Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/B4z011Ksx5nE5hDpGJ6Bi8EavD0.roa
File: B4z011Ksx5nE5hDpGJ6Bi8EavD0.roa (raw, json)
Hash identifier: bN4xa2E4VQfQ8Ugsg43wSnnhVw5z/ZKphlvSjlWEsxY=
Subject key identifier: 07:8C:F4:D7:52:AC:C7:99:C4:E6:10:E9:18:9E:81:8B:C1:1A:BC:3D
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FB8ECD3A15D142638A1531E3198A3DE06
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/B4z011Ksx5nE5hDpGJ6Bi8EavD0.roa
Signing time: Fri 31 Jul 2026 16:05:56 +0000
ROA not before: Fri 31 Jul 2026 16:05:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 62.105.193.0/24 maxlen: 24
62.105.195.0/24 maxlen: 24
62.192.110.0/24 maxlen: 24
194.77.92.0/24 maxlen: 24
194.122.80.0/24 maxlen: 24
212.189.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Aug 2026 06:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:ec:d3:a1:5d:14:26:38:a1:53:1e:31:98:a3:de:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 31 16:05:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=078cf4d752acc799c4e610e9189e818bc11abc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:49:5c:97:19:47:37:4f:28:d7:59:95:d3:
28:dd:0e:7c:e9:d2:11:2f:c8:87:df:1f:07:21:10:
62:2d:75:06:11:cb:40:b0:68:57:38:45:11:4e:e5:
e8:4c:23:a0:0c:b1:d2:c0:fa:98:83:d6:98:6e:0c:
22:d5:03:9b:6b:c7:f1:5e:dc:09:45:8b:79:b5:76:
ae:46:7b:01:30:77:95:82:9f:34:2e:fa:86:33:4e:
08:f3:fb:da:7d:c3:43:1f:50:cd:e6:83:e1:ce:4b:
4d:30:fc:c0:92:ac:9b:5d:0f:9c:3d:ab:e9:8b:17:
6f:9c:2e:32:46:8a:9e:d4:4e:b6:fa:3b:0a:c0:80:
8d:a8:24:8f:66:94:89:e6:a3:f2:41:71:86:14:ea:
7e:4c:c9:dc:90:35:7b:9f:76:50:6c:6e:8d:4a:8e:
8f:30:3d:5f:fd:4a:de:ef:9c:fc:85:2b:49:fb:31:
5f:9b:de:8e:40:9f:66:c2:4c:77:c9:11:9c:f3:bb:
db:80:1b:de:1a:80:58:92:ad:89:6a:fb:81:f7:95:
11:f1:18:a6:99:28:75:8b:b3:41:de:ca:a0:7e:34:
5b:92:c2:76:18:6a:b1:a6:4b:00:06:b1:b5:a4:19:
7a:99:3a:70:ea:45:0a:ae:34:af:88:a5:3a:c5:96:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8C:F4:D7:52:AC:C7:99:C4:E6:10:E9:18:9E:81:8B:C1:1A:BC:3D
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/B4z011Ksx5nE5hDpGJ6Bi8EavD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.193.0/24
62.105.195.0/24
62.192.110.0/24
194.77.92.0/24
194.122.80.0/24
212.189.113.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a9:9b:6e:03:5a:0d:aa:1e:50:eb:f8:69:2a:88:9a:22:83:
b4:df:58:c5:3b:19:58:17:3f:1b:27:9d:f1:fd:f9:16:ff:ff:
f9:08:2a:5a:b4:18:0f:62:f6:88:f1:83:73:a2:c2:03:07:d2:
20:52:26:af:ff:39:c7:82:f1:92:37:7b:be:b3:4e:04:1e:62:
a7:ba:f2:cc:68:9e:8d:86:2b:05:4e:9e:d7:22:8a:b5:e7:86:
a3:88:31:99:48:fb:c4:e8:49:aa:2b:cf:00:93:b9:b4:3b:61:
14:ef:41:7f:28:8a:96:20:71:1f:79:ee:e3:d8:7b:47:7f:5d:
74:d7:b3:11:ac:66:5e:d7:31:a7:64:44:fa:f7:0c:ea:ed:0a:
a4:08:79:9a:f5:ba:f4:3c:3c:21:3d:f9:b5:7a:dc:6a:60:d6:
07:22:0e:2b:f6:00:a8:07:ef:3c:3c:93:8c:1a:42:90:0a:ae:
bc:7e:b2:93:1d:38:1a:2b:72:1d:5a:eb:2c:3a:6c:8d:1e:a2:
70:d7:94:21:eb:ed:55:0b:20:53:55:f7:03:b1:41:8a:de:12:
e5:2d:5b:ef:f1:1d:8b:8f:4b:33:9c:f5:26:21:21:c6:6d:78:
d2:25:68:00:8f:da:64:6c:d2:89:e8:31:bd:83:5a:aa:b3:20:
a3:68:34:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:22:20 2026 by rpki-client