Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QsYwPeClKeqkOdZ-g2KaxC8UQQg.roa
File: QsYwPeClKeqkOdZ-g2KaxC8UQQg.roa (raw, json)
Hash identifier: Yr1QjL7HPXIbO5RzYOI8NQZXs465EB0NGDCrofY7xHU=
Subject key identifier: 42:C6:30:3D:E0:A5:29:EA:A4:39:D6:7E:83:62:9A:C4:2F:14:41:08
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A068806A65D74A36F1D4C97FA1EC8EDE19
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QsYwPeClKeqkOdZ-g2KaxC8UQQg.roa
Signing time: Thu 03 Sep 2026 18:20:41 +0000
ROA not before: Thu 03 Sep 2026 18:20:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27411
IP address blocks: 45.137.87.0/24 maxlen: 24
45.152.197.0/24 maxlen: 24
2a0c:7886:b4::/48 maxlen: 48
2a0e:15c6::/32 maxlen: 32
2a0e:c784::/32 maxlen: 32
2a0f:31c5::/32 maxlen: 32
2a0f:e7c1::/32 maxlen: 32
2a10:67c7::/32 maxlen: 32
2a10:68c6::/32 maxlen: 32
2a13:9280::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 04 Sep 2026 20:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:80:6a:65:d7:4a:36:f1:d4:c9:7f:a1:ec:8e:de:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 3 18:20:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42c6303de0a529eaa439d67e83629ac42f144108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:39:99:d9:d1:76:39:a7:08:2b:df:09:c1:
e7:46:4d:d9:9d:39:82:33:88:f0:22:04:f3:d6:28:
a4:05:05:07:a1:91:2d:24:bb:07:b0:1b:3c:80:c7:
a7:8f:8e:f5:68:43:3f:24:e6:be:71:fa:2a:1d:17:
49:44:8d:15:d2:2b:9f:07:ee:de:40:5d:6b:61:fa:
af:a5:37:2d:10:e9:1a:ea:a7:2d:94:17:1f:a4:36:
9e:35:2a:c3:f9:be:d8:6c:15:be:cb:bd:45:c9:35:
25:8f:05:01:b8:39:80:dd:a8:a6:a6:47:71:17:e0:
ad:c5:2b:2b:8e:79:d5:b8:06:03:1f:e0:10:ca:af:
55:37:78:5a:c0:dd:0b:5e:e4:40:52:bb:d4:0d:20:
5c:48:07:93:b3:db:8f:52:4a:36:f2:64:f8:a0:0c:
75:c2:2a:ea:5f:6a:60:3b:1a:54:d7:3e:20:90:de:
07:48:55:ab:11:f0:12:f2:2e:5c:9c:9c:0b:60:f1:
18:88:72:9a:ee:80:f1:28:5a:25:0e:75:18:81:42:
02:e2:d7:ac:2e:1a:16:c1:23:0a:ea:84:96:2a:ea:
43:e8:65:d4:5e:80:68:ea:43:a9:b7:0b:bf:d6:8d:
de:cf:e1:2a:30:0f:5f:cc:8c:06:10:66:ae:fc:06:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C6:30:3D:E0:A5:29:EA:A4:39:D6:7E:83:62:9A:C4:2F:14:41:08
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QsYwPeClKeqkOdZ-g2KaxC8UQQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.87.0/24
45.152.197.0/24
IPv6:
2a0c:7886:b4::/48
2a0e:15c6::/32
2a0e:c784::/32
2a0f:31c5::/32
2a0f:e7c1::/32
2a10:67c7::/32
2a10:68c6::/32
2a13:9280::/32
Signature Algorithm: sha256WithRSAEncryption
42:55:4e:97:63:38:da:34:fa:9c:1e:0c:ac:34:1c:07:3d:56:
27:59:58:3b:6f:69:dd:e9:60:b2:41:2a:50:37:5a:4d:36:f0:
c0:95:35:63:36:f9:b1:24:85:27:e0:cd:67:cb:61:1e:11:e9:
3b:ec:31:f6:16:9d:7f:3d:52:69:d4:aa:bb:03:c8:c4:21:f5:
08:98:03:31:3d:7f:d8:e5:13:e5:e8:d6:ad:3c:53:71:cb:74:
e7:cf:33:dd:0b:36:ec:72:3b:0a:6e:c8:5a:bd:ac:14:cd:bc:
fe:db:9c:24:45:b3:bf:59:49:46:f8:3e:86:00:bf:75:57:50:
f1:53:8a:81:bb:8e:3f:8e:f3:84:90:45:9b:a7:70:cb:0f:7d:
24:8b:6f:42:94:f4:1b:fd:c5:74:2f:da:03:75:c3:d5:ff:3f:
33:3c:f6:6c:c2:f2:40:eb:86:88:e8:43:b7:70:63:47:84:00:
94:07:1f:56:86:88:d2:f6:5a:99:73:fe:70:90:07:ea:0f:8e:
20:69:1c:f5:f7:fa:51:85:e3:62:de:c8:dd:25:10:f9:83:f4:
ca:7c:e5:41:82:1a:69:36:2b:d0:02:4e:0f:8c:ba:2a:f1:a9:
5a:03:ec:a5:a5:69:8b:1d:05:e5:b2:2d:10:e0:c2:53:8a:29:
8d:f6:61:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:29 2026 by rpki-client