Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/71yhY-WxVQqalC9K9DhFD7UMOVE.roa
File: 71yhY-WxVQqalC9K9DhFD7UMOVE.roa (raw, json)
Hash identifier: kLitY0U2epUMjXBjAnc5HrpMdJDHeOxrQOTxtTGu2Ns=
Subject key identifier: EF:5C:A1:63:E5:B1:55:0A:9A:94:2F:4A:F4:38:45:0F:B5:0C:39:51
Certificate issuer: /CN=6d7eee355779634e02a14b39220367f3b34e5b95
Certificate serial: 01A0A1CCC8B6CBDCD2ED902A403BF11BA907
Authority key identifier: 6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/71yhY-WxVQqalC9K9DhFD7UMOVE.roa
Signing time: Mon 14 Sep 2026 21:22:27 +0000
ROA not before: Mon 14 Sep 2026 21:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21100
IP address blocks: 5.34.180.0/23 maxlen: 23
46.28.65.0/24 maxlen: 24
46.28.66.0/24 maxlen: 24
46.28.68.0/24 maxlen: 24
46.28.69.0/24 maxlen: 24
82.118.16.0/24 maxlen: 24
82.118.19.0/24 maxlen: 24
185.14.28.0/22 maxlen: 22
195.123.216.0/21 maxlen: 21
195.123.236.0/24 maxlen: 24
195.123.237.0/24 maxlen: 24
217.12.200.0/23 maxlen: 23
217.12.208.0/23 maxlen: 23
217.12.215.0/24 maxlen: 24
217.12.218.0/24 maxlen: 24
217.12.219.0/24 maxlen: 24
217.12.220.0/24 maxlen: 24
2a02:27a9::/32 maxlen: 32
2a02:27ab::/32 maxlen: 32
2a02:27ae::/32 maxlen: 32
2a02:27af::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 23 Sep 2026 16:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:cc:c8:b6:cb:dc:d2:ed:90:2a:40:3b:f1:1b:a9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7eee355779634e02a14b39220367f3b34e5b95
Validity
Not Before: Sep 14 21:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef5ca163e5b1550a9a942f4af438450fb50c3951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:e9:b8:9f:a5:d1:5a:3c:fa:4e:1b:61:85:
76:c0:b0:76:58:62:10:db:e9:4e:1e:ce:21:b1:6a:
8f:31:ab:c8:6c:1d:41:d1:92:4c:be:c9:c7:e1:0c:
fb:0d:07:b2:65:aa:0a:70:eb:bc:8d:cf:2a:ba:2a:
42:77:d5:8f:5c:4d:a7:15:7e:b6:2c:56:bd:4b:f1:
1a:04:ec:24:36:ea:67:44:e5:b9:8b:80:14:ed:21:
99:dd:5e:4e:2c:54:24:66:34:a2:4b:01:2e:39:e0:
14:cd:98:70:21:6c:c1:ac:ca:ba:a7:e0:64:09:19:
77:1a:55:a4:ce:4f:5d:d2:bd:07:8c:4c:05:35:62:
c9:8c:61:04:f0:48:34:02:f1:d1:29:8d:50:af:5d:
a7:70:56:27:06:3f:b9:56:a3:8d:23:d8:c8:95:ea:
d2:88:ab:8d:68:e0:0b:2f:ff:71:e9:bd:7f:07:88:
ea:3d:7f:70:25:37:77:b3:64:90:e5:af:f6:f3:e4:
7c:ff:55:36:57:40:3f:28:06:77:db:4b:e3:98:31:
09:5f:5e:08:6d:2e:31:a5:81:c8:49:85:c9:c8:20:
62:00:3d:3f:51:04:d4:6b:be:67:42:4c:8a:5e:17:
fa:ba:5f:22:6c:d7:98:27:d3:dd:5b:a1:5b:72:5b:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5C:A1:63:E5:B1:55:0A:9A:94:2F:4A:F4:38:45:0F:B5:0C:39:51
X509v3 Authority Key Identifier:
keyid:6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/71yhY-WxVQqalC9K9DhFD7UMOVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.180.0/23
46.28.65.0-46.28.66.255
46.28.68.0/23
82.118.16.0/24
82.118.19.0/24
185.14.28.0/22
195.123.216.0/21
195.123.236.0/23
217.12.200.0/23
217.12.208.0/23
217.12.215.0/24
217.12.218.0-217.12.220.255
IPv6:
2a02:27a9::/32
2a02:27ab::/32
2a02:27ae::/31
Signature Algorithm: sha256WithRSAEncryption
37:4c:83:51:2c:91:a2:ef:f5:bc:2a:9c:a8:f3:45:f1:1d:99:
67:93:81:4f:40:17:e3:8a:ed:55:12:c2:bb:0e:a3:d0:be:25:
53:41:1f:38:76:75:da:be:96:e5:2f:e6:73:18:fe:1e:f1:11:
e4:70:72:52:05:cc:95:46:58:8e:e1:cb:6d:47:61:e7:f9:ca:
f5:6e:e2:4a:fe:d9:3b:28:41:07:ea:cf:b0:bd:89:31:b1:24:
aa:c0:9b:0c:7b:6a:6a:31:98:2a:fb:c9:78:bc:59:af:f0:95:
26:de:f7:78:ab:7d:2d:51:5a:fd:be:6b:f4:b2:7f:94:bb:eb:
f9:d0:7b:45:d7:f6:9b:95:70:44:1b:f3:cb:72:b8:9f:aa:8a:
84:96:65:b9:b3:65:8a:8c:b1:15:89:80:c7:0a:1c:b6:e6:38:
09:8f:2c:8c:fd:46:fe:24:61:41:28:a0:f4:fe:60:bd:db:57:
43:1d:86:fd:00:99:26:bf:23:03:0f:44:2b:64:fc:d6:83:9c:
d3:af:85:59:d9:16:04:d6:52:55:a7:6f:0e:94:b2:06:e3:5d:
49:db:2b:7e:da:94:5e:7a:f0:bd:a3:33:71:af:a6:0a:f2:07:
a8:2b:4c:a9:68:aa:7e:54:09:94:bd:d5:17:1b:92:98:57:90:
31:8f:40:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:15:24 2026 by rpki-client