Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VMG24eirobIfsHwAsqbsfwjp0JU.roa
File: VMG24eirobIfsHwAsqbsfwjp0JU.roa (raw, json)
Hash identifier: 08NqQt11UyqZxE/e1zodfd4hxLWZLIQwYS2cdxQcR0k=
Subject key identifier: 54:C1:B6:E1:E8:AB:A1:B2:1F:B0:7C:00:B2:A6:EC:7F:08:E9:D0:95
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D96535DD6E9D1E27B617FEE0E1D366A7D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VMG24eirobIfsHwAsqbsfwjp0JU.roa
Signing time: Thu 16 Apr 2026 12:45:39 +0000
ROA not before: Thu 16 Apr 2026 12:45:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213459
IP address blocks: 78.17.0.0/24 maxlen: 24
78.17.1.0/24 maxlen: 24
78.17.3.0/24 maxlen: 24
78.17.4.0/24 maxlen: 24
78.17.5.0/24 maxlen: 24
78.17.11.0/24 maxlen: 24
78.17.12.0/24 maxlen: 24
78.17.17.0/24 maxlen: 24
78.17.18.0/24 maxlen: 24
78.17.27.0/24 maxlen: 24
78.17.28.0/24 maxlen: 24
78.17.29.0/24 maxlen: 24
78.17.33.0/24 maxlen: 24
78.17.34.0/24 maxlen: 24
78.17.35.0/24 maxlen: 24
78.17.40.0/24 maxlen: 24
78.17.55.0/24 maxlen: 24
78.17.64.0/24 maxlen: 24
78.17.65.0/24 maxlen: 24
78.17.66.0/24 maxlen: 24
78.17.67.0/24 maxlen: 24
78.17.116.0/24 maxlen: 24
78.17.134.0/24 maxlen: 24
78.17.216.0/24 maxlen: 24
78.17.240.0/24 maxlen: 24
89.44.76.0/24 maxlen: 24
89.125.24.0/24 maxlen: 24
89.125.26.0/24 maxlen: 24
89.125.32.0/24 maxlen: 24
89.125.39.0/24 maxlen: 24
89.125.52.0/24 maxlen: 24
89.125.57.0/24 maxlen: 24
89.125.59.0/24 maxlen: 24
89.125.72.0/24 maxlen: 24
89.125.74.0/24 maxlen: 24
89.125.75.0/24 maxlen: 24
89.125.81.0/24 maxlen: 24
89.125.86.0/24 maxlen: 24
89.125.87.0/24 maxlen: 24
89.125.118.0/24 maxlen: 24
89.125.196.0/24 maxlen: 24
89.125.198.0/24 maxlen: 24
89.125.199.0/24 maxlen: 24
103.245.229.0/24 maxlen: 24
185.141.217.0/24 maxlen: 24
193.124.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Apr 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:53:5d:d6:e9:d1:e2:7b:61:7f:ee:0e:1d:36:6a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 16 12:45:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54c1b6e1e8aba1b21fb07c00b2a6ec7f08e9d095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:fb:df:6f:26:17:ec:be:30:18:88:94:9c:
f9:bf:db:da:96:db:3f:89:c0:b6:d7:f3:07:ad:2f:
50:f2:eb:7e:b1:07:70:74:9f:22:8c:7d:73:b0:a7:
9b:00:fc:82:2b:0c:44:b3:1c:87:69:15:c1:df:f9:
e7:f9:6e:2e:c3:6e:11:79:b3:2b:23:36:88:69:70:
20:78:74:0a:ac:de:0e:75:18:d4:51:62:50:9a:65:
1f:82:cd:6a:01:b7:14:c3:08:89:58:70:c5:9f:4b:
1a:fb:51:0b:21:be:ae:5a:c1:21:f7:a1:01:28:c2:
8e:76:55:40:3d:40:c0:5a:87:b0:07:a6:ca:5b:fe:
24:4d:18:6c:96:08:65:c7:88:9c:dc:f4:f4:af:5e:
13:46:09:fc:aa:e3:6c:09:8c:44:c3:b7:6b:3b:3d:
83:35:82:8b:2b:c3:da:3d:97:a8:36:76:dc:f2:ea:
34:1c:c7:12:aa:2a:2c:8d:fe:40:26:8c:9f:2d:6c:
00:b8:52:54:8a:db:46:b4:b0:d8:e5:39:70:e6:e4:
87:b4:32:32:64:5d:8a:1c:d7:a5:bd:e5:80:c0:65:
43:00:be:ac:44:84:4b:a0:c8:b5:ca:41:f8:27:be:
c7:4a:22:67:1c:f7:08:e8:48:d6:e8:1c:75:11:f1:
6e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C1:B6:E1:E8:AB:A1:B2:1F:B0:7C:00:B2:A6:EC:7F:08:E9:D0:95
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VMG24eirobIfsHwAsqbsfwjp0JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.0.0/23
78.17.3.0-78.17.5.255
78.17.11.0-78.17.12.255
78.17.17.0-78.17.18.255
78.17.27.0-78.17.29.255
78.17.33.0-78.17.35.255
78.17.40.0/24
78.17.55.0/24
78.17.64.0/22
78.17.116.0/24
78.17.134.0/24
78.17.216.0/24
78.17.240.0/24
89.44.76.0/24
89.125.24.0/24
89.125.26.0/24
89.125.32.0/24
89.125.39.0/24
89.125.52.0/24
89.125.57.0/24
89.125.59.0/24
89.125.72.0/24
89.125.74.0/23
89.125.81.0/24
89.125.86.0/23
89.125.118.0/24
89.125.196.0/24
89.125.198.0/23
103.245.229.0/24
185.141.217.0/24
193.124.224.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a2:d5:98:0a:58:61:1b:a9:d9:0d:ef:12:10:dc:f1:3c:fd:
79:e9:df:22:57:4f:ec:1d:17:63:39:08:c8:60:e1:d2:82:7c:
c7:54:7a:3a:50:5b:62:f2:ff:ae:a2:55:7c:d6:5d:98:ed:37:
e3:03:61:f3:11:69:6f:bd:01:c3:f5:43:1a:27:11:fc:70:97:
84:16:c4:39:56:34:2e:56:d9:05:1b:ab:43:66:1c:0b:e7:d6:
80:a9:22:63:e4:55:1a:59:11:6a:5d:91:3c:37:52:50:2d:ed:
c7:a2:a0:fe:c4:33:ee:52:75:de:03:d2:2d:43:70:52:56:77:
af:98:3e:2c:27:6b:89:04:e1:66:f6:ce:e2:95:e7:b6:f7:2a:
9e:d2:30:93:05:c9:24:54:41:1c:47:71:7a:ef:1d:d6:1e:07:
50:f6:a6:df:24:2c:76:04:3a:68:e4:35:74:60:b0:0f:19:63:
cb:26:f5:41:8d:b2:15:5c:03:c2:7e:45:e1:9a:f0:4b:cb:1c:
ab:fa:1c:86:93:59:ce:62:5d:45:c0:82:3d:57:8a:a6:40:dc:
89:68:d1:59:a3:42:31:18:eb:ca:fe:f9:af:93:ab:70:a9:01:
de:64:ae:1c:4f:c9:34:e8:a4:ea:84:be:96:73:1e:8d:5d:f3:
aa:8d:fe:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:04:44 2026 by rpki-client