Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0WMD74SEzsqsxviwY2OzSIdYngA.roa
File: 0WMD74SEzsqsxviwY2OzSIdYngA.roa (raw, json)
Hash identifier: AZGEb91n3LTSGLIALkZpV+U5W2d8bihundu6HFFvTMY=
Subject key identifier: D1:63:03:EF:84:84:CE:CA:AC:C6:F8:B0:63:63:B3:48:87:58:9E:00
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E83346471A1B06FF15FEFF7C03A0DAA88
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0WMD74SEzsqsxviwY2OzSIdYngA.roa
Signing time: Mon 01 Jun 2026 12:41:49 +0000
ROA not before: Mon 01 Jun 2026 12:41:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 77.93.133.0/24 maxlen: 24
77.93.136.0/24 maxlen: 24
77.93.138.0/23 maxlen: 24
77.107.95.0/24 maxlen: 24
81.168.58.0/24 maxlen: 24
81.168.63.0/24 maxlen: 24
81.168.65.0/24 maxlen: 24
81.168.87.0/24 maxlen: 24
81.168.96.0/24 maxlen: 24
81.168.99.0/24 maxlen: 24
81.168.105.0/24 maxlen: 24
81.168.125.0/24 maxlen: 24
82.152.1.0/24 maxlen: 24
82.152.11.0/24 maxlen: 24
82.152.102.0/24 maxlen: 24
82.152.117.0/24 maxlen: 24
82.152.118.0/24 maxlen: 24
109.176.91.0/24 maxlen: 24
212.38.81.0/24 maxlen: 24
213.130.138.0/24 maxlen: 24
213.210.11.0/24 maxlen: 24
213.210.48.0/23 maxlen: 24
217.144.145.0/24 maxlen: 24
217.144.156.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jun 2026 07:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:34:64:71:a1:b0:6f:f1:5f:ef:f7:c0:3a:0d:aa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 1 12:41:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d16303ef8484cecaacc6f8b06363b34887589e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:67:09:e8:47:64:a8:1b:e0:7d:cf:ab:6d:
08:cc:a4:87:c1:2e:c5:84:16:b0:53:b5:2e:c8:ad:
c6:c8:aa:06:aa:d8:3a:f9:09:64:b6:56:fb:37:33:
37:5d:0c:d6:53:0b:a3:19:c5:b3:41:f9:ff:fc:ae:
fb:7a:69:a7:97:b5:a2:76:57:45:4e:00:1a:6d:53:
61:6d:12:38:84:a7:f4:fc:4d:bc:b6:15:26:9b:6e:
d8:24:37:3e:11:4e:ab:de:c2:34:9f:b8:f3:0d:11:
ed:8f:f6:19:c1:fa:7c:60:91:bc:86:f1:4f:af:1e:
af:f6:ef:16:da:ad:b3:c5:51:1a:11:7b:48:61:2f:
f9:23:cb:f2:5f:35:c1:de:57:7a:30:16:cd:82:df:
03:ad:88:6e:d0:c6:ad:aa:23:c3:da:9f:b8:1e:14:
be:07:29:26:2a:22:97:1c:20:c4:31:bd:58:9e:6b:
92:c1:e6:6d:0a:2d:3d:f4:7a:c0:d8:6f:cd:49:19:
80:46:e1:c2:db:91:dc:01:fd:39:ab:e0:da:c1:b0:
c2:81:ee:ed:99:b6:79:33:f9:0f:5f:69:19:ad:1e:
7d:5a:a4:f7:52:2c:a9:fa:e2:89:7e:f0:df:2f:1a:
06:c4:80:86:29:7f:ce:22:02:d3:45:19:7d:2b:2e:
c1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:63:03:EF:84:84:CE:CA:AC:C6:F8:B0:63:63:B3:48:87:58:9E:00
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0WMD74SEzsqsxviwY2OzSIdYngA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.133.0/24
77.93.136.0/24
77.93.138.0/23
77.107.95.0/24
81.168.58.0/24
81.168.63.0/24
81.168.65.0/24
81.168.87.0/24
81.168.96.0/24
81.168.99.0/24
81.168.105.0/24
81.168.125.0/24
82.152.1.0/24
82.152.11.0/24
82.152.102.0/24
82.152.117.0-82.152.118.255
109.176.91.0/24
212.38.81.0/24
213.130.138.0/24
213.210.11.0/24
213.210.48.0/23
217.144.145.0/24
217.144.156.0/24
217.145.65.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f0:e1:24:0e:f2:b9:10:c5:14:ca:e3:d6:3e:7a:16:48:32:
31:f2:13:8f:85:d5:4b:42:23:69:8f:17:3b:c4:13:5f:80:82:
c0:83:be:e0:ee:e1:fa:9f:e1:e3:56:63:10:2e:56:00:5b:a3:
1c:da:cc:71:48:9f:2b:f1:57:75:08:1f:ff:f8:2f:c8:08:75:
ec:37:95:19:bf:f6:bb:a9:aa:5d:22:e6:e3:5f:66:e3:13:1a:
b9:da:91:95:e5:84:79:58:36:f3:ab:96:f3:15:55:9d:6c:f8:
c1:72:63:09:54:d9:87:df:a7:7b:0d:82:74:4c:46:8b:e2:1c:
9d:6c:2b:04:66:ad:d7:7f:b5:59:6e:e5:1d:34:5a:cc:cc:b7:
a7:2d:8c:df:ec:bb:15:c3:e0:0b:82:45:46:a3:23:fb:8e:fa:
7e:7b:ac:2c:03:83:83:3d:57:58:db:ab:64:6a:5f:64:99:63:
d6:72:3f:62:12:7d:1f:77:38:7e:4b:cb:a8:31:37:63:90:fc:
a9:2d:c4:8d:09:ae:3b:cf:54:8b:e2:a5:10:45:14:62:19:88:
fc:62:dd:76:6c:db:25:1d:88:11:4b:fa:d0:fc:da:87:7e:03:
74:1e:f4:84:48:79:bd:b1:8a:3d:4b:a5:e2:24:72:de:95:92:
ed:94:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 06:16:25 2026 by rpki-client