Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/Swr0UCFi8R-ykGpIcS33D1_oeq0.roa
File: Swr0UCFi8R-ykGpIcS33D1_oeq0.roa (raw, json)
Hash identifier: OOlnWZoFSm2oGmQ3FMAOwKxW5oWWuTuq9603zmDYBho=
Subject key identifier: 4B:0A:F4:50:21:62:F1:1F:B2:90:6A:48:71:2D:F7:0F:5F:E8:7A:AD
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A1213664C8B49EAEE6ABA87CD235F88FBD
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/Swr0UCFi8R-ykGpIcS33D1_oeq0.roa
Signing time: Fri 09 Oct 2026 15:09:35 +0000
ROA not before: Fri 09 Oct 2026 15:09:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.253.130.0/24 maxlen: 24
61.14.226.0/24 maxlen: 24
85.8.150.0/24 maxlen: 24
91.132.86.0/24 maxlen: 24
103.207.160.0/24 maxlen: 24
185.145.47.0/24 maxlen: 24
185.196.26.0/24 maxlen: 24
185.213.16.0/24 maxlen: 24
185.235.121.0/24 maxlen: 24
185.235.123.0/24 maxlen: 24
185.238.115.0/24 maxlen: 24
193.31.114.0/24 maxlen: 24
193.176.117.0/24 maxlen: 24
194.50.194.0/24 maxlen: 24
195.216.148.0/24 maxlen: 24
195.216.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Oct 2026 05:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:36:64:c8:b4:9e:ae:e6:ab:a8:7c:d2:35:f8:8f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Oct 9 15:09:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b0af4502162f11fb2906a48712df70f5fe87aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:d4:fa:c3:63:18:34:6d:09:66:b3:e1:c7:
c0:44:49:1c:0b:45:b5:c7:79:d2:70:6f:d0:ac:cb:
ba:9d:38:04:c0:54:05:55:ad:81:95:7c:30:1e:b1:
f3:8b:7c:2c:15:43:6f:5f:e1:b6:e5:29:a4:0e:c5:
15:8d:5d:ba:a8:75:07:33:b6:4e:df:bc:76:58:cd:
36:e6:a3:ad:3f:31:70:95:4b:e5:8f:e1:c6:e3:30:
4a:7e:f1:80:9d:b3:50:26:ec:62:21:6e:f9:bf:28:
3a:e8:4c:7f:25:1f:35:96:87:bd:9c:38:ac:49:c8:
5a:55:fa:f0:5e:3b:e9:00:ad:1f:e1:fe:5d:41:7d:
6e:89:5d:51:af:4a:77:af:32:d7:23:f9:0c:47:fe:
ce:52:13:5f:72:7c:03:8f:a9:55:ab:cf:e5:d7:7b:
ec:c7:c6:3a:34:06:c9:ad:3b:3f:9b:12:e9:ba:18:
f2:c6:a3:c7:4d:f2:0c:54:f0:54:41:2b:5f:1c:6f:
ea:0f:77:13:77:54:e7:b8:64:19:f9:7b:42:c6:57:
36:9d:38:02:96:61:c6:90:c6:30:b3:4c:16:30:b2:
1b:6f:52:d9:98:6c:83:65:77:7f:e2:9e:06:ac:b8:
db:60:3d:42:6a:bd:55:96:d9:de:98:61:fc:d5:2a:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0A:F4:50:21:62:F1:1F:B2:90:6A:48:71:2D:F7:0F:5F:E8:7A:AD
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/Swr0UCFi8R-ykGpIcS33D1_oeq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.130.0/24
61.14.226.0/24
85.8.150.0/24
91.132.86.0/24
103.207.160.0/24
185.145.47.0/24
185.196.26.0/24
185.213.16.0/24
185.235.121.0/24
185.235.123.0/24
185.238.115.0/24
193.31.114.0/24
193.176.117.0/24
194.50.194.0/24
195.216.148.0/24
195.216.151.0/24
Signature Algorithm: sha256WithRSAEncryption
76:da:5f:a0:b9:f2:fb:0c:be:24:45:3a:90:b6:05:4e:b8:55:
c6:39:de:b4:bd:4d:5d:1c:c1:f9:0f:bd:a6:f7:d0:02:fa:75:
6e:23:de:96:53:1a:e4:51:68:0a:a1:c1:23:38:c2:d0:0f:91:
dc:2e:a8:85:b4:f8:49:78:0e:7f:1c:59:b4:45:b5:aa:3a:86:
16:34:64:2d:bb:0a:b4:bb:41:3d:b8:51:0b:38:94:54:82:09:
b6:01:82:0a:ca:54:6b:e0:e9:3b:0a:ac:82:18:e5:46:96:6e:
e8:ac:5c:f0:14:45:e6:38:d4:6e:a8:b8:0d:eb:f1:c7:b6:4c:
aa:75:ec:d3:ee:e7:c2:8a:83:a6:8d:1e:66:cc:2a:5a:3a:79:
b6:62:c8:25:12:2f:1c:90:f9:20:28:85:47:2f:df:82:ba:eb:
f4:14:55:38:22:8a:ef:b8:6b:12:12:61:d3:ed:f4:59:1c:f8:
70:c8:3a:ab:75:43:e7:78:7f:ab:5d:b2:fc:c0:91:e6:33:87:
c6:44:47:c2:20:94:9b:d3:d3:b9:9b:fd:c5:cf:ae:e0:66:93:
12:b5:e4:1e:82:13:66:25:c6:5a:5c:e6:bd:3f:46:5a:67:3d:
74:67:c8:62:ab:3c:c0:3c:52:83:0a:b7:17:ae:15:9e:3e:7b:
07:0e:6f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:31:41 2026 by rpki-client