Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/6r0UehTBHlfdeWDqBRiRcGZt4jY.roa
File: 6r0UehTBHlfdeWDqBRiRcGZt4jY.roa (raw, json)
Hash identifier: Gym05Ri7wQHb7S5YM+OEgZFHYptv6BmsKWdsXKw0JBc=
Subject key identifier: EA:BD:14:7A:14:C1:1E:57:DD:79:60:EA:05:18:91:70:66:6D:E2:36
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019F5FB4F9724912DDA330AB32FBDC837E37
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/6r0UehTBHlfdeWDqBRiRcGZt4jY.roa
Signing time: Tue 14 Jul 2026 08:18:43 +0000
ROA not before: Tue 14 Jul 2026 08:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 95.142.112.0/24 maxlen: 24
95.142.113.0/24 maxlen: 24
95.142.114.0/24 maxlen: 24
95.142.115.0/24 maxlen: 24
95.142.116.0/24 maxlen: 24
95.142.117.0/24 maxlen: 24
95.142.118.0/24 maxlen: 24
95.142.119.0/24 maxlen: 24
95.142.120.0/24 maxlen: 24
95.142.121.0/24 maxlen: 24
95.142.122.0/24 maxlen: 24
95.142.123.0/24 maxlen: 24
95.142.124.0/24 maxlen: 24
95.142.125.0/24 maxlen: 24
95.142.126.0/24 maxlen: 24
95.142.127.0/24 maxlen: 24
185.54.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jul 2026 08:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:b4:f9:72:49:12:dd:a3:30:ab:32:fb:dc:83:7e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jul 14 08:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eabd147a14c11e57dd7960ea05189170666de236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:30:2a:a5:22:a5:a2:ed:ef:b5:61:87:a8:7f:
3b:fd:bf:1e:51:71:3e:62:4e:f1:8c:9c:ff:82:2c:
0f:ee:fa:c3:05:34:4f:32:41:1e:52:b2:24:01:4d:
c6:66:d2:b9:ed:b3:9b:08:ec:e1:9d:6e:f1:a4:77:
25:e3:94:fd:4d:be:bc:1b:0d:41:46:df:18:9c:90:
1d:b3:39:74:60:28:51:c4:e5:65:c3:48:4a:97:40:
fd:8a:ed:13:fc:be:2a:c0:c6:dc:51:08:c9:82:e4:
c8:98:ed:fd:54:a5:4b:5e:5e:55:ab:db:f7:60:50:
41:a7:52:2c:ed:a7:b6:c4:25:a0:d5:f5:6a:bd:ec:
cb:58:2b:87:93:27:df:19:07:8d:41:80:6d:de:0d:
7d:b8:8a:ba:ca:04:9d:ad:ba:a2:7e:c3:8f:91:a3:
34:65:4d:bf:d0:c7:b1:f9:47:cd:d2:e8:28:a4:83:
99:eb:b2:de:36:15:0c:94:2e:d8:df:59:1f:74:9f:
4d:cb:e1:10:53:92:2a:fc:c1:55:db:cb:32:2c:fc:
54:09:90:90:74:53:73:08:94:82:0a:fe:5e:56:94:
bd:57:5b:42:b2:40:20:43:de:26:40:8a:3f:aa:f1:
0b:b3:c1:b4:71:6c:d7:f5:33:cc:ea:b0:6e:cd:33:
be:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BD:14:7A:14:C1:1E:57:DD:79:60:EA:05:18:91:70:66:6D:E2:36
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/6r0UehTBHlfdeWDqBRiRcGZt4jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.112.0/20
185.54.228.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f9:1b:29:aa:fe:a9:8f:f4:9f:d5:cc:81:27:bb:88:31:fb:
2a:12:cf:cc:a8:16:a7:30:1f:39:c7:2a:a8:01:c5:80:a0:e8:
70:a7:76:40:d2:0b:12:5e:df:d8:8d:f2:03:38:5c:dc:a9:dd:
7a:8a:54:00:a3:ec:33:8e:05:38:a5:c6:60:67:8a:0c:db:63:
2f:f7:4a:b5:86:72:87:e1:b0:0e:e6:1b:ae:f5:4d:ed:7f:eb:
ff:77:95:18:8d:1f:bf:10:78:01:79:ab:ad:8b:ec:5c:74:77:
e9:88:2e:8f:06:d1:24:58:ea:80:51:50:fc:ea:6a:fc:6d:be:
ed:f5:17:26:b9:ba:7e:af:e5:28:93:ff:6e:39:a7:70:06:ac:
11:35:27:2f:b5:b3:62:1b:42:5f:3a:3c:bd:f7:38:d4:3d:df:
7e:01:65:14:1e:59:90:ed:16:ff:fc:7d:bd:1a:97:57:80:0f:
c8:ef:f9:31:99:de:55:b9:59:63:b8:7b:9c:3c:80:25:36:c6:
90:c8:fb:59:9e:51:4e:a5:a3:87:5b:fa:eb:07:19:4f:9f:4b:
41:89:7c:af:cb:1f:81:48:4b:ba:40:7a:c2:eb:9f:47:23:ea:
bd:71:78:44:ce:c5:21:9d:bd:a0:a1:c9:ab:64:92:35:26:94:
ee:38:66:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:26 2026 by rpki-client