Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cyhv6aDFKfSDc1LWmX8ous2PzFM.roa
File: cyhv6aDFKfSDc1LWmX8ous2PzFM.roa (raw, json)
Hash identifier: OqhGKtuA9Tr59qhLHKKHoU68j8oqxyn+rfGyHy/gsHA=
Subject key identifier: 73:28:6F:E9:A0:C5:29:F4:83:73:52:D6:99:7F:28:BA:CD:8F:CC:53
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CB7DF8DE5C9D8F136C928EEDE2E2BC03A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cyhv6aDFKfSDc1LWmX8ous2PzFM.roa
Signing time: Wed 04 Mar 2026 08:03:27 +0000
ROA not before: Wed 04 Mar 2026 08:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 45.9.119.0/24 maxlen: 24
45.86.15.0/24 maxlen: 24
45.86.245.0/24 maxlen: 24
45.86.247.0/24 maxlen: 24
45.87.240.0/24 maxlen: 24
45.92.168.0/24 maxlen: 24
45.92.169.0/24 maxlen: 24
45.92.170.0/24 maxlen: 24
45.92.171.0/24 maxlen: 24
45.92.247.0/24 maxlen: 24
45.94.36.0/24 maxlen: 24
45.94.37.0/24 maxlen: 24
45.94.38.0/24 maxlen: 24
45.94.39.0/24 maxlen: 24
45.94.46.0/24 maxlen: 24
45.94.47.0/24 maxlen: 24
45.95.98.0/23 maxlen: 23
45.95.99.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.128.24.0/24 maxlen: 24
45.129.124.0/24 maxlen: 24
45.130.124.0/24 maxlen: 24
45.130.127.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
45.131.213.0/24 maxlen: 24
45.133.209.0/24 maxlen: 24
45.133.210.0/24 maxlen: 24
45.136.175.0/24 maxlen: 24
45.136.228.0/24 maxlen: 24
45.137.40.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.137.42.0/23 maxlen: 23
45.137.60.0/24 maxlen: 24
45.140.14.0/24 maxlen: 24
45.145.12.0/24 maxlen: 24
45.145.13.0/24 maxlen: 24
45.145.14.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
45.147.28.0/24 maxlen: 24
45.151.101.0/24 maxlen: 24
45.151.102.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
45.154.56.0/24 maxlen: 24
45.155.70.0/24 maxlen: 24
45.155.71.0/24 maxlen: 24
45.158.196.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
185.155.200.0/24 maxlen: 24
185.155.203.0/24 maxlen: 24
185.164.56.0/24 maxlen: 24
185.164.57.0/24 maxlen: 24
192.166.153.0/24 maxlen: 24
193.5.65.0/24 maxlen: 24
193.27.19.0/24 maxlen: 24
194.62.67.0/24 maxlen: 24
195.74.90.0/24 maxlen: 24
195.85.194.0/24 maxlen: 24
2a0a:2d06:10::/48 maxlen: 48
2a0f:3d86:44::/48 maxlen: 48
2a0f:3d86:100::/48 maxlen: 48
2a0f:3d86:101::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:e1c0:a8b9::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
2a13:c900:99::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 06 Mar 2026 16:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:df:8d:e5:c9:d8:f1:36:c9:28:ee:de:2e:2b:c0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 4 08:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73286fe9a0c529f4837352d6997f28bacd8fcc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:4f:07:9a:3a:3b:f9:c9:fc:31:7f:7f:0d:
04:b3:e9:61:9d:b9:4f:7a:db:39:46:96:bb:38:4f:
b1:28:d1:a2:36:80:1f:e9:90:23:4a:3d:ce:00:47:
b8:17:a5:4b:e7:42:f2:3d:5f:91:e9:30:94:a5:d9:
06:32:40:3d:d2:d9:b9:2e:0d:e2:aa:db:e7:94:a8:
ea:bd:c5:f2:92:8a:83:bb:27:18:d4:2d:22:2e:5f:
01:86:63:0e:5b:ae:b4:4d:b7:3d:9a:61:c8:be:d1:
fe:9d:af:27:92:d1:e2:f0:b1:bc:26:4a:55:5b:ee:
a3:10:e9:72:ed:ef:99:30:92:0d:72:9c:ed:e2:47:
6d:c2:77:9e:af:18:c2:fa:79:04:61:81:43:90:42:
5f:4b:e0:4e:5f:d0:0b:8d:41:ce:86:17:2b:16:6e:
20:f4:7f:0a:c3:b7:26:7d:48:65:6b:d9:bc:e2:0a:
b1:fc:c7:28:ba:2b:59:4e:9b:97:d2:ac:38:b0:1d:
35:79:38:aa:35:d4:bd:dc:c7:34:72:71:e4:86:3a:
dc:3f:e0:31:40:94:2c:29:43:e2:b7:f2:94:5f:61:
2c:c2:fa:77:5b:45:4d:3a:68:ad:c3:64:79:13:14:
c4:05:4a:bc:69:08:10:1d:c0:49:f5:89:c7:3d:64:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:28:6F:E9:A0:C5:29:F4:83:73:52:D6:99:7F:28:BA:CD:8F:CC:53
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cyhv6aDFKfSDc1LWmX8ous2PzFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.119.0/24
45.86.15.0/24
45.86.245.0/24
45.86.247.0/24
45.87.240.0/24
45.92.168.0/22
45.92.247.0/24
45.94.36.0/22
45.94.46.0/23
45.95.98.0/23
45.118.249.0/24
45.128.24.0/24
45.129.124.0/24
45.130.124.0/24
45.130.127.0/24
45.130.254.0/24
45.131.213.0/24
45.133.209.0-45.133.210.255
45.136.175.0/24
45.136.228.0/24
45.137.40.0/22
45.137.60.0/24
45.140.14.0/24
45.145.12.0-45.145.14.255
45.146.181.0/24
45.147.28.0/24
45.151.101.0-45.151.102.255
45.152.198.0/24
45.154.56.0/24
45.155.70.0/23
45.158.196.0/24
113.30.153.0/24
113.30.155.0/24
185.155.200.0/24
185.155.203.0/24
185.164.56.0/23
192.166.153.0/24
193.5.65.0/24
193.27.19.0/24
194.62.67.0/24
195.74.90.0/24
195.85.194.0/24
IPv6:
2a0a:2d06:10::/48
2a0f:3d86:44::/48
2a0f:3d86:100::/47
2a0f:e1c0:37a::/48
2a0f:e1c0:a8b9::/48
2a13:8c86:120::/48
2a13:c900:99::/48
Signature Algorithm: sha256WithRSAEncryption
0b:da:29:fa:c0:dd:96:4d:82:e9:ad:ff:d9:f8:12:c5:70:c9:
c0:f2:f9:82:58:d3:6d:52:d1:74:4e:55:78:fa:d6:7c:6d:f5:
65:cf:d2:9a:39:88:09:3e:24:51:99:fc:20:27:89:7f:c7:91:
12:0a:45:e2:3a:e1:c0:e8:c9:b3:c8:a2:56:15:63:4f:b0:a6:
84:d4:b5:6f:95:ef:1d:77:59:5b:79:50:ff:05:c9:7c:b5:84:
d8:5b:4a:7f:6e:de:db:e5:d2:8d:44:1b:8d:af:7b:9f:03:f0:
73:63:08:47:b3:24:17:75:fb:eb:46:ce:53:ff:57:14:87:08:
d1:4e:a8:27:aa:e6:f7:f6:71:e4:ba:b6:10:08:37:87:ac:79:
92:25:7e:6d:c7:e1:83:c7:a2:2f:63:e5:b2:6f:55:18:25:72:
77:de:3a:a7:dd:c0:58:da:92:ce:8a:d5:9d:e2:35:08:b7:7e:
f2:08:51:3d:5c:4c:6f:82:1a:fd:fb:9d:96:12:fc:fe:e9:a4:
30:aa:6b:10:38:ab:2e:fc:99:ad:49:ac:51:8c:c0:8b:f8:8c:
2d:60:e6:64:a2:44:a2:c5:a8:2e:c8:f1:e5:d2:51:25:d1:80:
a5:53:aa:a4:fc:07:22:04:1d:3a:32:64:8a:12:2d:9c:aa:d7:
f0:9d:3b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 19:05:59 2026 by rpki-client