Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/CK0U9plc7s_R6uBtaJfRzEiwSQQ.roa
File: CK0U9plc7s_R6uBtaJfRzEiwSQQ.roa (raw, json)
Hash identifier: /do4PPIgs/l6rzsMKVLrAjfmG79mvZnuHKhZkDWXZHY=
Subject key identifier: 08:AD:14:F6:99:5C:EE:CF:D1:EA:E0:6D:68:97:D1:CC:48:B0:49:04
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019CEC1820A0A9DC2C8EE4C3D76B8B5DC286
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/CK0U9plc7s_R6uBtaJfRzEiwSQQ.roa
Signing time: Sat 14 Mar 2026 11:25:29 +0000
ROA not before: Sat 14 Mar 2026 11:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 5.182.114.0/24 maxlen: 24
83.137.154.0/24 maxlen: 24
88.209.194.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.229.0/24 maxlen: 24
88.209.232.0/24 maxlen: 24
88.209.233.0/24 maxlen: 24
88.209.234.0/24 maxlen: 24
88.209.235.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Mar 2026 07:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:18:20:a0:a9:dc:2c:8e:e4:c3:d7:6b:8b:5d:c2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 14 11:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08ad14f6995ceecfd1eae06d6897d1cc48b04904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:4a:ca:4e:f0:5f:1e:1d:0e:38:bf:24:0f:
1c:fa:2d:43:e1:85:28:5f:aa:a5:81:f3:26:a3:20:
d7:ec:28:f0:8e:9b:16:88:d7:ad:5f:79:d3:18:3c:
de:08:0f:57:0e:87:a4:34:ac:f2:48:d2:4a:30:fe:
47:0b:26:30:36:a7:83:b4:f2:e1:f6:dc:f3:fe:33:
56:ff:60:12:3a:66:a1:67:9a:28:3e:01:89:65:7a:
94:ed:f9:9c:5b:c2:03:f0:f1:68:0f:c2:e6:83:30:
a5:dd:5b:95:ea:12:90:8f:1d:62:53:f5:5c:5d:5e:
fd:80:70:d6:42:49:30:4f:99:da:e8:ba:de:31:de:
c1:aa:f7:c5:ef:2e:10:ea:ee:a1:31:6d:75:0f:fa:
4f:6d:e2:23:59:18:cd:b7:e5:f8:b2:e0:0d:ae:9c:
14:2d:cb:10:5d:e7:bb:de:bb:e8:90:7c:93:12:95:
d3:d5:54:e9:8d:eb:8d:96:37:68:74:76:07:03:bf:
52:85:73:44:07:49:c0:ab:0a:1e:e0:6d:1e:81:0e:
bc:b1:c0:bc:21:54:01:ac:20:31:f8:23:88:00:7a:
94:7c:a0:18:35:af:e9:13:8d:1d:4a:e4:f1:85:51:
4a:4d:6a:01:e3:fe:c9:11:8c:5f:b0:40:e2:e4:01:
aa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:14:F6:99:5C:EE:CF:D1:EA:E0:6D:68:97:D1:CC:48:B0:49:04
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/CK0U9plc7s_R6uBtaJfRzEiwSQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.114.0/24
83.137.154.0/24
88.209.194.0/24
88.209.216.0/24
88.209.229.0/24
88.209.232.0/22
92.52.219.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:81:c9:53:54:a8:da:8e:50:b0:87:b6:9e:23:fe:c5:d6:49:
08:63:bf:6f:90:52:2f:2c:9e:70:0c:a9:5d:38:c0:01:70:10:
12:30:db:d5:f2:a5:7f:9a:d9:d1:dc:60:83:02:5e:96:10:fa:
ff:ec:7d:99:0b:07:e9:94:e2:e6:b7:6a:30:0e:c3:ef:0a:0f:
36:72:0c:9e:b1:7a:c1:83:7f:d1:3b:55:bb:bc:d5:07:d9:07:
7e:88:bb:20:1e:b6:a6:e7:61:da:f6:c9:60:84:d6:10:10:36:
1f:b5:a2:e9:5c:c5:8b:8d:a8:e8:89:5f:c1:bb:bc:a8:d3:4b:
bb:c2:e5:9a:56:26:4c:66:57:35:21:0f:18:1b:ff:06:5b:22:
52:f3:66:df:08:94:29:13:08:ae:be:50:cf:58:c9:6c:a4:9e:
9d:08:6e:c3:e6:3c:b2:35:c2:77:21:0d:3e:b4:70:6c:91:c7:
42:66:d6:f2:ea:99:06:70:4c:f5:bf:88:da:ea:92:61:2b:a1:
17:03:87:da:4e:96:4e:8f:af:d3:b2:22:1a:2a:39:fa:f7:a2:
ec:91:50:35:75:b0:a2:58:4f:aa:78:e5:77:84:ca:83:d7:51:
a2:0c:0c:f4:d1:b1:b4:03:c1:a9:ac:17:80:68:8e:97:2c:40:
55:b7:4d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 00:20:22 2026 by rpki-client