Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/gfxQD2KtnbBnLGgNu-vGtVugH40.roa
File: gfxQD2KtnbBnLGgNu-vGtVugH40.roa (raw, json)
Hash identifier: YkYf+yLXdjso2ODp/lFbZaIsceC7FzhUsN1at1EX2Pk=
Subject key identifier: 81:FC:50:0F:62:AD:9D:B0:67:2C:68:0D:BB:EB:C6:B5:5B:A0:1F:8D
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A07C6EA3AE77CA5E0B2364247F832B20AA
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/gfxQD2KtnbBnLGgNu-vGtVugH40.roa
Signing time: Mon 07 Sep 2026 15:13:40 +0000
ROA not before: Mon 07 Sep 2026 15:13:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 85.8.150.0/24 maxlen: 24
185.145.47.0/24 maxlen: 24
185.196.26.0/24 maxlen: 24
185.235.121.0/24 maxlen: 24
185.235.123.0/24 maxlen: 24
185.242.185.0/24 maxlen: 24
193.31.114.0/24 maxlen: 24
194.50.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Sep 2026 13:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:6e:a3:ae:77:ca:5e:0b:23:64:24:7f:83:2b:20:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 7 15:13:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81fc500f62ad9db0672c680dbbebc6b55ba01f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:7a:d3:13:05:57:9a:fd:0f:25:e7:79:36:
da:61:12:5f:9e:36:8f:0e:a0:68:53:c8:4e:fc:c3:
86:b8:b5:82:86:21:a9:8c:20:a8:c4:85:6d:f9:88:
c7:d9:48:72:db:19:45:5c:68:b3:46:49:1c:d2:73:
09:d1:49:2c:af:55:d1:43:9e:03:b1:92:6a:40:96:
7c:6d:ca:ea:1c:12:8f:2b:27:d1:25:51:f6:5c:5d:
c8:ca:88:c5:36:2e:eb:95:81:3e:f9:fb:39:cb:78:
1b:8d:6c:12:04:28:3f:ea:38:59:24:c7:eb:ec:b3:
f4:5c:77:8e:90:19:6c:59:3f:a9:97:b0:55:4e:05:
38:61:1c:d3:45:00:bb:86:f6:47:d1:c3:f4:0a:3d:
8c:f6:a9:0a:44:75:ca:20:f6:6b:01:4c:31:38:01:
e7:f0:cd:0e:e0:44:45:e9:a5:be:67:8c:0d:6d:0b:
73:3f:eb:80:2f:ee:a6:8a:66:4b:56:f9:fa:87:ee:
90:ab:47:71:47:bd:a6:f2:07:89:db:de:93:57:44:
0f:02:2f:fd:e6:36:7f:55:92:90:e7:93:47:8d:e4:
bd:70:0c:95:40:b1:ca:7e:75:5b:3d:00:84:c6:27:
f9:14:ad:86:db:24:11:f9:a5:8d:59:25:97:cd:c7:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FC:50:0F:62:AD:9D:B0:67:2C:68:0D:BB:EB:C6:B5:5B:A0:1F:8D
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/gfxQD2KtnbBnLGgNu-vGtVugH40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.150.0/24
185.145.47.0/24
185.196.26.0/24
185.235.121.0/24
185.235.123.0/24
185.242.185.0/24
193.31.114.0/24
194.50.194.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:33:e8:43:2f:eb:5f:5f:d3:4b:38:84:4b:27:b9:c2:90:b8:
d3:1b:fa:dc:ac:60:58:32:85:8c:e9:4b:e3:8b:84:f2:24:26:
d4:21:37:5e:14:7c:fe:a9:e2:4e:48:67:02:3f:31:7c:b4:77:
d6:a1:af:e7:1c:1b:2e:fc:59:05:d4:24:60:55:4f:e5:c1:b3:
40:0d:7c:d7:a4:e0:27:f9:f4:ab:36:99:a5:37:83:95:d0:15:
b3:3c:27:c1:dd:58:41:ba:e8:2c:07:82:97:9f:7c:59:77:eb:
9e:2b:46:f2:0a:a0:b4:13:8a:21:7b:65:08:8d:07:8a:b7:d6:
91:77:20:91:80:1e:dc:ea:8c:6a:7f:02:1b:0a:a6:a7:ea:fd:
bb:38:95:23:32:2a:5e:d0:dc:3c:31:1e:de:1a:51:68:de:70:
63:d3:95:f2:32:a4:af:f5:91:f8:ba:d5:5f:ed:7e:04:8c:b4:
cd:58:3a:4e:74:2e:48:f6:d8:98:31:a8:db:39:7f:60:e9:53:
6b:c7:da:10:69:6e:af:b6:4c:ab:a4:db:23:0d:e1:c8:84:42:
25:9a:da:6a:c1:fe:01:04:19:27:2d:ed:3d:1e:95:37:5f:24:
68:6d:51:a8:b1:f6:28:c6:60:61:c8:ab:60:1c:c8:a3:ad:98:
c6:24:18:57
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAaB8bqOud8peCyNkJH+DKyCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwOTA3MTUxMzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWZjNTAwZjYyYWQ5ZGIwNjcyYzY4MGRiYmViYzZiNTViYTAxZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3d60xMFV5r9DyXneTbaYRJfnjaP
DqBoU8hO/MOGuLWChiGpjCCoxIVt+YjH2Uhy2xlFXGizRkkc0nMJ0Uksr1XRQ54D
sZJqQJZ8bcrqHBKPKyfRJVH2XF3IyojFNi7rlYE++fs5y3gbjWwSBCg/6jhZJMfr
7LP0XHeOkBlsWT+pl7BVTgU4YRzTRQC7hvZH0cP0Cj2M9qkKRHXKIPZrAUwxOAHn
8M0O4ERF6aW+Z4wNbQtzP+uAL+6mimZLVvn6h+6Qq0dxR72m8geJ296TV0QPAi/9
5jZ/VZKQ55NHjeS9cAyVQLHKfnVbPQCExif5FK2G2yQR+aWNWSWXzce8pQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFIH8UA9irZ2wZyxoDbvrxrVboB+NMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvZ2Z4UUQyS3RuYkJuTEdnTnUtdkd0VnVnSDQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAVQiWAwQA
uZEvAwQAucQaAwQAuet5AwQAuet7AwQAufK5AwQAwR9yAwQAwjLCMA0GCSqGSIb3
DQEBCwUAA4IBAQBbM+hDL+tfX9NLOIRLJ7nCkLjTG/rcrGBYMoWM6Uvji4TyJCbU
ITdeFHz+qeJOSGcCPzF8tHfWoa/nHBsu/FkF1CRgVU/lwbNADXzXpOAn+fSrNpml
N4OV0BWzPCfB3VhBuugsB4KXn3xZd+ueK0byCqC0E4ohe2UIjQeKt9aRdyCRgB7c
6oxqfwIbCqan6v27OJUjMipe0Nw8MR7eGlFo3nBj05XyMqSv9ZH4utVf7X4EjLTN
WDpOdC5I9tiYMajbOX9g6VNrx9oQaW6vtkyrpNsjDeHIhEIlmtpqwf4BBBknLe09
HpU3XyRobVGosfYoxmBhyKtgHMijrZjGJBhX
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:31:23 2026 by rpki-client