Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LSH2WsonE18NlK67VBCwahWpT1Y.roa
File: LSH2WsonE18NlK67VBCwahWpT1Y.roa (raw, json)
Hash identifier: s06YLtDMnJpdRUmTxG01U3oEbfIrobcZRl3lHqcf03Q=
Subject key identifier: 2D:21:F6:5A:CA:27:13:5F:0D:94:AE:BB:54:10:B0:6A:15:A9:4F:56
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019C9EF5FDD1821440B60198B87119E2DF0B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LSH2WsonE18NlK67VBCwahWpT1Y.roa
Signing time: Fri 27 Feb 2026 11:57:27 +0000
ROA not before: Fri 27 Feb 2026 11:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 81.18.48.0/24 maxlen: 24
109.121.37.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
178.253.239.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Mar 2026 10:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:f5:fd:d1:82:14:40:b6:01:98:b8:71:19:e2:df:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 27 11:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d21f65aca27135f0d94aebb5410b06a15a94f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:d1:12:16:c2:a5:4e:f7:2f:2c:8f:ce:d3:
e8:64:a2:ea:1d:c3:17:f4:21:7a:b6:76:df:e0:65:
49:5d:18:ea:40:28:b8:60:90:6e:9c:9b:0b:53:da:
67:cf:6e:0e:5e:e8:f8:56:1b:1d:43:9c:19:aa:49:
1c:c9:f3:f5:4c:e8:75:f2:aa:36:43:60:bc:3c:3b:
d3:49:71:1a:d0:01:73:28:9c:19:a7:d9:2f:fc:84:
5a:08:61:19:c4:59:19:0b:ec:ff:54:e5:86:d9:b1:
ab:af:61:65:e4:70:b4:b8:b4:29:75:d7:b8:f5:77:
d5:f1:4f:97:91:aa:39:c7:50:20:ad:dc:c2:8b:33:
3b:99:29:b1:b9:5f:d1:17:cf:9c:53:4d:2c:33:64:
f0:67:fa:ce:76:42:60:4a:43:f6:94:0e:4b:c8:b2:
cf:6e:5e:02:73:f6:2e:0b:1b:b4:71:1d:e0:a7:62:
8d:3b:02:74:b7:38:1d:f8:5f:68:61:b7:40:b9:85:
6d:9e:93:ed:64:7b:8c:30:06:ee:ff:58:d3:2d:78:
ac:40:89:05:7d:b7:db:13:ff:ed:b9:83:ab:26:7a:
ea:74:c4:16:1c:40:27:f9:7b:5e:8a:98:c8:8a:e5:
12:33:b0:68:8f:83:b0:39:64:12:36:73:29:b1:ad:
36:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:21:F6:5A:CA:27:13:5F:0D:94:AE:BB:54:10:B0:6A:15:A9:4F:56
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LSH2WsonE18NlK67VBCwahWpT1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.48.0/24
109.121.37.0/24
109.121.45.0/24
178.219.6.0/24
178.253.239.0/24
185.47.91.0/24
188.255.198.0/24
Signature Algorithm: sha256WithRSAEncryption
93:02:8d:64:0a:24:65:3c:d3:fe:0b:82:24:06:7b:22:17:d6:
1e:51:dc:e3:8e:c5:f2:c8:fe:85:88:24:7b:f4:54:b3:7d:c4:
5f:40:d4:1a:31:91:72:79:af:be:2d:92:3a:7d:da:c5:01:b8:
a6:4e:bc:d4:7d:17:65:12:b5:9a:f7:83:3a:f0:aa:54:bd:36:
a3:2b:d2:e7:08:6a:48:00:56:4a:d9:5b:08:a1:dd:34:11:eb:
76:f2:43:82:3d:1d:29:06:9d:f1:d6:7d:60:f2:12:1b:3b:a3:
70:7c:83:2a:17:00:47:6f:35:2f:2d:fa:e5:d8:5c:8f:12:04:
f4:fd:ba:39:68:7d:07:00:bc:c6:13:d3:00:40:f5:29:79:b7:
0a:f6:95:98:43:c1:b9:79:89:49:8f:d8:12:34:c3:18:77:06:
2a:a7:6d:b1:68:d0:de:75:cb:49:ee:62:02:06:bb:ca:62:e4:
da:cc:b1:10:36:09:7f:d1:92:e2:fb:1c:40:1e:a8:01:47:d7:
55:ff:59:c6:a1:64:90:fa:5e:2d:64:ca:90:27:14:90:cc:98:
c6:cf:57:2b:4f:73:31:4f:4a:0d:df:25:81:88:ac:06:ba:18:
e5:30:39:d4:0f:b6:70:21:30:ed:88:c4:b5:ac:5c:39:1f:38:
64:86:c3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:04:47 2026 by rpki-client