Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Rc4GVwBDXn13NNyz-YSp2UTvM5s.roa
File: Rc4GVwBDXn13NNyz-YSp2UTvM5s.roa (raw, json)
Hash identifier: eyK5Q+2skCVIeKdzra6sKnB57tiWy5pxqbri8DK722g=
Subject key identifier: 45:CE:06:57:00:43:5E:7D:77:34:DC:B3:F9:84:A9:D9:44:EF:33:9B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0B9CAC0D343E01B2EE03A6E7AFE9D6CEE
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Rc4GVwBDXn13NNyz-YSp2UTvM5s.roa
Signing time: Sat 19 Sep 2026 13:11:07 +0000
ROA not before: Sat 19 Sep 2026 13:11:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 77.67.11.0/24 maxlen: 24
194.231.143.0/24 maxlen: 24
194.231.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 05:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:ca:c0:d3:43:e0:1b:2e:e0:3a:6e:7a:fe:9d:6c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 19 13:11:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45ce065700435e7d7734dcb3f984a9d944ef339b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:77:fd:7c:a9:c4:bc:82:82:5c:ef:9e:05:
1c:29:56:d7:66:d1:7d:f3:ca:b2:c4:a7:ef:1f:cf:
76:8a:1e:23:22:04:c0:31:0f:e2:b9:b4:50:2d:fd:
2d:dd:e9:79:35:84:5b:48:b0:4c:61:40:4c:57:56:
64:17:f4:37:2e:c6:3b:5d:37:1f:c2:a0:08:cc:0c:
c1:5d:9e:5a:cc:4b:a8:d3:86:61:e1:d4:70:f3:e7:
50:36:c9:65:97:2a:a4:bc:d1:cb:09:22:38:9f:f2:
33:b7:b2:52:56:87:db:10:b2:7c:14:99:68:48:a6:
6e:72:76:29:d1:69:21:b0:12:70:24:ed:07:dd:1d:
8c:85:7b:f5:7e:81:76:17:fc:2b:f5:1d:af:f9:f9:
78:f4:8d:64:39:a6:92:df:70:bf:60:dd:e1:1c:72:
66:17:70:6c:ba:99:c6:0a:35:1a:d0:08:e8:6f:7f:
03:f7:03:80:7f:69:b2:fa:00:9d:44:f3:a5:b2:11:
62:73:ee:2d:90:fc:d6:e2:0e:e7:d4:f4:86:e2:64:
ba:41:92:5b:30:0d:e5:6d:dd:14:6f:91:f1:b8:8b:
db:ab:60:a4:d3:49:89:e1:4d:14:40:ed:bb:1b:4a:
03:15:fc:e1:7e:a4:37:ca:2e:cc:c3:52:8a:d4:f6:
52:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CE:06:57:00:43:5E:7D:77:34:DC:B3:F9:84:A9:D9:44:EF:33:9B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Rc4GVwBDXn13NNyz-YSp2UTvM5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.11.0/24
194.231.143.0/24
194.231.219.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:af:62:26:18:82:f5:bc:ad:d5:43:69:a6:83:f8:b8:3e:fd:
88:b6:3e:8f:2d:11:cb:d6:58:9c:3f:d7:05:07:76:4c:02:af:
9f:f4:7c:3a:1f:45:6c:80:62:18:08:28:35:4b:48:f1:45:ca:
9e:0d:b7:16:8e:c7:cb:a6:17:22:68:ea:ba:9e:da:5e:ca:20:
c2:01:77:59:c7:cf:87:41:3a:27:b7:45:0a:97:48:e8:0f:9d:
96:48:29:51:87:32:57:bf:46:d5:c3:44:1b:a3:43:22:8c:7c:
3e:e5:fb:53:c6:14:a8:51:af:9d:b7:e9:18:23:c6:7b:70:5d:
2e:a2:e2:52:2c:a7:62:48:3c:c3:87:e6:1e:07:19:7c:e4:05:
f4:15:00:8a:5d:52:be:b5:ef:15:a6:2b:bb:49:98:04:d1:87:
e4:28:68:25:39:2b:10:3e:28:bf:71:ac:54:4d:ca:fd:95:e1:
8c:b0:0d:67:8f:df:05:b1:c3:d8:72:57:16:b4:0a:71:88:2c:
06:ff:53:15:b8:be:c1:0a:b3:bc:d6:52:b7:5d:05:95:92:01:
74:20:94:22:41:57:9d:74:59:da:e9:a2:b4:67:cb:76:7d:23:
e5:a8:ae:f5:20:23:54:6f:b2:a9:c2:5f:80:de:02:95:c8:dc:
d5:4a:87:d1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaC5ysDTQ+AbLuA6bnr+nWzuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwOTE5MTMxMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWNlMDY1NzAwNDM1ZTdkNzczNGRjYjNmOTg0YTlkOTQ0ZWYzMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/x3/XypxLyCglzvngUcKVbXZtF9
88qyxKfvH892ih4jIgTAMQ/iubRQLf0t3el5NYRbSLBMYUBMV1ZkF/Q3LsY7XTcf
wqAIzAzBXZ5azEuo04Zh4dRw8+dQNslllyqkvNHLCSI4n/Izt7JSVofbELJ8FJlo
SKZucnYp0WkhsBJwJO0H3R2MhXv1foF2F/wr9R2v+fl49I1kOaaS33C/YN3hHHJm
F3BsupnGCjUa0Ajob38D9wOAf2my+gCdRPOlshFic+4tkPzW4g7n1PSG4mS6QZJb
MA3lbd0Ub5HxuIvbq2Ck00mJ4U0UQO27G0oDFfzhfqQ3yi7Mw1KK1PZSdwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEXOBlcAQ159dzTcs/mEqdlE7zObMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvUmM0R1Z3QkRYbjEzTk55ei1ZU3AyVVR2TTVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATUMLAwQA
wuePAwQAwufbMA0GCSqGSIb3DQEBCwUAA4IBAQBKr2ImGIL1vK3VQ2mmg/i4Pv2I
tj6PLRHL1licP9cFB3ZMAq+f9Hw6H0VsgGIYCCg1S0jxRcqeDbcWjsfLphciaOq6
ntpeyiDCAXdZx8+HQTont0UKl0joD52WSClRhzJXv0bVw0Qbo0MijHw+5ftTxhSo
Ua+dt+kYI8Z7cF0uouJSLKdiSDzDh+YeBxl85AX0FQCKXVK+te8Vpiu7SZgE0Yfk
KGglOSsQPii/caxUTcr9leGMsA1nj98FscPYclcWtApxiCwG/1MVuL7BCrO81lK3
XQWVkgF0IJQiQVeddFna6aK0Z8t2fSPlqK71ICNUb7Kpwl+A3gKVyNzVSofR
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:37:08 2026 by rpki-client