Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tlpSgltyijbwEcokg5ZVS-VuHZo.roa
File: tlpSgltyijbwEcokg5ZVS-VuHZo.roa (raw, json)
Hash identifier: dGX7udMAieaR+W5aZaeV7QH59neOLXnMosXLUvdCO1o=
Subject key identifier: B6:5A:52:82:5B:72:8A:36:F0:11:CA:24:83:96:55:4B:E5:6E:1D:9A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B8A4E0C0BBA37A56B107C8BDA59C4958
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tlpSgltyijbwEcokg5ZVS-VuHZo.roa
Signing time: Sat 19 Sep 2026 07:50:08 +0000
ROA not before: Sat 19 Sep 2026 07:50:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 46.34.22.0/24 maxlen: 24
82.110.231.0/24 maxlen: 24
87.82.240.0/24 maxlen: 24
87.83.0.0/24 maxlen: 24
87.83.86.0/24 maxlen: 24
87.83.173.0/24 maxlen: 24
87.84.153.0/24 maxlen: 24
87.85.68.0/24 maxlen: 24
87.85.141.0/24 maxlen: 24
212.134.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Sep 2026 03:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:a4:e0:c0:bb:a3:7a:56:b1:07:c8:bd:a5:9c:49:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 19 07:50:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b65a52825b728a36f011ca248396554be56e1d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:5a:03:ad:20:e9:a6:c4:02:5e:1c:cd:d0:
1f:4e:29:2d:34:a6:cb:24:ec:18:18:d6:4d:5b:49:
e7:76:97:7a:fa:f3:3d:9e:15:e9:ab:d8:a8:67:db:
fc:5a:8c:67:09:35:50:bb:90:d7:93:ea:42:04:25:
9c:ee:98:3c:69:b8:f1:4a:58:87:52:e3:f1:22:d2:
9c:19:47:04:94:85:75:61:35:b3:4e:76:a8:34:0c:
83:e2:c6:e7:f3:97:ab:51:74:04:08:c9:31:84:34:
57:2f:c6:50:dc:52:bf:8a:57:27:83:aa:8b:e8:5a:
65:a1:5f:58:ae:40:24:00:2e:a6:4b:35:3d:a9:19:
45:22:ee:73:72:e1:c9:33:e3:56:2b:e9:85:fd:fe:
66:b5:4b:6a:d7:31:9c:37:0c:11:21:0f:e2:33:2e:
17:72:99:12:10:7a:09:05:7c:53:db:31:ed:d9:05:
f4:f3:a8:e4:b6:a0:7a:56:ed:8c:34:75:a8:d3:be:
28:ef:97:c4:fe:09:15:36:8c:b3:31:47:d4:a4:18:
99:36:68:a8:27:86:1a:23:29:ea:41:f9:af:9c:cb:
a5:c0:aa:67:19:c0:eb:0b:98:64:48:d6:28:dc:83:
61:ea:50:a4:95:9c:13:1f:c8:44:fa:76:ed:65:9f:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5A:52:82:5B:72:8A:36:F0:11:CA:24:83:96:55:4B:E5:6E:1D:9A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tlpSgltyijbwEcokg5ZVS-VuHZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.22.0/24
82.110.231.0/24
87.82.240.0/24
87.83.0.0/24
87.83.86.0/24
87.83.173.0/24
87.84.153.0/24
87.85.68.0/24
87.85.141.0/24
212.134.131.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1d:bc:d6:0c:5b:61:3b:1a:79:e9:0e:b9:74:64:b4:3d:af:
19:7e:ec:27:1b:e4:af:14:c9:2b:1b:3e:33:0b:38:76:ff:12:
f1:41:86:2f:18:ab:a9:db:a5:1f:69:8d:9f:86:6d:d4:d2:b4:
f5:61:75:a8:49:8d:83:4c:2b:5f:b7:86:dc:8f:d6:9b:42:31:
a8:28:fe:04:00:21:a5:fd:da:d4:20:d8:45:cf:b1:ba:c4:fd:
54:fb:bb:1d:5d:95:c7:ca:96:a2:98:7f:d0:9d:8b:c1:89:61:
d3:52:25:73:b0:c0:f0:82:92:2d:13:b7:16:d8:bd:e0:54:90:
1a:5a:40:02:7f:91:d8:49:2d:a2:36:a4:9c:c5:7e:3b:38:bc:
11:87:ca:1e:15:fe:b6:8f:12:f7:46:84:1f:eb:ca:1c:8a:1a:
2e:7a:59:c7:d5:6b:01:59:af:3d:48:59:b7:49:f8:48:d8:23:
b6:95:7f:c5:84:df:2e:da:9e:54:55:6f:22:3d:e0:5d:5e:b6:
6f:a1:42:fd:d6:8c:a2:0e:78:a4:dc:da:84:5d:bb:80:3d:35:
f1:11:8d:1e:4c:5e:8d:11:52:d0:ce:1a:13:12:ee:1c:24:ff:
8e:8d:1b:77:c0:fb:5d:d4:6e:37:54:27:b1:67:ba:8f:3d:9d:
e7:3b:41:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:13:27 2026 by rpki-client