Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ehJY4ZI5ROQFVCJ2c0A4eWuTeiI.roa
File: ehJY4ZI5ROQFVCJ2c0A4eWuTeiI.roa (raw, json)
Hash identifier: CuAlv7FNjBC0JK/GeO2kxQnTvZ1LSmnHJZZ3vLWjyPI=
Subject key identifier: 7A:12:58:E1:92:39:44:E4:05:54:22:76:73:40:38:79:6B:93:7A:22
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CAC4856260BECCA232875A7F2DF499583
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ehJY4ZI5ROQFVCJ2c0A4eWuTeiI.roa
Signing time: Mon 02 Mar 2026 02:02:27 +0000
ROA not before: Mon 02 Mar 2026 02:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.142.0/24 maxlen: 24
5.83.150.0/24 maxlen: 24
5.175.137.0/24 maxlen: 24
5.175.162.0/24 maxlen: 24
5.175.174.0/24 maxlen: 24
5.175.187.0/24 maxlen: 24
5.175.225.0/24 maxlen: 24
5.230.9.0/24 maxlen: 24
5.231.23.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
5.231.203.0/24 maxlen: 24
5.231.247.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.129.0/24 maxlen: 24
89.144.1.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.187.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
94.249.198.0/24 maxlen: 24
94.249.201.0/24 maxlen: 24
94.249.236.0/24 maxlen: 24
95.215.33.0/24 maxlen: 24
178.18.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Mar 2026 05:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:48:56:26:0b:ec:ca:23:28:75:a7:f2:df:49:95:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 2 02:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a1258e1923944e405542276734038796b937a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:a4:c4:6d:cd:bc:c7:ea:74:4a:27:70:64:
ee:7f:f7:f1:bb:b0:da:94:f6:63:86:40:f9:0e:80:
7e:fd:67:82:5e:de:eb:8c:04:c1:79:e8:c9:71:14:
d2:51:22:b1:a4:32:5b:8e:4e:88:07:9b:ff:4b:91:
2a:86:19:97:fd:55:bf:4a:43:46:fa:e8:fc:0e:ce:
f6:3a:56:a0:c3:6d:14:ae:ee:33:ce:a6:88:15:a6:
18:2b:34:15:1b:be:94:c9:2a:fd:f3:02:4d:25:27:
2d:f2:64:8e:60:17:89:a5:88:45:d3:a1:20:30:64:
f2:a1:69:22:3e:3a:1e:c9:41:47:eb:b5:13:40:3a:
7c:ff:94:26:d8:7e:76:fa:f8:68:fa:39:bd:73:3e:
ff:d2:1a:28:8c:07:35:c7:c9:77:44:9d:01:00:9c:
ec:da:46:fa:cd:77:53:7a:0c:c9:f3:02:58:e9:36:
68:56:06:14:2f:d3:b6:38:3b:c7:0d:01:bb:3c:a5:
f0:33:26:4f:ca:3b:b0:f6:d5:b5:37:62:25:9c:9b:
4e:97:af:71:76:22:6a:a7:c0:03:e7:95:ee:75:df:
cb:f2:0e:c0:6b:b9:72:d9:02:2c:37:64:81:99:30:
82:f9:e5:6a:38:a0:67:e8:85:1a:80:85:37:8e:6d:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:12:58:E1:92:39:44:E4:05:54:22:76:73:40:38:79:6B:93:7A:22
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ehJY4ZI5ROQFVCJ2c0A4eWuTeiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.142.0/24
5.83.150.0/24
5.175.137.0/24
5.175.162.0/24
5.175.174.0/24
5.175.187.0/24
5.175.225.0/24
5.230.9.0/24
5.231.23.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
5.231.203.0/24
5.231.247.0/24
77.90.39.0/24
85.118.162.0/24
87.239.129.0/24
89.144.1.0/24
94.103.167.0/24
94.249.150.0/24
94.249.153.0/24
94.249.187.0/24
94.249.197.0-94.249.198.255
94.249.201.0/24
94.249.236.0/24
95.215.33.0/24
178.18.146.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:80:92:37:ab:b0:68:8f:e5:f8:31:d4:10:02:ff:d1:24:74:
41:fe:56:3f:d0:7d:4e:e4:ab:1a:29:b3:3f:c0:a5:0f:18:b0:
7c:09:04:39:5d:bc:8f:46:ff:eb:ab:cf:64:ec:01:cc:82:74:
ea:3c:0b:c5:28:a9:fb:63:3b:ae:98:9b:6b:a8:46:b1:98:24:
17:3f:db:52:0e:4e:57:d0:27:30:e3:b9:38:c4:ca:df:77:b8:
a4:2d:3b:6c:f3:d9:1b:ca:25:5e:3d:f3:1f:a9:a6:04:67:c0:
62:42:e3:23:06:75:34:23:e8:37:7f:10:ed:fc:a1:67:0d:c4:
0a:10:90:60:a9:09:ef:08:15:15:5e:fc:e8:0b:72:08:86:29:
95:78:81:f6:75:14:0e:54:59:8d:6c:f2:29:61:aa:26:1f:cc:
d0:f1:ca:96:8d:45:5b:79:ee:a8:aa:35:fd:39:e4:c0:57:6e:
d4:0c:9a:48:12:ce:1a:31:e1:28:66:be:cb:09:1a:15:dc:2d:
58:70:d0:52:ff:44:7d:22:7e:47:39:65:8f:ab:92:9b:b1:c1:
cb:5a:9e:d2:c9:46:55:82:f7:b8:6f:cd:fa:08:1b:f1:5f:8a:
a6:5f:95:9d:f3:e9:18:9f:ec:1c:04:58:1f:87:64:4d:fd:38:
a2:58:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:19:05 2026 by rpki-client