Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/X8yqCl6Drltq9IhQv2E46zsqz9g.roa
File: X8yqCl6Drltq9IhQv2E46zsqz9g.roa (raw, json)
Hash identifier: rH4FrJ3WRjdGjaHlVoXAndQF5X9BsZflL6HSbNp00es=
Subject key identifier: 5F:CC:AA:0A:5E:83:AE:5B:6A:F4:88:50:BF:61:38:EB:3B:2A:CF:D8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0CD8A4C8A5AB1676DE2ED5CE64AC52EE8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/X8yqCl6Drltq9IhQv2E46zsqz9g.roa
Signing time: Wed 23 Sep 2026 09:13:07 +0000
ROA not before: Wed 23 Sep 2026 09:13:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 45.94.46.0/24 maxlen: 24
45.94.47.0/24 maxlen: 24
45.137.42.0/23 maxlen: 23
45.137.62.0/24 maxlen: 24
45.140.14.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
45.147.28.0/24 maxlen: 24
45.158.196.0/24 maxlen: 24
141.193.20.0/24 maxlen: 24
185.164.57.0/24 maxlen: 24
193.5.65.0/24 maxlen: 24
194.62.67.0/24 maxlen: 24
2a0a:2d06:10::/48 maxlen: 48
2a0a:2d07:e5::/48 maxlen: 48
2a0f:3d86:44::/48 maxlen: 48
2a0f:3d86:100::/48 maxlen: 48
2a0f:3d86:101::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Oct 2026 12:19:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:8a:4c:8a:5a:b1:67:6d:e2:ed:5c:e6:4a:c5:2e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 23 09:13:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fccaa0a5e83ae5b6af48850bf6138eb3b2acfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:77:dc:e7:bf:64:06:32:d0:f0:89:e1:ed:
8f:38:ea:b3:aa:c1:6a:65:a4:dd:29:b7:cb:4e:31:
01:d6:2f:b4:5d:88:59:a9:c3:c7:32:b7:72:ea:11:
a1:ee:c3:eb:b7:24:d4:58:19:ff:8f:30:e4:03:ae:
7b:19:96:4a:73:20:74:89:63:1f:d4:96:97:67:06:
c3:0d:67:7e:d5:84:57:91:53:7a:a9:85:78:c1:27:
2f:8c:30:99:6c:cc:ec:d6:a6:3f:e0:af:d5:b7:0e:
83:68:3a:d2:f8:31:5c:61:3c:e5:5a:29:c2:7b:67:
ab:d0:d3:d1:aa:ca:36:cc:a6:ea:f4:ae:59:0f:22:
33:90:38:0d:fd:3c:29:ee:12:98:68:da:f7:41:03:
0d:6d:5d:49:bb:30:ca:77:27:d8:8c:43:3e:e9:48:
b8:33:b2:e5:4d:d9:f1:9f:31:7d:da:d1:8b:d3:f7:
9f:ce:d3:67:15:38:db:1c:75:61:7b:f0:03:47:59:
2e:61:19:c5:56:39:58:4e:b6:48:7e:7e:f8:23:77:
83:55:10:d2:19:4e:c6:7f:78:d0:00:64:04:0a:0d:
31:8d:6c:82:0a:71:5e:c7:be:08:b7:a6:86:80:12:
a7:cc:af:d4:08:10:b8:96:34:98:4d:32:d4:bd:3d:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CC:AA:0A:5E:83:AE:5B:6A:F4:88:50:BF:61:38:EB:3B:2A:CF:D8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/X8yqCl6Drltq9IhQv2E46zsqz9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.46.0/23
45.137.42.0/23
45.137.62.0/24
45.140.14.0/24
45.146.181.0/24
45.147.28.0/24
45.158.196.0/24
141.193.20.0/24
185.164.57.0/24
193.5.65.0/24
194.62.67.0/24
IPv6:
2a0a:2d06:10::/48
2a0a:2d07:e5::/48
2a0f:3d86:44::/48
2a0f:3d86:100::/47
2a0f:e1c0:37a::/48
2a0f:ea44:66::/48
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
94:ac:32:ca:7d:45:e5:23:9c:10:5c:3e:f4:f5:b2:cd:e7:fc:
86:38:85:27:4f:0f:b9:6b:b0:7c:8b:02:06:b7:49:e0:17:fa:
dc:14:cf:42:69:76:49:e8:d8:61:a3:f9:7c:6c:23:af:d1:05:
ba:ea:40:c2:8b:87:d3:26:85:25:55:26:47:5a:ff:7b:47:3a:
39:49:be:dd:7d:40:75:7d:9a:89:a6:8b:9f:6c:6f:a4:72:76:
26:41:21:f3:aa:c7:98:e2:1c:ff:23:f1:ec:12:9c:80:d5:f0:
c7:4f:c8:ef:79:2a:b7:9e:97:12:99:7c:57:5a:eb:c8:09:01:
f9:a7:9c:0e:df:61:32:f3:81:1f:99:b5:06:80:63:ea:75:9f:
ca:fb:2e:0a:d8:00:2f:6c:e6:44:24:6b:d9:d4:d0:88:26:7d:
20:13:e5:a5:4d:9f:16:92:85:09:69:61:c4:5a:38:fa:12:29:
1e:b4:57:59:ce:80:2c:c2:1c:c2:e4:93:71:a8:ca:35:dd:1c:
06:3d:5d:81:f9:de:5b:27:6d:12:ed:ef:e1:b3:90:87:22:a6:
03:24:3e:7b:35:e6:f8:6b:a4:c5:c0:2e:cb:0e:cd:c5:25:46:
2c:44:ea:e3:a9:e8:c5:7a:7c:0b:2e:96:4f:af:b4:c5:ab:83:
3b:97:7d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:09:22 2026 by rpki-client