Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/blMpnMKn2yyaIkGe8IUUiwxr5fY.roa
File: blMpnMKn2yyaIkGe8IUUiwxr5fY.roa (raw, json)
Hash identifier: ZKCIh7SAxBYRm67hwaQNukWKoQDT32lcdnuaseMH12o=
Subject key identifier: 6E:53:29:9C:C2:A7:DB:2C:9A:22:41:9E:F0:85:14:8B:0C:6B:E5:F6
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019E925BE26FC0DB4F596066B5713C32F410
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/blMpnMKn2yyaIkGe8IUUiwxr5fY.roa
Signing time: Thu 04 Jun 2026 11:19:15 +0000
ROA not before: Thu 04 Jun 2026 11:19:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.203.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.206.0/23 maxlen: 24
194.143.206.0/24 maxlen: 24
194.143.209.0/24 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
194.143.222.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.200.0/24 maxlen: 24
195.114.201.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
213.220.0.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.6.0/24 maxlen: 24
213.220.11.0/24 maxlen: 24
213.220.13.0/24 maxlen: 24
213.220.14.0/24 maxlen: 24
213.220.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jun 2026 13:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:5b:e2:6f:c0:db:4f:59:60:66:b5:71:3c:32:f4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 4 11:19:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e53299cc2a7db2c9a22419ef085148b0c6be5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:9a:28:cc:26:71:d3:b4:85:d1:5c:e4:78:
90:03:19:07:43:c4:e9:00:6b:4b:a0:59:7d:54:9e:
b1:1b:fd:d8:ec:4f:e8:4a:cb:9e:84:a9:7b:c9:74:
9c:dc:76:6c:12:d9:a1:bb:4b:d7:77:9d:20:30:df:
a1:3c:09:25:c0:23:aa:a7:77:29:fc:87:52:15:32:
e3:bc:23:b7:9d:a0:76:17:5f:ce:ca:c9:09:e0:d4:
5d:29:d6:80:4d:25:74:50:28:32:b8:fb:cc:66:20:
ef:cc:58:e2:fb:46:60:80:00:d7:25:33:5b:bc:2a:
bf:b8:0d:99:b9:97:0d:29:ad:6a:81:3f:43:38:d8:
35:0f:0a:a8:dc:22:60:be:0f:36:10:bf:ea:31:16:
7d:4c:72:a1:ce:7f:40:2d:3b:f0:58:a0:04:79:a5:
ef:d7:73:a2:13:24:f1:34:6c:fe:07:68:0e:24:08:
80:9d:21:3f:59:8f:3b:19:4d:5f:c1:ce:74:9e:20:
ce:17:eb:87:56:81:4d:c0:3c:be:85:71:f0:c3:7f:
5b:17:a6:89:cf:64:6b:db:56:90:57:e0:a6:a9:5f:
95:02:94:ed:b6:10:e3:d7:f2:5b:53:ae:54:04:97:
4f:9b:f1:54:2f:d4:ed:5f:60:1f:f7:9c:86:45:8a:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:53:29:9C:C2:A7:DB:2C:9A:22:41:9E:F0:85:14:8B:0C:6B:E5:F6
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/blMpnMKn2yyaIkGe8IUUiwxr5fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
194.143.203.0/24
194.143.205.0-194.143.207.255
194.143.209.0/24
194.143.217.0-194.143.218.255
194.143.221.0-194.143.223.255
195.114.192.0/24
195.114.196.0-195.114.198.255
195.114.200.0/22
195.114.205.0/24
213.220.0.0/24
213.220.2.0/24
213.220.6.0/24
213.220.11.0/24
213.220.13.0-213.220.14.255
213.220.50.0/24
Signature Algorithm: sha256WithRSAEncryption
85:de:5d:30:57:3a:33:7d:15:83:f7:a6:6b:d3:e5:99:a2:73:
b2:8e:60:44:3b:27:bf:db:19:a4:b6:b5:b8:04:bd:53:f8:87:
42:ec:53:dc:3c:33:08:de:1d:67:38:27:b9:9d:93:b7:06:44:
e0:78:57:e2:97:98:8e:20:0c:ac:a4:3c:4f:8e:dc:18:c5:76:
2b:7f:da:14:9d:51:a4:40:78:ec:cc:da:5c:61:b0:a2:78:eb:
8e:24:33:c7:cb:ec:8c:0f:40:4e:3a:5a:3c:6e:93:04:9d:00:
6d:be:f0:50:bc:2e:0c:ae:a5:ba:4c:ce:54:76:d4:d5:81:64:
1d:29:b5:ce:38:44:37:92:91:0d:dc:ab:6b:54:c1:85:4d:06:
fd:24:b1:87:a9:c7:97:32:e9:6a:08:5a:84:44:be:23:dd:a0:
8b:2d:a9:b3:a5:99:43:01:8c:3a:9f:84:c0:bf:2c:a0:e8:3b:
a7:5a:a1:ae:16:31:35:36:87:86:e6:50:72:f8:7a:c0:9c:a6:
16:05:1b:e1:6a:1a:13:41:78:c5:03:b2:50:9b:ed:12:58:d9:
fb:32:f9:06:d7:12:cf:00:a5:41:d3:35:6f:de:a5:cf:d1:1c:
b8:34:b5:e5:35:ae:ca:39:5e:ed:12:94:94:27:39:84:19:3e:
4f:34:88:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:05:22 2026 by rpki-client