Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/iRsZ2PjkXBf3BQUJG5qXHJf0ctw.roa
File: iRsZ2PjkXBf3BQUJG5qXHJf0ctw.roa (raw, json)
Hash identifier: kUiUdie8GxRG51iyH+ySiQgxGWFqn7CTeMDeScNQ5Vk=
Subject key identifier: 89:1B:19:D8:F8:E4:5C:17:F7:05:05:09:1B:9A:97:1C:97:F4:72:DC
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A0C496BB03577845CDE0CB4721D8CB8BAD
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/iRsZ2PjkXBf3BQUJG5qXHJf0ctw.roa
Signing time: Mon 21 Sep 2026 15:30:07 +0000
ROA not before: Mon 21 Sep 2026 15:30:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 45.149.26.0/24 maxlen: 24
45.149.27.0/24 maxlen: 24
89.21.85.0/24 maxlen: 24
89.21.87.0/24 maxlen: 24
146.19.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 13:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:96:bb:03:57:78:45:cd:e0:cb:47:21:d8:cb:8b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 21 15:30:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=891b19d8f8e45c17f70505091b9a971c97f472dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:81:44:95:37:0f:8b:5b:40:97:fa:f1:07:
20:d0:a6:41:71:16:38:b3:87:22:ed:02:1d:54:90:
e9:f9:de:7f:5f:35:83:8e:65:88:33:2a:72:26:03:
ce:21:83:9f:6d:e8:33:4a:36:fc:8d:34:8b:09:29:
09:17:02:95:9f:66:19:1d:56:86:64:cf:79:b5:6a:
fc:f8:af:2c:55:22:99:e3:bc:79:f1:6f:9c:95:3c:
e5:39:32:2d:4a:43:38:11:9b:6d:d1:6e:53:8c:91:
79:24:b6:61:da:5f:f1:b4:91:08:24:39:5a:ed:61:
7a:d9:ac:12:f4:de:86:b0:63:17:5e:c1:39:db:73:
45:bd:5c:b6:08:6f:f1:82:95:81:18:59:03:53:e4:
70:57:f2:c7:bc:b9:b7:22:1b:0e:c2:6d:03:e4:f9:
ad:74:63:ad:68:22:a8:30:d2:e0:d0:6c:52:93:6b:
66:f8:d4:a7:fe:9a:33:a4:f2:7d:63:12:d9:71:ed:
90:3c:e0:ac:3c:dc:a7:fc:9f:62:e6:d9:8f:b4:87:
8c:a0:8a:55:46:59:a3:87:fc:5e:97:ec:91:97:49:
a0:eb:fd:15:76:3c:46:9e:98:d6:0c:08:18:34:51:
44:3e:7c:7d:48:54:a5:82:b9:cf:6c:29:3d:79:ec:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1B:19:D8:F8:E4:5C:17:F7:05:05:09:1B:9A:97:1C:97:F4:72:DC
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/iRsZ2PjkXBf3BQUJG5qXHJf0ctw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.26.0/23
89.21.85.0/24
89.21.87.0/24
146.19.56.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:13:92:f5:65:8c:3a:ba:21:16:b7:f9:1c:d0:7d:85:95:28:
77:f4:ab:9a:76:01:72:fc:56:45:c0:73:0f:65:38:68:6d:2c:
da:40:e2:22:92:e5:60:42:98:5a:c4:9c:57:5b:46:7a:16:34:
0f:23:13:e3:19:bf:c6:43:28:aa:12:d9:bf:4c:83:8e:f6:6e:
f9:f8:bb:f0:3a:e3:66:fc:57:66:8c:68:54:5e:b5:e5:7e:c3:
05:77:ce:76:64:b3:0c:83:51:75:1f:0d:f0:d7:16:0a:e4:b4:
76:60:bd:ae:01:13:98:62:62:b9:05:b7:45:f4:90:6b:19:96:
cf:9f:0a:7d:e1:75:48:c7:79:41:69:bd:65:c6:ef:e4:72:c0:
90:58:17:90:84:07:18:8d:69:82:7e:34:3e:28:51:09:b0:b0:
47:2a:3e:28:33:82:f0:97:20:91:76:9e:1f:28:0e:10:99:50:
4c:15:e8:c9:8b:4b:ee:8a:95:46:01:40:e4:c6:95:fc:7d:a3:
d8:2d:4c:55:d0:06:60:33:db:7e:64:10:ee:1d:6d:d1:a1:28:
90:9f:cc:06:1d:0f:6e:be:77:52:2e:26:29:94:3a:66:e3:6c:
e9:dc:6c:76:a8:b5:63:2b:0e:80:a4:f2:7c:84:22:a0:62:c3:
a0:b9:32:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:20:22 2026 by rpki-client