Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/UoYhO6C3xzLdac47aPsFkJwOEFw.roa
File: UoYhO6C3xzLdac47aPsFkJwOEFw.roa (raw, json)
Hash identifier: 6kP3kxxYUk2T4f+bbBbbXtxwI72l7luxuxn4gNIY+Z8=
Subject key identifier: 52:86:21:3B:A0:B7:C7:32:DD:69:CE:3B:68:FB:05:90:9C:0E:10:5C
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A0CDE4042381572B9D042BB5341A2B28E7
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/UoYhO6C3xzLdac47aPsFkJwOEFw.roa
Signing time: Wed 23 Sep 2026 10:51:07 +0000
ROA not before: Wed 23 Sep 2026 10:51:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200740
IP address blocks: 45.134.12.0/23 maxlen: 23
45.134.14.0/23 maxlen: 23
80.76.32.0/23 maxlen: 23
80.76.34.0/23 maxlen: 23
89.44.84.0/23 maxlen: 23
91.200.14.0/24 maxlen: 24
91.200.15.0/24 maxlen: 24
92.118.8.0/23 maxlen: 23
95.81.77.0/24 maxlen: 24
95.81.93.0/24 maxlen: 24
95.81.94.0/23 maxlen: 23
95.81.112.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.119.0/24 maxlen: 24
95.81.120.0/24 maxlen: 24
103.85.112.0/24 maxlen: 24
103.85.113.0/24 maxlen: 24
103.249.132.0/23 maxlen: 23
103.249.134.0/23 maxlen: 23
104.128.131.0/24 maxlen: 24
104.128.138.0/23 maxlen: 23
104.128.142.0/23 maxlen: 23
104.128.142.0/24 maxlen: 24
104.128.143.0/24 maxlen: 24
109.69.56.0/23 maxlen: 23
109.69.58.0/23 maxlen: 23
135.136.182.0/24 maxlen: 24
135.136.183.0/24 maxlen: 24
135.136.184.0/23 maxlen: 23
135.136.184.0/24 maxlen: 24
135.136.185.0/24 maxlen: 24
135.136.189.0/24 maxlen: 24
157.228.130.0/23 maxlen: 23
157.228.130.0/24 maxlen: 24
157.228.131.0/24 maxlen: 24
157.228.132.0/23 maxlen: 23
157.228.132.0/24 maxlen: 24
157.228.133.0/24 maxlen: 24
157.228.148.0/23 maxlen: 23
157.228.148.0/24 maxlen: 24
157.228.149.0/24 maxlen: 24
157.228.150.0/23 maxlen: 23
157.228.150.0/24 maxlen: 24
157.228.151.0/24 maxlen: 24
157.228.154.0/23 maxlen: 23
157.228.154.0/24 maxlen: 24
157.228.155.0/24 maxlen: 24
157.228.160.0/23 maxlen: 23
157.228.160.0/24 maxlen: 24
157.228.161.0/24 maxlen: 24
157.228.180.0/23 maxlen: 23
157.228.180.0/24 maxlen: 24
157.228.181.0/24 maxlen: 24
185.103.252.0/23 maxlen: 23
185.103.254.0/23 maxlen: 23
185.114.72.0/23 maxlen: 23
193.239.160.0/23 maxlen: 23
193.239.166.0/23 maxlen: 23
2a0c:5d00:3002::/48 maxlen: 48
2a0c:5d00:3004::/48 maxlen: 48
2a0c:5d00:3005::/48 maxlen: 48
2a0c:5d00:3007::/48 maxlen: 48
2a0c:5d00:3008::/48 maxlen: 48
2a0c:5d00:3010::/48 maxlen: 48
2a0c:5d00:3012::/48 maxlen: 48
2a0c:5d00:ff08::/48 maxlen: 48
2a0c:5d00:ff09::/48 maxlen: 48
2a0c:5d00:ff0a::/48 maxlen: 48
2a0c:5d00:ff0b::/48 maxlen: 48
2a0c:5d00:ff0c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 24 Sep 2026 10:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:e4:04:23:81:57:2b:9d:04:2b:b5:34:1a:2b:28:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Sep 23 10:51:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5286213ba0b7c732dd69ce3b68fb05909c0e105c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:ce:ff:37:0b:e0:39:5d:15:c8:9d:94:6c:
ea:96:11:da:60:2f:07:f7:e3:82:d3:73:b1:70:c9:
16:35:de:d3:f5:31:ad:56:7b:8a:56:fa:90:a9:01:
2b:ac:c2:4b:25:f0:4e:90:47:28:6c:93:04:70:56:
b5:df:de:08:39:cd:6b:57:6b:c4:da:a9:9b:b6:4c:
77:ac:32:9b:15:d7:cc:88:ad:97:1a:e2:96:e7:ae:
1b:af:58:67:a9:5a:ba:d6:7b:fc:50:b6:38:41:81:
93:24:1e:8c:35:01:e7:34:c8:8b:12:96:71:3c:0b:
ec:a1:51:7a:58:eb:54:4f:c6:26:1c:5b:a6:75:8c:
17:e2:a1:e0:81:1c:d7:6d:46:ba:51:b3:10:b9:04:
8c:60:6b:98:93:ff:69:65:1a:53:92:a9:96:ca:c5:
78:28:ab:d8:48:41:bd:fd:d0:85:ac:f9:33:5e:f3:
6a:b5:09:ae:ec:b3:bd:0d:10:4b:d6:11:7e:39:e9:
d0:9e:24:17:58:78:21:80:d0:9c:1a:2c:cf:5b:3b:
c4:7c:c6:47:a6:3e:6f:74:af:35:13:91:d8:f9:8c:
c8:aa:6d:e7:dd:c8:ae:8c:5a:b0:2b:56:39:b6:c1:
c6:82:57:cb:e2:ae:e2:17:60:1c:38:e6:e2:a2:b0:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:86:21:3B:A0:B7:C7:32:DD:69:CE:3B:68:FB:05:90:9C:0E:10:5C
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/UoYhO6C3xzLdac47aPsFkJwOEFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/22
80.76.32.0/22
89.44.84.0/23
91.200.14.0/23
92.118.8.0/23
95.81.77.0/24
95.81.93.0-95.81.95.255
95.81.112.0/23
95.81.119.0-95.81.120.255
103.85.112.0/23
103.249.132.0/22
104.128.131.0/24
104.128.138.0/23
104.128.142.0/23
109.69.56.0/22
135.136.182.0-135.136.185.255
135.136.189.0/24
157.228.130.0-157.228.133.255
157.228.148.0/22
157.228.154.0/23
157.228.160.0/23
157.228.180.0/23
185.103.252.0/22
185.114.72.0/23
193.239.160.0/23
193.239.166.0/23
IPv6:
2a0c:5d00:3002::/48
2a0c:5d00:3004::/47
2a0c:5d00:3007::-2a0c:5d00:3008:ffff:ffff:ffff:ffff:ffff
2a0c:5d00:3010::/48
2a0c:5d00:3012::/48
2a0c:5d00:ff08::-2a0c:5d00:ff0c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
01:81:36:af:69:95:70:11:7f:70:02:30:91:08:4b:53:43:2a:
11:ed:a6:8d:b7:3e:ff:20:65:f9:d1:8f:5a:ed:de:0a:a4:9b:
ae:23:50:46:fb:eb:97:26:a7:47:1a:de:38:e7:2a:62:ae:86:
4e:f6:31:a8:fe:57:23:36:26:5e:83:89:e7:b6:40:92:da:61:
eb:5a:95:3f:f8:1c:c7:37:6c:e8:3b:cb:d9:ce:86:db:a2:b8:
02:5e:6b:33:fc:0a:a4:73:e1:fb:b9:84:a6:82:82:52:84:a5:
7e:f4:23:ff:0c:75:6d:c3:99:42:6a:00:b2:1e:cb:2a:55:6c:
c8:11:55:b1:6d:6d:ac:88:62:33:cf:fe:c7:ac:4c:5a:96:09:
22:9c:cb:6b:95:4b:68:b4:e0:de:81:4c:10:5e:e2:56:21:ae:
c6:55:3c:0e:2a:e3:4d:4c:aa:d6:55:19:47:26:cd:7d:8c:de:
33:cd:d8:62:2e:3c:2d:1a:87:14:d2:f4:4e:c4:18:56:0b:5c:
34:06:a6:80:7c:c2:b8:e3:59:71:36:13:a3:57:dc:ba:3d:0f:
8e:0a:fb:18:ee:ae:79:96:06:d5:7d:a5:d3:11:72:47:3d:0e:
04:35:87:1f:f7:a6:13:c2:9d:0e:54:c8:eb:c3:bc:0c:f1:d3:
19:3e:69:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:53:55 2026 by rpki-client