not before: Thu 01 Jan 2026 10:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44125
IP address blocks: 45.152.24.0/22 maxlen: 24
185.149.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 23 Jan 2026 12:08:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:11:b7:46:51:ad:2e:45:19:be:42:5b:32:5e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Validity
Not Before: Jan 1 10:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d73546e861c876ef5acfb49fdd401f2d982d5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:3c:9f:ff:95:cd:45:19:6b:c4:76:0a:77:
c6:92:af:18:cf:d3:ed:53:4f:ea:18:6d:6a:d2:e6:
72:5e:2a:82:53:ef:bb:80:db:fd:a0:bc:8e:c9:81:
35:86:78:cb:6a:15:d9:c1:13:26:63:6e:2f:bb:97:
1d:dd:9d:b6:10:d9:32:a2:52:8f:b1:16:91:1f:df:
aa:b0:55:18:5e:06:c4:23:4c:13:d2:ef:73:79:69:
2b:47:c5:2b:e0:93:8a:ae:67:74:e9:62:53:5e:3a:
de:83:f7:d0:25:d1:9d:36:41:ed:3b:d7:61:3e:07:
df:54:d7:1b:3c:ea:3c:c0:ea:71:eb:aa:99:ef:85:
97:78:09:94:5e:a4:49:7b:30:cc:99:1c:06:fe:45:
27:dc:cd:69:a2:c4:e6:1e:a6:af:b2:56:9e:37:72:
36:7b:f7:fa:7a:01:30:af:e0:c8:fc:c6:fe:c1:91:
e4:1b:66:f0:27:d0:63:0c:8f:05:af:b3:02:92:06:
2e:d8:89:99:d1:f2:43:63:64:a0:01:ee:7a:f0:27:
2d:57:dc:e9:2e:3f:27:6b:22:21:16:68:ec:3a:81:
34:b6:dc:31:41:94:10:a4:cb:a2:95:c1:5f:3f:f4:
cf:c1:16:05:fd:22:d0:74:07:b5:4e:0b:46:8e:ba:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:73:54:6E:86:1C:87:6E:F5:AC:FB:49:FD:D4:01:F2:D9:82:D5:F5
X509v3 Authority Key Identifier:
keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/bXNUboYch271rPtJ_dQB8tmC1fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.24.0/22
185.149.196.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:d8:74:a5:7a:b2:47:2a:55:b1:65:6b:bc:fb:63:43:ff:57:
76:fd:ad:e1:61:31:54:e4:0d:53:16:90:6d:c7:e2:5b:3d:98:
8f:04:d0:cf:5b:d8:56:eb:4e:86:34:75:4b:8a:38:8a:03:18:
9a:ac:b2:ac:5c:86:09:cb:30:ec:a5:4b:48:44:7f:39:e3:04:
5a:53:0e:1c:26:53:e1:5c:b3:12:c7:c6:79:8e:a6:dc:10:0b:
c8:93:a0:00:ea:48:4a:19:35:3b:4f:27:58:d6:43:ba:07:88:
70:9f:57:e1:2f:03:cf:cc:66:d3:90:4f:c1:5d:00:79:de:1b:
ea:24:f0:35:5d:90:39:ea:fd:5c:fd:ee:b2:11:18:b5:ed:f1:
a3:cc:e8:89:9a:9c:46:22:c3:34:18:49:51:e9:5d:51:2f:29:
ac:82:3e:c0:d8:41:40:13:1b:36:bd:d3:00:01:34:a6:37:f0:
06:eb:a0:7f:f7:08:2c:dd:f7:e7:4a:b4:d4:2c:e6:1d:bc:e0:
79:12:ee:e7:d4:7c:49:b6:ba:61:0b:6d:ba:6f:f0:1d:ee:92:
e0:6a:03:80:36:c1:ce:42:8c:02:88:da:26:58:ca:c9:88:e1:
b4:c8:ef:cd:ba:dc:1c:8c:ce:09:6f:dc:d4:64:f7:77:c5:7f:
d7:c5:35:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:01:29 2026 by rpki-client