Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6MJpU8zDAspuesagnaF2hmgk3PQ.roa
File: 6MJpU8zDAspuesagnaF2hmgk3PQ.roa (raw, json)
Hash identifier: s0yTs144uc01M6b97tTqEM4Jmk1jz63fPvMu8bOAHfU=
Subject key identifier: E8:C2:69:53:CC:C3:02:CA:6E:7A:C6:A0:9D:A1:76:86:68:24:DC:F4
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019D1F515D63A90696124ACF3A0EDB2C5438
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6MJpU8zDAspuesagnaF2hmgk3PQ.roa
Signing time: Tue 24 Mar 2026 10:08:39 +0000
ROA not before: Tue 24 Mar 2026 10:08:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52468
IP address blocks: 31.15.0.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
31.15.7.0/24 maxlen: 24
45.10.107.0/24 maxlen: 24
45.130.160.0/24 maxlen: 24
45.130.161.0/24 maxlen: 24
45.150.85.0/24 maxlen: 24
45.150.86.0/24 maxlen: 24
45.150.87.0/24 maxlen: 24
46.29.28.0/24 maxlen: 24
94.125.137.0/24 maxlen: 24
194.32.112.0/24 maxlen: 24
201.77.48.0/24 maxlen: 24
201.77.53.0/24 maxlen: 24
201.77.55.0/24 maxlen: 24
217.76.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Mar 2026 05:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:51:5d:63:a9:06:96:12:4a:cf:3a:0e:db:2c:54:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 24 10:08:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8c26953ccc302ca6e7ac6a09da176866824dcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:fc:b5:f2:2a:de:28:c0:18:45:8c:db:61:
d7:c0:e0:8e:55:2f:12:7b:ae:06:3b:f4:63:8c:fc:
8c:69:b7:6d:ba:7e:15:66:1c:f8:49:7d:d0:fd:24:
7e:67:d3:66:20:cd:ef:96:41:3b:6e:d6:4f:c6:29:
5b:75:2a:ad:12:87:99:5d:cd:ea:99:d4:81:90:57:
d3:e6:d9:56:c4:24:5d:ab:1c:08:56:37:b2:cc:98:
5a:1f:b6:cd:16:47:38:e0:d2:44:3f:f0:d8:71:3f:
fe:ea:16:6d:99:9b:25:65:46:a1:0d:35:10:cb:8a:
b2:a1:ad:ee:a1:b8:e5:b4:94:4f:ee:4a:d4:8c:81:
99:95:3e:38:b5:1c:05:51:13:ab:bc:7b:c9:a6:b3:
ed:d2:c4:58:19:81:38:3f:a5:e0:57:27:f6:3c:90:
46:ef:1a:b0:ad:cd:a4:a2:c2:f6:ae:0a:9b:89:6a:
56:1a:96:8b:85:3d:1c:a6:6c:fe:a3:31:92:17:5b:
3e:ba:c3:89:ec:1e:9d:44:1e:6a:4c:06:f2:df:98:
79:23:df:95:5d:77:a6:fe:4a:88:87:e7:ab:7f:90:
89:a7:08:b4:d4:70:47:0d:ed:52:79:30:88:51:e2:
77:5d:b7:97:b5:db:ba:74:8c:db:7c:b4:91:1c:5e:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C2:69:53:CC:C3:02:CA:6E:7A:C6:A0:9D:A1:76:86:68:24:DC:F4
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6MJpU8zDAspuesagnaF2hmgk3PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.0.0/24
31.15.5.0/24
31.15.7.0/24
45.10.107.0/24
45.130.160.0/23
45.150.85.0-45.150.87.255
46.29.28.0/24
94.125.137.0/24
194.32.112.0/24
201.77.48.0/24
201.77.53.0/24
201.77.55.0/24
217.76.240.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:62:1e:25:c4:e9:31:22:a6:8a:f7:c5:ed:f1:ce:73:e9:13:
e6:a8:64:0a:d8:aa:36:1a:9f:45:0e:5d:67:a6:3d:e7:67:2e:
9d:5e:46:4b:12:71:5c:d6:90:c2:eb:ea:e8:6c:1d:f4:37:56:
c6:99:d4:32:41:0c:ca:e1:cb:f7:55:33:46:86:51:fa:56:ac:
5d:29:c7:6b:1c:f6:62:cc:60:6b:bb:b9:ed:9d:f7:84:e2:d3:
ac:86:7c:55:aa:5b:ad:2e:bc:49:4b:ca:1f:54:92:8e:ba:91:
c4:6e:af:a2:39:9d:5b:9b:05:0c:44:20:c6:9f:68:fb:09:d2:
d8:ba:b6:31:e8:60:62:f6:5b:35:51:e2:9c:66:e3:b9:a2:34:
c7:60:91:00:ca:c0:93:3b:f3:b1:b4:39:39:04:4e:9f:0f:54:
85:1a:03:22:70:69:97:7c:02:6b:e1:86:08:86:35:22:23:76:
e5:2a:65:cb:f4:e7:8d:05:2e:59:8a:dc:c0:d1:dd:50:1f:04:
4e:3b:e6:56:de:89:a7:2c:10:91:69:f2:7d:3d:e2:13:0c:a5:
37:18:2e:32:cd:72:2c:47:47:6a:83:d7:cd:1e:86:a1:2c:e3:
52:c4:d2:78:67:54:83:26:66:85:57:4a:8e:a2:40:24:2c:84:
27:5c:dc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:54 2026 by rpki-client