Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mLdq5fAGge2snYToFMafpgJPpCU.roa
File: mLdq5fAGge2snYToFMafpgJPpCU.roa (raw, json)
Hash identifier: 9ClB2Dp0c2HTZWX4VynjYuaqK5nClpPxWuG7I/34rKs=
Subject key identifier: 98:B7:6A:E5:F0:06:81:ED:AC:9D:84:E8:14:C6:9F:A6:02:4F:A4:25
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019EBC225005B352FAA8D724DD6CC81426B7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mLdq5fAGge2snYToFMafpgJPpCU.roa
Signing time: Fri 12 Jun 2026 14:00:25 +0000
ROA not before: Fri 12 Jun 2026 14:00:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 46.102.237.0/24 maxlen: 24
72.35.240.0/24 maxlen: 24
72.35.241.0/24 maxlen: 24
72.35.243.0/24 maxlen: 24
72.35.244.0/24 maxlen: 24
78.17.20.0/24 maxlen: 24
78.17.21.0/24 maxlen: 24
78.17.30.0/24 maxlen: 24
78.17.31.0/24 maxlen: 24
78.17.58.0/24 maxlen: 24
78.17.61.0/24 maxlen: 24
78.17.81.0/24 maxlen: 24
89.125.223.0/24 maxlen: 24
89.125.242.0/24 maxlen: 24
89.125.245.0/24 maxlen: 24
104.143.194.0/24 maxlen: 24
104.143.195.0/24 maxlen: 24
104.143.200.0/24 maxlen: 24
140.225.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jun 2026 04:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:22:50:05:b3:52:fa:a8:d7:24:dd:6c:c8:14:26:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 12 14:00:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98b76ae5f00681edac9d84e814c69fa6024fa425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1e:39:f8:e2:7f:8c:40:99:ac:48:80:e6:78:
01:0b:7d:46:62:bb:ca:c7:1b:82:6d:7f:cc:44:48:
49:74:ca:99:69:a9:39:32:c5:8d:47:0c:df:7d:74:
99:c8:2f:a1:51:28:77:c7:d9:53:e2:ed:ca:e9:bd:
ed:32:0d:24:9f:68:fd:6d:4b:a0:aa:9f:80:f0:b0:
d1:d5:2c:20:a0:5e:58:e2:b1:a1:40:ce:75:b6:21:
31:c8:b4:7a:05:5a:cc:c8:e2:93:b9:47:b1:c6:eb:
79:d9:05:60:28:c4:21:e8:c5:a7:02:a2:ac:cc:fa:
a3:f6:31:a2:1b:57:3b:66:26:ea:8f:64:8f:a9:7e:
ab:c0:3c:cf:51:84:4b:1d:90:92:50:a0:31:72:78:
a7:aa:b1:29:dd:1c:ee:46:be:3c:72:78:5c:63:56:
80:b4:b0:08:1a:18:b6:2f:63:2e:52:61:44:85:37:
40:8f:21:d1:73:97:dd:ec:0b:e8:3b:df:80:98:14:
85:3c:07:12:02:c4:db:a5:9e:b4:a2:26:0e:b6:18:
15:39:09:ea:4a:a7:26:79:66:30:dc:77:16:68:6c:
a1:39:7b:0e:b2:ce:d8:2f:0e:55:8e:71:96:e6:87:
4a:c0:0a:d1:82:b6:b2:dd:72:e2:5b:6f:54:08:db:
ea:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B7:6A:E5:F0:06:81:ED:AC:9D:84:E8:14:C6:9F:A6:02:4F:A4:25
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mLdq5fAGge2snYToFMafpgJPpCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
72.35.240.0/23
72.35.243.0-72.35.244.255
78.17.20.0/23
78.17.30.0/23
78.17.58.0/24
78.17.61.0/24
78.17.81.0/24
89.125.223.0/24
89.125.242.0/24
89.125.245.0/24
104.143.194.0/23
104.143.200.0/24
140.225.195.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ff:e2:b0:65:22:1a:5c:29:2a:30:70:cb:ca:53:1b:81:d2:
49:3f:08:3f:04:23:ee:f0:f3:fe:5e:1a:bd:0c:c5:1a:14:5b:
22:5b:c9:2f:b3:24:34:1c:d2:b0:ff:74:d4:9d:93:a2:aa:ed:
5f:b2:98:c4:3f:21:c6:05:38:af:7a:f6:1e:69:95:be:8c:61:
8a:2a:9d:b5:19:5d:5c:e8:ab:11:72:4a:74:fa:71:b0:92:12:
48:02:78:2f:d1:ed:15:0b:6a:de:de:67:d6:51:f1:97:df:9a:
70:94:5d:fa:90:ca:02:31:7e:eb:4f:15:81:d0:69:21:57:b2:
d9:01:c0:2b:61:f9:83:cf:7c:59:df:c3:37:e0:d8:09:a2:ad:
ec:c6:61:05:b4:b6:23:1a:92:f8:8c:44:90:8d:6d:a3:5c:25:
6c:fb:44:01:17:4c:db:c2:fa:28:5b:fe:cc:33:d0:f6:d8:95:
ef:68:ec:ef:7c:fd:c2:e8:67:ad:73:9f:7b:87:01:b6:b7:2d:
8e:f4:18:2c:49:3f:d6:4e:b6:97:32:83:a4:98:fd:87:58:bb:
c3:e1:ca:e7:79:eb:80:89:4e:25:81:83:84:4c:0f:a8:53:25:
d6:91:bc:bd:58:d5:b5:f1:94:42:95:f5:98:47:cd:29:65:55:
7c:99:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:38:25 2026 by rpki-client