Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1WUBr8e_gY4RW5eN7rcfuCdfamo.roa
File: 1WUBr8e_gY4RW5eN7rcfuCdfamo.roa (raw, json)
Hash identifier: cEZ1P5wncsbJrTmcR/7QUMPPco3HyI5pDK8glfjMFwU=
Subject key identifier: D5:65:01:AF:C7:BF:81:8E:11:5B:97:8D:EE:B7:1F:B8:27:5F:6A:6A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019CFB8EDD1D85598B2B17872A19521D3299
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1WUBr8e_gY4RW5eN7rcfuCdfamo.roa
Signing time: Tue 17 Mar 2026 11:29:29 +0000
ROA not before: Tue 17 Mar 2026 11:29:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5065
IP address blocks: 195.40.153.0/24 maxlen: 24
195.40.154.0/24 maxlen: 24
195.40.155.0/24 maxlen: 24
195.172.120.0/24 maxlen: 24
195.172.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Mar 2026 08:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:8e:dd:1d:85:59:8b:2b:17:87:2a:19:52:1d:32:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 17 11:29:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d56501afc7bf818e115b978deeb71fb8275f6a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:a7:91:5d:2a:1d:f7:99:52:2d:5f:96:4e:
d4:42:47:ce:75:d8:be:bc:5d:b3:76:aa:05:c6:90:
2c:8c:6d:65:ac:26:74:2b:e3:7a:15:89:40:81:c9:
61:d3:08:8c:eb:f7:99:48:d7:eb:d3:a6:6b:6c:67:
d4:36:c9:69:87:51:44:f2:d4:9d:8f:51:f8:cd:e0:
d3:b9:30:d7:c6:11:91:31:6d:eb:3d:ba:3d:70:35:
b6:89:62:11:a4:bb:f8:3d:93:bd:9f:4a:8b:67:13:
f3:9d:00:e6:ea:93:f0:d7:32:52:4e:f7:9f:4c:41:
d1:48:ff:cc:67:ad:ad:ef:e7:f8:67:d1:a8:a6:99:
cc:cb:57:dd:9f:79:15:70:1d:b3:9d:db:09:71:4a:
0f:f0:55:01:30:aa:07:94:29:30:a3:c0:7d:7a:cf:
8e:46:d5:8b:07:46:c4:ae:3d:ea:13:19:d7:79:72:
87:53:c3:ea:49:0b:20:de:e0:23:85:29:c5:fe:a2:
8d:c9:a4:d3:60:44:03:b4:7e:06:1e:d2:81:3d:46:
ef:dd:8f:60:db:26:53:0e:42:68:db:ea:2f:76:92:
4f:05:53:0f:c8:e4:fb:86:ec:2d:8c:76:9e:1d:c6:
fa:e0:1e:e8:97:4c:f2:ff:8c:b9:06:36:69:ec:9d:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:65:01:AF:C7:BF:81:8E:11:5B:97:8D:EE:B7:1F:B8:27:5F:6A:6A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1WUBr8e_gY4RW5eN7rcfuCdfamo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.40.153.0-195.40.155.255
195.172.120.0/24
195.172.145.0/24
Signature Algorithm: sha256WithRSAEncryption
35:67:06:cd:b4:b2:3d:5b:47:7a:28:0e:65:84:e2:dd:55:43:
e2:f8:3f:85:3b:65:e5:d9:bc:4b:6d:ce:fc:20:9f:21:92:fb:
70:d7:f0:15:ca:2f:58:b2:95:0e:1a:f0:90:2a:04:de:1e:15:
36:55:99:b5:ee:a0:30:2e:68:de:6b:e7:21:f0:61:f6:69:1e:
08:ab:0a:d1:a4:fd:2f:4c:e4:72:1e:91:1b:cf:4f:f3:18:58:
be:ea:72:8e:33:ac:70:c6:8a:b2:1c:67:69:43:5a:ae:8a:0c:
72:ba:2e:3a:cd:32:fc:90:d0:ce:cc:ac:12:7f:1b:c9:e4:e0:
99:05:e0:c2:42:93:ea:2a:3c:75:81:c9:ba:55:61:1f:16:85:
b4:76:3f:05:c9:10:af:3e:01:fd:ba:f5:b7:a1:98:64:6b:2e:
41:ea:0b:70:87:12:a6:00:6f:2c:06:fe:61:48:02:b8:55:6d:
00:a6:a4:4d:ce:ad:1f:93:8e:22:6d:c4:33:51:6c:e1:ef:29:
2d:70:73:68:8d:94:43:db:6b:8f:82:98:00:82:11:05:7a:f5:
5f:4b:43:10:68:26:e3:52:df:32:23:9e:1f:ca:25:43:93:d7:
74:57:82:a3:1d:0f:8f:26:93:97:59:ef:51:6c:d7:2f:fd:0b:
0a:32:2c:d3
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZz7jt0dhVmLKxeHKhlSHTKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwMzE3MTEyOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTY1MDFhZmM3YmY4MThlMTE1Yjk3OGRlZWI3MWZiODI3NWY2YTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo2nkV0qHfeZUi1flk7UQkfOddi+
vF2zdqoFxpAsjG1lrCZ0K+N6FYlAgclh0wiM6/eZSNfr06ZrbGfUNslph1FE8tSd
j1H4zeDTuTDXxhGRMW3rPbo9cDW2iWIRpLv4PZO9n0qLZxPznQDm6pPw1zJSTvef
TEHRSP/MZ62t7+f4Z9GoppnMy1fdn3kVcB2zndsJcUoP8FUBMKoHlCkwo8B9es+O
RtWLB0bErj3qExnXeXKHU8PqSQsg3uAjhSnF/qKNyaTTYEQDtH4GHtKBPUbv3Y9g
2yZTDkJo2+ovdpJPBVMPyOT7huwtjHaeHcb64B7ol0zy/4y5BjZp7J20hwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFNVlAa/Hv4GOEVuXje63H7gnX2pqMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvMVdVQnI4ZV9nWTRSVzVlTjdyY2Z1Q2RmYW1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBADDKJkD
BALDKJgDBADDrHgDBADDrJEwDQYJKoZIhvcNAQELBQADggEBADVnBs20sj1bR3oo
DmWE4t1VQ+L4P4U7ZeXZvEttzvwgnyGS+3DX8BXKL1iylQ4a8JAqBN4eFTZVmbXu
oDAuaN5r5yHwYfZpHgirCtGk/S9M5HIekRvPT/MYWL7qco4zrHDGirIcZ2lDWq6K
DHK6LjrNMvyQ0M7MrBJ/G8nk4JkF4MJCk+oqPHWBybpVYR8WhbR2PwXJEK8+Af26
9behmGRrLkHqC3CHEqYAbywG/mFIArhVbQCmpE3OrR+TjiJtxDNRbOHvKS1wc2iN
lEPba4+CmACCEQV69V9LQxBoJuNS3zIjnh/KJUOT13RXgqMdD48mk5dZ71Fs1y/9
CwoyLNM=
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:32 2026 by rpki-client