Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oEuPsyZtbD5mbLiLseiqxfiHai4.roa
File: oEuPsyZtbD5mbLiLseiqxfiHai4.roa (raw, json)
Hash identifier: UL35FuOUN/uxPXmBegGcJfJ3GFhWyR2gOtrTOV2RMeU=
Subject key identifier: A0:4B:8F:B3:26:6D:6C:3E:66:6C:B8:8B:B1:E8:AA:C5:F8:87:6A:2E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019E5A45FEAC177A510172971CFACC9E0F71
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oEuPsyZtbD5mbLiLseiqxfiHai4.roa
Signing time: Sun 24 May 2026 13:56:37 +0000
ROA not before: Sun 24 May 2026 13:56:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.231.128.0/22 maxlen: 24
194.231.128.0/24 maxlen: 24
194.231.130.0/24 maxlen: 24
194.231.131.0/24 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.132.0/24 maxlen: 24
194.231.134.0/24 maxlen: 24
194.231.135.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.136.0/24 maxlen: 24
194.231.137.0/24 maxlen: 24
194.231.138.0/24 maxlen: 24
194.231.139.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.148.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.199.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.202.0/24 maxlen: 24
194.231.203.0/24 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/22 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.213.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.220.0/22 maxlen: 24
194.231.222.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jun 2026 12:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5a:45:fe:ac:17:7a:51:01:72:97:1c:fa:cc:9e:0f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 24 13:56:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a04b8fb3266d6c3e666cb88bb1e8aac5f8876a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:b9:90:20:71:24:e7:7b:11:72:fb:77:9f:
13:e7:a1:94:24:fc:98:b6:03:8c:34:6a:aa:86:95:
49:92:e9:a2:00:0c:d3:3b:0b:aa:f5:8e:a2:6c:28:
d8:ae:b7:a3:35:10:6f:a9:fa:70:d2:b8:9c:0c:7f:
d8:00:0b:02:ca:36:3d:66:b6:68:f5:f4:53:99:79:
2e:ce:a1:8b:7b:d4:ff:fa:59:1a:4e:4a:7e:08:c1:
00:c5:87:7d:8a:dd:e9:79:85:5c:2b:92:f2:55:23:
0b:8e:82:d5:b3:9c:d1:7d:2f:d7:51:1f:57:88:7b:
d6:83:1e:bf:2d:c8:c0:32:8d:34:61:4e:fb:64:2a:
72:e2:8d:d6:83:13:ba:44:e4:ec:4f:26:25:31:4e:
48:17:a2:9f:9c:f5:8d:ec:dd:7e:fc:72:a7:4b:ea:
72:25:9e:72:6d:dc:64:da:28:18:e9:77:b4:46:bd:
93:2b:72:9f:c0:20:ab:8e:57:f6:49:f7:4f:1e:9e:
f3:b1:e3:0f:b0:b6:16:3a:5e:24:8d:2a:48:27:f1:
8a:09:b0:43:47:ed:1a:6a:46:3e:23:1e:fd:f6:e1:
58:b3:cc:28:93:98:dd:38:29:61:60:bf:fd:8c:9f:
1a:bc:17:57:de:4e:7e:90:c9:da:15:01:91:d6:87:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4B:8F:B3:26:6D:6C:3E:66:6C:B8:8B:B1:E8:AA:C5:F8:87:6A:2E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oEuPsyZtbD5mbLiLseiqxfiHai4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.128.0-194.231.139.255
194.231.142.0/24
194.231.148.0/24
194.231.150.0-194.231.155.255
194.231.157.0-194.231.158.255
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
Signature Algorithm: sha256WithRSAEncryption
30:b2:80:fe:9e:97:17:f6:21:88:db:60:97:fc:dc:c5:64:9c:
d1:0e:4c:e3:8a:b7:da:66:77:6f:e8:d4:db:38:83:87:9b:b1:
39:d3:a7:d0:90:33:8a:ef:7d:a0:82:63:3e:f2:b6:6d:9c:47:
e3:5a:00:34:f7:aa:33:fa:2e:97:29:24:16:65:2a:3a:51:8b:
fa:4b:37:a3:b9:8d:b3:31:16:42:15:1f:c1:1a:75:46:9f:89:
aa:e4:05:41:41:dc:e9:73:57:f1:62:51:8d:ab:b2:c2:69:27:
aa:24:59:2e:cd:20:04:19:c1:6a:2a:79:c5:ba:37:40:e0:8c:
aa:7e:c3:89:76:c7:32:66:99:45:67:e7:ae:eb:e0:d9:30:b6:
7e:80:7a:a5:ba:37:54:48:a6:c7:0a:94:70:08:f8:27:d3:50:
3a:82:61:b7:f1:11:39:6a:a6:15:b0:2c:4a:3a:01:3f:6a:8e:
d7:3b:a3:ae:12:f1:47:48:fe:2a:4d:25:be:e7:ca:1a:9b:b8:
34:dd:5b:93:13:a4:c7:0e:11:f3:3b:7f:3b:aa:22:12:66:b1:
b0:a2:2f:37:77:c9:c3:ca:ef:92:c9:10:c7:d9:68:a3:8a:ce:
e0:b9:c7:f4:b9:4a:02:8d:bb:3c:8a:10:9e:c4:fc:f5:bf:bd:
62:7a:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:07:10 2026 by rpki-client