Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/PkvLLjsxHKyn33VyNVgvc3p3dyM.roa
File: PkvLLjsxHKyn33VyNVgvc3p3dyM.roa (raw, json)
Hash identifier: enfjZ6t7SQ74wm9p4XGfdDWvYhTHBwh7puSS9CWwh6A=
Subject key identifier: 3E:4B:CB:2E:3B:31:1C:AC:A7:DF:75:72:35:58:2F:73:7A:77:77:23
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A0E8EA7460C9109E64A939C2ECD3476FD4
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/PkvLLjsxHKyn33VyNVgvc3p3dyM.roa
Signing time: Mon 28 Sep 2026 16:47:54 +0000
ROA not before: Mon 28 Sep 2026 16:47:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.253.0/24 maxlen: 24
45.155.254.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
79.98.244.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.148.0/24 maxlen: 24
185.199.149.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.199.214.0/23 maxlen: 24
185.221.24.0/24 maxlen: 24
185.221.25.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.221.27.0/24 maxlen: 24
185.225.168.0/23 maxlen: 23
185.225.168.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.226.180.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Oct 2026 11:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:ea:74:60:c9:10:9e:64:a9:39:c2:ec:d3:47:6f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 28 16:47:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e4bcb2e3b311caca7df757235582f737a777723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:25:d8:6f:fa:b5:49:60:8b:8b:0d:73:d9:
6a:b7:f0:30:71:aa:23:13:2a:98:06:95:b2:8f:98:
6b:d6:01:c7:4c:3c:79:02:1c:fa:12:86:c5:5a:c7:
8f:f0:91:0a:ba:ca:c4:70:a2:73:09:bc:ce:3c:28:
73:2c:6f:8a:45:4b:4d:54:b6:48:df:61:58:c6:1d:
05:6a:e0:1b:ba:c5:95:ad:15:7b:3e:2c:8b:85:d6:
1a:49:69:e4:08:ab:1e:58:ba:29:cd:ff:fc:22:29:
0a:0c:fa:d4:8d:2c:a7:05:96:db:f3:00:63:0d:c1:
94:19:af:ca:15:09:bf:4f:6d:68:af:60:72:52:96:
50:de:15:13:f5:78:72:46:65:ba:50:0b:31:f9:ea:
44:23:fa:8e:23:a1:24:0c:89:55:01:93:2a:f0:4f:
3d:e8:42:86:fb:cb:70:ac:89:d2:aa:55:ed:55:ec:
a3:3d:b8:3e:9e:56:e8:6c:bd:29:6a:3b:e0:51:78:
97:ca:0d:bf:ec:d3:2f:a4:e7:9b:d5:25:61:23:31:
0a:c6:78:28:72:05:26:1b:61:48:b5:65:09:27:51:
52:9f:bb:4a:80:70:9c:39:e8:4e:69:9f:ca:38:75:
48:ef:09:4c:b3:80:6d:46:e7:39:70:a4:7a:12:42:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4B:CB:2E:3B:31:1C:AC:A7:DF:75:72:35:58:2F:73:7A:77:77:23
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/PkvLLjsxHKyn33VyNVgvc3p3dyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0-45.155.254.255
45.157.209.0/24
79.98.244.0/24
79.98.246.0/24
176.125.250.0/23
185.199.148.0/23
185.199.151.0/24
185.199.213.0-185.199.215.255
185.221.24.0/22
185.225.168.0-185.225.170.255
185.226.180.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:b7:e4:02:9c:56:93:30:f9:c8:53:5c:e0:2c:24:55:c9:67:
da:b4:8a:95:13:4c:d0:2c:ef:00:7a:4a:de:ee:84:94:25:4e:
5b:60:f6:70:ff:e9:7e:fb:90:f0:fe:f6:90:52:31:65:a2:ae:
09:2b:93:bf:05:a5:e3:32:bb:54:eb:3f:90:3b:3c:4b:02:8d:
03:07:2e:5a:ae:ef:ee:25:40:13:65:00:95:42:ec:9c:08:e1:
9e:1f:e0:50:2c:e6:04:9f:7b:66:fa:b4:4f:88:93:59:6c:45:
2a:c0:56:0c:57:50:b8:18:fa:7f:1a:e7:fa:bd:7c:65:1d:ce:
c1:c6:06:9c:90:10:ef:90:78:84:67:94:f0:bc:cd:d6:a0:69:
8d:50:e8:3b:2c:d2:4d:0e:50:68:00:5f:2e:84:d7:7b:fd:c8:
ed:ec:14:a7:85:d2:3b:60:e2:cf:11:7d:03:47:6f:f3:41:33:
d3:1c:26:e3:c4:dc:50:98:73:06:1d:eb:91:56:5d:2a:f9:c3:
a8:54:89:81:f5:5e:52:ca:9f:c8:12:85:4f:83:3e:24:f5:d8:
23:54:da:6e:68:3b:59:1f:14:80:44:f7:dc:55:68:8e:18:ca:
ae:f8:60:96:1b:fb:ca:78:c5:d6:35:4f:71:89:e2:80:21:ec:
d8:46:fc:d6
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAaDo6nRgyRCeZKk5wuzTR2/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYwOTI4MTY0NzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTRiY2IyZTNiMzExY2FjYTdkZjc1NzIzNTU4MmY3MzdhNzc3NzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S8l2G/6tUlgi4sNc9lqt/Awcaoj
EyqYBpWyj5hr1gHHTDx5Ahz6EobFWseP8JEKusrEcKJzCbzOPChzLG+KRUtNVLZI
32FYxh0FauAbusWVrRV7PiyLhdYaSWnkCKseWLopzf/8IikKDPrUjSynBZbb8wBj
DcGUGa/KFQm/T21or2ByUpZQ3hUT9XhyRmW6UAsx+epEI/qOI6EkDIlVAZMq8E89
6EKG+8twrInSqlXtVeyjPbg+nlbobL0pajvgUXiXyg2/7NMvpOeb1SVhIzEKxngo
cgUmG2FItWUJJ1FSn7tKgHCcOehOaZ/KOHVI7wlMs4BtRuc5cKR6EkJk9wIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFD5Lyy47MRysp991cjVYL3N6d3cjMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvUGt2TExqc3hIS3luMzNWeU5WZ3ZjM3AzZHlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgMAwDBAAtm/0D
BAAtm/4DBAAtndEDBABPYvQDBABPYvYDBAGwffoDBAG5x5QDBAC5x5cwDAMEALnH
1QMEA7nH0AMEArndGDAMAwQDueGoAwQAueGqAwQAueK0AwQAufoaMA0GCSqGSIb3
DQEBCwUAA4IBAQDBt+QCnFaTMPnIU1zgLCRVyWfatIqVE0zQLO8Aekre7oSUJU5b
YPZw/+l++5Dw/vaQUjFloq4JK5O/BaXjMrtU6z+QOzxLAo0DBy5aru/uJUATZQCV
QuycCOGeH+BQLOYEn3tm+rRPiJNZbEUqwFYMV1C4GPp/Guf6vXxlHc7BxgackBDv
kHiEZ5TwvM3WoGmNUOg7LNJNDlBoAF8uhNd7/cjt7BSnhdI7YOLPEX0DR2/zQTPT
HCbjxNxQmHMGHeuRVl0q+cOoVImB9V5Syp/IEoVPgz4k9dgjVNpuaDtZHxSARPfc
VWiOGMqu+GCWG/vKeMXWNU9xieKAIezYRvzW
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:59:30 2026 by rpki-client