Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/JHsqggFGqSLiCkTacePdQ5p6ssM.roa
File: JHsqggFGqSLiCkTacePdQ5p6ssM.roa (raw, json)
Hash identifier: 0SvpRCrjKhzaw6BXS503L2DUDYndhwrcbJiLbrrTotg=
Subject key identifier: 24:7B:2A:82:01:46:A9:22:E2:0A:44:DA:71:E3:DD:43:9A:7A:B2:C3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A198A8DCCBC1759C9902C95550274E842D
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/JHsqggFGqSLiCkTacePdQ5p6ssM.roa
Signing time: Sun 01 Nov 2026 19:49:25 +0000
ROA not before: Sun 01 Nov 2026 19:49:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.253.0/24 maxlen: 24
45.155.254.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.148.0/24 maxlen: 24
185.199.149.0/24 maxlen: 24
185.199.212.0/24 maxlen: 24
185.199.214.0/23 maxlen: 24
185.221.24.0/24 maxlen: 24
185.221.25.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.226.183.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Nov 2026 19:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:a8:dc:cb:c1:75:9c:99:02:c9:55:50:27:4e:84:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Nov 1 19:49:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=247b2a820146a922e20a44da71e3dd439a7ab2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:e9:2d:d3:e5:60:d7:23:57:ad:3c:51:19:
65:17:d1:87:97:a7:60:a3:24:f5:3b:cb:90:66:58:
3e:19:4e:4b:cb:64:d6:12:31:b5:34:45:61:a3:8f:
44:2d:a1:f4:7d:a5:3b:a1:9a:f3:df:82:f5:bc:10:
97:22:cf:87:e8:b7:9f:50:66:5f:fe:ab:72:5b:f5:
9d:92:f2:ad:a8:14:92:31:29:2f:46:9c:23:11:b5:
f3:5a:29:65:8c:d5:d1:b5:a2:5e:e1:be:c7:dc:50:
a7:c3:97:d5:b1:7c:9f:05:2e:65:02:65:a8:0e:f3:
e2:3b:1f:bb:34:dc:5f:cc:04:d2:ec:3b:e3:9b:c7:
ed:48:ce:15:8b:3a:a4:60:0f:d3:45:0c:52:f2:86:
1a:5e:ce:3f:c5:69:f7:1d:e9:5b:93:89:69:0b:fa:
16:c8:4e:1b:cc:c8:35:70:71:93:f8:96:33:f5:96:
76:e6:c6:f8:00:40:c0:8d:cc:39:e2:53:36:c0:a0:
fb:96:8e:33:3e:09:c1:06:8b:76:57:ca:6d:f9:46:
07:7a:85:47:78:6a:82:24:d5:86:ec:90:61:15:57:
ab:f4:11:f0:6a:da:01:4f:cf:23:ac:96:9d:a8:b3:
bd:04:0a:f4:3c:2f:73:6b:10:60:30:bf:44:f8:b0:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7B:2A:82:01:46:A9:22:E2:0A:44:DA:71:E3:DD:43:9A:7A:B2:C3
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/JHsqggFGqSLiCkTacePdQ5p6ssM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0-45.155.254.255
45.157.209.0/24
79.98.245.0-79.98.246.255
176.125.250.0/23
185.199.148.0/23
185.199.212.0/24
185.199.214.0/23
185.221.24.0-185.221.26.255
185.226.183.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e0:6b:ad:60:4f:5c:d4:7f:5b:e6:06:aa:db:e3:ff:38:d6:
9a:9d:14:88:0d:75:38:e4:dc:32:67:7b:14:f1:af:0c:94:a8:
6b:98:62:59:9f:4f:b8:e8:f5:3a:b3:41:80:98:35:18:11:03:
ea:10:de:51:39:b7:dd:11:bc:59:76:4e:45:4c:30:12:93:74:
1b:60:1c:71:7f:ff:e9:ab:01:56:28:55:95:91:8f:de:a0:6d:
25:69:be:63:90:09:58:a1:8d:a0:68:5a:bf:f6:66:8c:25:02:
2d:ca:94:e2:bb:20:0c:85:1f:8a:d1:64:8f:97:b1:5a:7d:10:
7d:f2:3c:c5:69:4a:64:e2:45:d1:fe:ad:e4:3c:7f:55:c4:39:
49:8d:98:ad:27:a0:aa:7e:ae:2e:1d:40:09:c0:2c:c0:eb:17:
77:53:f5:ee:b9:99:9a:b3:94:d6:13:13:7f:1a:48:62:c5:23:
59:82:ff:74:d6:67:59:63:35:9b:e0:43:c6:db:35:a7:bb:95:
71:3c:1a:68:f9:7a:4d:10:59:a1:20:60:cb:0f:61:96:5d:1a:
b6:5c:d1:41:ec:29:4e:cf:13:22:d7:2d:f0:bb:8e:ff:48:96:
ba:ce:8b:ad:b3:8c:49:bb:fd:92:30:3f:b9:49:a3:3a:f6:19:
ef:8f:35:fb
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAaGYqNzLwXWcmQLJVVAnToQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYxMTAxMTk0OTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDdiMmE4MjAxNDZhOTIyZTIwYTQ0ZGE3MWUzZGQ0MzlhN2FiMmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbLpLdPlYNcjV608URllF9GHl6dg
oyT1O8uQZlg+GU5Ly2TWEjG1NEVho49ELaH0faU7oZrz34L1vBCXIs+H6LefUGZf
/qtyW/WdkvKtqBSSMSkvRpwjEbXzWilljNXRtaJe4b7H3FCnw5fVsXyfBS5lAmWo
DvPiOx+7NNxfzATS7Dvjm8ftSM4VizqkYA/TRQxS8oYaXs4/xWn3Helbk4lpC/oW
yE4bzMg1cHGT+JYz9ZZ25sb4AEDAjcw54lM2wKD7lo4zPgnBBot2V8pt+UYHeoVH
eGqCJNWG7JBhFVer9BHwatoBT88jrJadqLO9BAr0PC9zaxBgML9E+LD5mwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFCR7KoIBRqki4gpE2nHj3UOaerLDMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvSkhzcWdnRkdxU0xpQ2tUYWNlUGRRNXA2c3NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUMAwDBAAtm/0D
BAAtm/4DBAAtndEwDAMEAE9i9QMEAE9i9gMEAbB9+gMEAbnHlAMEALnH1AMEAbnH
1jAMAwQDud0YAwQAud0aAwQAueK3AwQAufoaMA0GCSqGSIb3DQEBCwUAA4IBAQBn
4GutYE9c1H9b5gaq2+P/ONaanRSIDXU45NwyZ3sU8a8MlKhrmGJZn0+46PU6s0GA
mDUYEQPqEN5RObfdEbxZdk5FTDASk3QbYBxxf//pqwFWKFWVkY/eoG0lab5jkAlY
oY2gaFq/9maMJQItypTiuyAMhR+K0WSPl7FafRB98jzFaUpk4kXR/q3kPH9VxDlJ
jZitJ6Cqfq4uHUAJwCzA6xd3U/XuuZmas5TWExN/GkhixSNZgv901mdZYzWb4EPG
2zWnu5VxPBpo+XpNEFmhIGDLD2GWXRq2XNFB7ClOzxMi1y3wu47/SJa6zouts4xJ
u/2SMD+5SaM69hnvjzX7
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:35:28 2026 by rpki-client