Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/vt424h6obDKnwJMOXmvrwQrJ0n4.roa
File: vt424h6obDKnwJMOXmvrwQrJ0n4.roa (raw, json)
Hash identifier: UgqAOqQEs4ea9tunaMvnfVZQOJ0nNuuI2B7r/TjjcKc=
Subject key identifier: BE:DE:36:E2:1E:A8:6C:32:A7:C0:93:0E:5E:6B:EB:C1:0A:C9:D2:7E
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A129DFCD007B333A7BAFE842C9192CC66B
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/vt424h6obDKnwJMOXmvrwQrJ0n4.roa
Signing time: Sun 11 Oct 2026 07:31:35 +0000
ROA not before: Sun 11 Oct 2026 07:31:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.11.186.0/24 maxlen: 24
185.201.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Oct 2026 08:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:df:cd:00:7b:33:3a:7b:af:e8:42:c9:19:2c:c6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Oct 11 07:31:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bede36e21ea86c32a7c0930e5e6bebc10ac9d27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:99:fd:82:c0:26:ec:6e:58:e1:49:b2:39:
0c:55:65:a1:12:f2:21:2b:6d:8c:71:fc:47:e7:ef:
36:c8:2e:11:b4:b5:6d:c4:2f:e5:db:37:c8:86:65:
5f:e5:89:06:04:49:0b:b3:d8:a8:c2:b7:f9:59:ad:
e7:6e:71:29:17:51:00:f2:49:fa:f4:62:aa:5a:4b:
7b:67:d0:32:97:0f:e9:fb:fc:70:47:04:30:f3:35:
04:11:59:0f:57:0b:2d:3e:64:ec:36:ab:b6:4e:ef:
c0:df:c3:a7:a0:97:c7:5f:55:6c:ed:2c:76:62:a8:
e4:b2:d0:af:3d:10:28:ba:db:ca:5f:31:8d:9d:c7:
bb:47:f8:a8:d6:cc:d2:1d:4a:8d:53:dc:3e:e8:fd:
7e:25:4e:55:a2:0a:92:8d:0b:54:3c:b1:3b:93:ce:
5e:e5:1b:5f:66:f9:6f:95:1a:9f:62:72:5e:6c:40:
6a:36:b5:f7:ac:9a:20:0b:62:07:c9:ce:12:99:bb:
e0:ef:72:31:d8:8a:3d:9b:df:07:cf:1f:1e:7e:43:
b2:87:d5:44:89:ad:a4:e2:2f:a8:f3:6a:60:33:03:
d3:b6:c9:41:70:9c:32:4b:45:3e:0a:fb:7b:6e:a2:
44:c4:ce:7b:b7:2c:89:af:88:86:2d:c4:fe:17:3b:
5a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DE:36:E2:1E:A8:6C:32:A7:C0:93:0E:5E:6B:EB:C1:0A:C9:D2:7E
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/vt424h6obDKnwJMOXmvrwQrJ0n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/24
185.201.49.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:6f:ee:b6:65:f0:d4:51:a0:f4:70:0f:83:3a:7c:ff:a0:90:
a3:e6:97:9d:01:0e:3e:c7:c6:90:6e:e8:00:75:65:18:89:d3:
d1:2e:39:63:c0:4d:05:a8:63:14:b9:cc:d4:d9:e9:00:86:f2:
50:4a:00:df:d5:76:35:64:83:8b:6b:fe:9c:91:c7:c2:09:8c:
82:a6:e8:35:24:e7:2e:92:41:3b:4b:a9:7d:4b:d7:5a:a5:48:
9d:7e:6a:66:3f:06:89:43:19:77:c5:94:d3:70:54:a0:88:29:
2f:33:9e:8b:d2:f4:77:9f:00:4c:ee:b8:f7:5b:e1:2b:6f:4a:
ac:8d:09:ce:b1:78:24:84:a3:e9:c8:14:d3:d6:7c:d2:6a:0d:
37:67:7a:7f:74:94:d7:6b:d8:e3:5b:d3:d4:2a:fd:93:56:0f:
d2:ea:3c:89:65:00:30:b3:97:d8:99:d7:be:8a:38:90:0c:9a:
61:6b:a5:7e:49:32:4e:2c:f0:35:90:74:b6:74:4f:9d:c7:62:
06:21:dd:53:2a:93:37:25:17:9d:44:48:c6:0d:db:09:ca:b8:
77:51:cc:48:50:14:1f:5e:e0:45:7a:75:f3:08:88:09:9c:77:
f6:29:d2:3d:ce:a4:7b:57:ae:4d:69:e1:ec:21:dd:3e:3e:c0:
1d:76:42:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 12:55:47 2026 by rpki-client