Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/PiPDoJ4AG0mpCU6adaOT1yuWsno.roa
File:                     PiPDoJ4AG0mpCU6adaOT1yuWsno.roa (raw, json)
Hash identifier:          bRC73UlyAsGIi48tjXeybXbt3ieLe14fS2CTsRVrdNM=
Subject key identifier:   3E:23:C3:A0:9E:00:1B:49:A9:09:4E:9A:75:A3:93:D7:2B:96:B2:7A
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       019C5773CDD5C224B90E1C54A671842985C8
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/PiPDoJ4AG0mpCU6adaOT1yuWsno.roa
Signing time:             Fri 13 Feb 2026 14:42:13 +0000
ROA not before:           Fri 13 Feb 2026 14:42:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41745
IP address blocks:        45.10.164.0/24 maxlen: 24
                          45.10.165.0/24 maxlen: 24
                          45.132.185.0/24 maxlen: 24
                          45.138.101.0/24 maxlen: 24
                          45.138.102.0/24 maxlen: 24
                          45.138.103.0/24 maxlen: 24
                          45.148.125.0/24 maxlen: 24
                          45.148.127.0/24 maxlen: 24
                          45.151.233.0/24 maxlen: 24
                          46.21.80.0/24 maxlen: 24
                          46.21.81.0/24 maxlen: 24
                          46.21.82.0/24 maxlen: 24
                          46.21.83.0/24 maxlen: 24
                          92.118.169.0/24 maxlen: 24
                          92.118.170.0/24 maxlen: 24
                          93.177.116.0/24 maxlen: 24
                          93.177.117.0/24 maxlen: 24
                          185.58.115.0/24 maxlen: 24
                          185.68.184.0/24 maxlen: 24
                          185.68.246.0/24 maxlen: 24
                          185.68.247.0/24 maxlen: 24
                          185.79.138.0/24 maxlen: 24
                          185.88.36.0/24 maxlen: 24
                          185.88.37.0/24 maxlen: 24
                          185.88.101.0/24 maxlen: 24
                          185.113.139.0/24 maxlen: 24
                          193.221.203.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 02 Mar 2026 05:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:57:73:cd:d5:c2:24:b9:0e:1c:54:a6:71:84:29:85:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Feb 13 14:42:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3e23c3a09e001b49a9094e9a75a393d72b96b27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:bb:d0:29:54:a9:91:7d:0f:4d:a9:fa:c4:
                    8f:63:10:d7:70:b6:da:68:57:19:88:04:f7:12:08:
                    af:4e:82:0c:03:8f:02:8d:3c:83:97:9d:dc:5c:9d:
                    55:94:8a:2a:7b:d0:ce:6a:b0:aa:b6:be:c6:73:92:
                    6b:a5:37:3c:ad:c7:54:1f:77:a4:d8:0c:64:08:9d:
                    45:67:54:ff:75:2c:17:a5:85:56:7b:bd:9e:e5:2e:
                    78:f0:ed:a8:a9:4e:01:78:b3:fc:6d:c9:a5:7e:db:
                    6f:34:85:38:04:41:9b:1d:e4:3c:56:ff:2c:e8:ec:
                    86:e4:94:8b:04:ab:81:e6:b4:a5:d4:99:7b:99:1e:
                    3b:e9:8a:5e:6b:df:82:57:7a:b3:ff:b2:2e:4b:7a:
                    5a:0f:79:50:70:ee:87:88:9c:0b:d8:e6:ae:02:a1:
                    81:19:86:cd:ce:e5:5f:9e:c7:74:b6:03:e5:7b:96:
                    c5:2f:38:a4:d4:4b:51:8b:9b:d3:2b:99:5c:d9:c4:
                    28:2d:c4:42:cc:ae:74:d0:8b:d6:6c:d2:05:6a:e1:
                    a4:72:c2:57:3f:3f:e3:a5:7c:f8:c9:c2:44:1b:82:
                    b5:bf:99:fe:45:b6:b5:87:e3:ed:1b:be:1e:78:4a:
                    cd:a3:9f:2f:5e:aa:5e:bd:17:df:33:6e:85:31:af:
                    fb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:23:C3:A0:9E:00:1B:49:A9:09:4E:9A:75:A3:93:D7:2B:96:B2:7A
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/PiPDoJ4AG0mpCU6adaOT1yuWsno.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.164.0/23
                  45.132.185.0/24
                  45.138.101.0-45.138.103.255
                  45.148.125.0/24
                  45.148.127.0/24
                  45.151.233.0/24
                  46.21.80.0/22
                  92.118.169.0-92.118.170.255
                  93.177.116.0/23
                  185.58.115.0/24
                  185.68.184.0/24
                  185.68.246.0/23
                  185.79.138.0/24
                  185.88.36.0/23
                  185.88.101.0/24
                  185.113.139.0/24
                  193.221.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:05:e4:85:75:2f:b1:9d:98:45:20:a7:aa:2e:27:31:d4:45:
         28:d5:43:63:6e:32:60:6c:89:a4:05:1c:8a:39:f3:25:53:c8:
         db:5d:55:8a:ae:aa:60:cd:27:a1:45:02:88:7c:b7:96:dc:40:
         7d:56:e1:95:4c:1a:0d:ae:40:a9:d4:05:90:31:dd:ad:da:23:
         15:b4:fa:98:d8:b1:fb:d4:62:d5:f1:26:62:23:9b:38:69:2e:
         9f:bf:69:3c:8c:39:e6:f4:0f:f1:25:0e:f7:18:b6:34:1c:4e:
         4d:8a:89:3e:43:43:ee:29:dd:03:39:d1:0c:05:42:ce:a7:e7:
         ae:9e:52:46:f1:92:b0:f6:14:2c:91:6a:a8:2b:72:ef:18:c5:
         23:0f:a9:9d:ee:d0:9e:71:1e:d9:31:2c:8f:d5:95:37:fa:fd:
         65:1c:b0:5a:cc:72:da:31:dc:7d:d4:50:29:72:c8:51:66:eb:
         2e:7d:a1:cf:ad:e3:97:82:89:52:84:2e:b9:54:fe:5c:bd:7f:
         5a:be:ba:3a:ad:c5:72:1f:e8:d9:01:3f:b4:59:3a:57:57:2c:
         6a:8f:ee:89:4e:f7:fb:15:ba:e2:5b:10:9c:69:b3:4e:05:73:
         57:83:6b:6b:33:85:92:42:c9:35:df:be:2d:56:f0:2c:da:c1:
         8e:68:93:ce
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAZxXc83VwiS5DhxUpnGEKYXIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjYwMjEzMTQ0MjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTIzYzNhMDllMDAxYjQ5YTkwOTRlOWE3NWEzOTNkNzJiOTZiMjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/u70ClUqZF9D02p+sSPYxDXcLba
aFcZiAT3EgivToIMA48CjTyDl53cXJ1VlIoqe9DOarCqtr7Gc5JrpTc8rcdUH3ek
2AxkCJ1FZ1T/dSwXpYVWe72e5S548O2oqU4BeLP8bcmlfttvNIU4BEGbHeQ8Vv8s
6OyG5JSLBKuB5rSl1Jl7mR476Ypea9+CV3qz/7IuS3paD3lQcO6HiJwL2OauAqGB
GYbNzuVfnsd0tgPle5bFLzik1EtRi5vTK5lc2cQoLcRCzK500IvWbNIFauGkcsJX
Pz/jpXz4ycJEG4K1v5n+Rba1h+PtG74eeErNo58vXqpevRffM26FMa/7cwIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFD4jw6CeABtJqQlOmnWjk9crlrJ6MB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvUGlQRG9KNEFHMG1wQ1U2YWRhT1QxeXVXc25vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBAEtCqQD
BAAthLkwDAMEAC2KZQMEAy2KYAMEAC2UfQMEAC2UfwMEAC2X6QMEAi4VUDAMAwQA
XHapAwQAXHaqAwQBXbF0AwQAuTpzAwQAuUS4AwQBuUT2AwQAuU+KAwQBuVgkAwQA
uVhlAwQAuXGLAwQAwd3LMA0GCSqGSIb3DQEBCwUAA4IBAQAHBeSFdS+xnZhFIKeq
Licx1EUo1UNjbjJgbImkBRyKOfMlU8jbXVWKrqpgzSehRQKIfLeW3EB9VuGVTBoN
rkCp1AWQMd2t2iMVtPqY2LH71GLV8SZiI5s4aS6fv2k8jDnm9A/xJQ73GLY0HE5N
iok+Q0PuKd0DOdEMBULOp+eunlJG8ZKw9hQskWqoK3LvGMUjD6md7tCecR7ZMSyP
1ZU3+v1lHLBazHLaMdx91FApcshRZusufaHPreOXgolShC65VP5cvX9avro6rcVy
H+jZAT+0WTpXVyxqj+6JTvf7FbriWxCcabNOBXNXg2trM4WSQsk1374tVvAs2sGO
aJPO
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:56 2026 by rpki-client