Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/R46n1lzeju2P-h1UBpbyo02eBUE.roa
File: R46n1lzeju2P-h1UBpbyo02eBUE.roa (raw, json)
Hash identifier: sKKLIgM+zz8xzQRQsZ8OgFAqREjjWQegdoN8ZD4S1w8=
Subject key identifier: 47:8E:A7:D6:5C:DE:8E:ED:8F:FA:1D:54:06:96:F2:A3:4D:9E:05:41
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019E8C37BCCE8B899D220868E181578F0CA3
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/R46n1lzeju2P-h1UBpbyo02eBUE.roa
Signing time: Wed 03 Jun 2026 06:42:03 +0000
ROA not before: Wed 03 Jun 2026 06:42:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.148.128.0/22 maxlen: 24
37.148.128.0/24 maxlen: 24
37.148.129.0/24 maxlen: 24
37.148.130.0/24 maxlen: 24
37.148.131.0/24 maxlen: 24
45.157.158.0/23 maxlen: 24
93.88.153.0/24 maxlen: 24
93.88.154.0/24 maxlen: 24
93.88.157.0/24 maxlen: 24
93.88.158.0/24 maxlen: 24
95.155.128.0/23 maxlen: 24
95.155.128.0/24 maxlen: 24
95.155.129.0/24 maxlen: 24
95.155.131.0/24 maxlen: 24
95.155.133.0/24 maxlen: 24
95.155.134.0/24 maxlen: 24
95.155.136.0/24 maxlen: 24
95.155.137.0/24 maxlen: 24
95.155.140.0/24 maxlen: 24
95.155.144.0/24 maxlen: 24
95.155.145.0/24 maxlen: 24
95.155.146.0/23 maxlen: 24
95.155.146.0/24 maxlen: 24
95.155.147.0/24 maxlen: 24
95.155.148.0/23 maxlen: 24
95.155.149.0/24 maxlen: 24
95.155.152.0/22 maxlen: 24
95.155.152.0/24 maxlen: 24
95.155.153.0/24 maxlen: 24
95.155.156.0/24 maxlen: 24
95.155.160.0/20 maxlen: 24
95.155.176.0/21 maxlen: 24
95.155.182.0/24 maxlen: 24
152.89.84.0/24 maxlen: 24
152.89.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jun 2026 07:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:37:bc:ce:8b:89:9d:22:08:68:e1:81:57:8f:0c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jun 3 06:42:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=478ea7d65cde8eed8ffa1d540696f2a34d9e0541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:34:d9:52:37:6c:86:1d:cf:da:7a:d8:3c:
2b:7f:bc:f8:fb:6c:39:07:51:4d:2d:74:0f:64:c2:
64:d2:ac:6d:da:77:8b:ae:a8:fc:67:64:14:f8:8c:
cd:e6:32:25:55:78:ed:9f:54:8f:f3:dc:cf:c4:6f:
c5:e6:04:e5:5d:32:b3:e3:83:ef:1a:eb:42:90:5f:
73:6a:99:9b:6f:eb:fe:44:8f:2f:b2:20:42:32:d9:
64:19:a5:bd:50:6e:4c:da:28:c4:73:86:0e:51:1c:
47:eb:d7:2e:b2:55:ab:a8:77:70:81:4f:a3:30:a6:
e7:c3:dd:55:63:24:5f:1d:e3:f2:8d:f6:65:5e:6d:
fd:f5:72:75:16:f1:db:49:3e:a4:32:ce:f1:1d:a1:
c7:ca:1d:05:dc:d9:e3:23:48:fb:a4:b0:1a:c3:fa:
b1:cb:80:86:74:50:d9:f5:af:a1:8e:57:91:c6:3f:
91:52:90:41:c5:5f:24:53:9c:73:7c:68:db:1f:a9:
db:69:d2:6e:51:fb:b1:ad:eb:4d:a1:7f:89:f6:4e:
fd:fd:ce:19:bd:46:a5:72:3b:e7:09:9a:39:d4:51:
d1:9a:bb:83:66:fa:89:4e:7b:9b:d5:92:c8:60:e5:
87:de:e7:30:a9:ff:12:09:db:07:66:ae:59:bc:9d:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8E:A7:D6:5C:DE:8E:ED:8F:FA:1D:54:06:96:F2:A3:4D:9E:05:41
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/R46n1lzeju2P-h1UBpbyo02eBUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.128.0/22
45.157.158.0/23
93.88.153.0-93.88.154.255
93.88.157.0-93.88.158.255
95.155.128.0/23
95.155.131.0/24
95.155.133.0-95.155.134.255
95.155.136.0/23
95.155.140.0/24
95.155.144.0-95.155.149.255
95.155.152.0-95.155.156.255
95.155.160.0-95.155.183.255
152.89.84.0/24
152.89.87.0/24
Signature Algorithm: sha256WithRSAEncryption
32:26:be:10:2c:d2:1d:ed:21:9d:1e:cf:30:05:29:6a:63:ca:
78:96:c3:cf:da:01:d0:9e:f1:db:13:e3:fc:a4:ed:43:2d:b7:
46:02:a3:88:88:34:de:a5:7e:fa:8e:e9:cc:c3:d1:f1:49:23:
50:3f:72:c5:38:d0:bf:07:55:4b:e2:ee:14:55:a4:92:7d:e6:
2c:1f:58:7e:2d:89:59:69:f8:e4:36:08:77:10:d7:0a:ba:57:
d7:f7:2e:ed:75:4a:d1:bc:b5:6b:24:fe:42:64:32:99:10:0c:
23:ec:aa:02:3b:96:81:55:87:d7:00:e8:75:75:db:68:5b:7c:
e0:f6:c0:63:6d:9d:2f:53:17:db:0a:38:3e:b0:6e:00:76:98:
45:c0:0b:06:3f:2d:1d:9d:ae:a4:04:77:3a:44:01:7c:1b:8e:
01:4c:ac:9b:65:25:11:be:f7:fa:5b:53:46:2a:98:fa:25:ab:
d3:c8:20:6c:00:3a:e9:73:06:f4:02:11:3f:8a:f5:cf:b7:2d:
00:61:e9:7e:80:39:5d:68:8d:dc:62:eb:f6:17:b7:19:16:61:
af:37:78:b4:34:4d:e7:be:8d:2a:0c:54:a6:e6:68:32:9f:46:
3e:37:76:5b:a1:8a:87:66:5d:dc:d2:fd:fc:dd:fa:90:30:f7:
7a:bb:4d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:05:47 2026 by rpki-client