Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/glVmEC11BDDak_5Kl6bHwc5DgBY.roa
File: glVmEC11BDDak_5Kl6bHwc5DgBY.roa (raw, json)
Hash identifier: RG8q3NyjtGQVWavWNPb2ONtu5ODxWDrCdblzfbSQ+m4=
Subject key identifier: 82:55:66:10:2D:75:04:30:DA:93:FE:4A:97:A6:C7:C1:CE:43:80:16
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019ECB7836B5237159D363F68F27242E631F
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/glVmEC11BDDak_5Kl6bHwc5DgBY.roa
Signing time: Mon 15 Jun 2026 13:28:33 +0000
ROA not before: Mon 15 Jun 2026 13:28:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.11.184.0/24 maxlen: 24
45.159.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jun 2026 07:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:78:36:b5:23:71:59:d3:63:f6:8f:27:24:2e:63:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jun 15 13:28:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=825566102d750430da93fe4a97a6c7c1ce438016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:02:e1:e1:5c:06:39:ca:4f:d2:4d:cd:9c:
81:ff:c7:bd:da:ab:04:f2:14:91:01:11:34:2b:ae:
1d:9f:bd:9e:0a:46:ff:12:a4:5f:15:72:99:b6:ab:
58:d9:05:06:b0:87:e6:2a:2c:56:96:f4:cc:b8:49:
dd:94:80:9b:e1:61:e1:e7:fa:4f:ea:5f:00:2c:81:
1d:70:ac:94:31:9c:77:32:77:bc:87:95:c1:c1:ea:
c9:53:f7:e2:b6:b0:24:2d:60:0d:8d:18:7b:3b:55:
d3:05:ac:7b:06:ce:0f:7c:0d:d6:4c:1c:cf:3d:92:
4e:1e:a6:a9:94:03:27:a5:b7:78:ed:e2:64:c5:08:
cd:21:d1:4c:1f:3e:05:6e:f6:7d:03:d7:87:b0:8d:
19:f0:76:5a:5d:1f:bd:22:9b:c5:54:1c:7e:87:6e:
b7:34:79:bd:1b:0d:58:aa:ae:0d:eb:50:11:87:c0:
ba:82:64:2a:95:d0:6b:2a:7b:ba:04:55:ba:d8:d7:
dc:a4:8b:78:bf:d0:b4:d2:83:be:df:30:dc:a5:09:
a9:73:44:d1:bd:7a:50:3a:06:89:3c:c7:81:e7:53:
58:23:ef:ba:d0:cd:7e:11:c8:e4:e4:62:62:f6:c7:
6d:5c:fa:3d:c5:b8:ef:bc:ac:5c:2d:53:66:b6:0e:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:55:66:10:2D:75:04:30:DA:93:FE:4A:97:A6:C7:C1:CE:43:80:16
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/glVmEC11BDDak_5Kl6bHwc5DgBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.184.0/24
45.159.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e1:12:c3:da:dd:6e:7f:16:04:1f:b9:ac:e4:0c:e0:0d:72:
01:ee:d3:52:36:67:bb:cf:af:30:dc:ff:d2:f3:cb:14:66:cf:
98:b0:de:a1:22:23:a2:ae:81:28:ee:5a:ed:e1:58:ed:56:cf:
47:2d:ac:80:91:61:fa:63:c8:0d:99:e1:20:ce:dc:4a:31:d0:
b9:4e:65:5a:ef:35:ee:d8:7c:c9:57:a5:b8:39:3e:7f:f8:af:
bd:60:29:58:f4:8d:cf:7c:e9:2f:bd:f9:2a:c8:84:80:4d:d1:
7e:7c:7a:a6:e0:c9:9c:d2:ff:87:c4:38:5d:e3:fd:15:61:47:
72:08:e2:ba:c5:3d:d0:0d:5f:80:6b:d0:38:ad:6a:27:a4:42:
8b:cb:40:1a:36:e8:70:91:f6:51:98:fa:39:03:43:f1:7b:ff:
5a:6e:25:19:d3:3e:86:64:2c:95:75:09:79:b5:c3:a9:fd:85:
e8:96:a4:00:53:75:5e:aa:af:27:e7:a1:8d:df:c2:83:16:3e:
ba:87:3c:14:bc:3f:ad:ba:df:81:ed:b9:9a:5c:64:c6:88:0d:
da:64:b8:ff:e7:f7:7b:8f:b7:aa:86:f3:87:3d:a5:6f:b4:25:
96:30:05:ea:0d:a4:7d:4c:b2:31:6b:d6:20:71:96:fd:af:50:
79:0b:5a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 16:00:13 2026 by rpki-client