Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/1-E7TKtLY4NL4biNq9VDQMWc4abY.roa
File: 1-E7TKtLY4NL4biNq9VDQMWc4abY.roa (raw, json)
Hash identifier: taK2PRMfzQuD5P6TOmatwYr+za9mYsFGhrTsOnynGKA=
Subject key identifier: F8:4E:D3:2A:D2:D8:E0:D2:F8:6E:23:6A:F5:50:D0:31:67:38:69:B6
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 019C969C3B37F86296322004CD3CE6926467
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/1-E7TKtLY4NL4biNq9VDQMWc4abY.roa
Signing time: Wed 25 Feb 2026 21:02:27 +0000
ROA not before: Wed 25 Feb 2026 21:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 85.203.13.0/24 maxlen: 24
85.203.21.0/24 maxlen: 24
85.203.34.0/24 maxlen: 24
85.203.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Mar 2026 10:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:96:9c:3b:37:f8:62:96:32:20:04:cd:3c:e6:92:64:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Feb 25 21:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f84ed32ad2d8e0d2f86e236af550d031673869b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:25:31:ad:36:95:05:d0:72:28:8e:44:de:
63:04:13:88:ca:f7:3a:36:db:ce:4e:33:66:f1:27:
e4:69:f7:bd:60:0d:8f:13:ed:c8:d9:13:4f:39:67:
6f:e1:c2:17:b0:79:c5:b8:bd:10:37:7f:46:24:8a:
55:20:e8:0b:62:69:7f:ae:75:03:23:99:79:1e:14:
de:fa:43:78:80:4f:64:e6:e3:9e:9d:4c:27:df:ee:
57:e1:f4:16:11:84:b8:63:d4:93:29:11:d8:2a:59:
e1:7a:40:99:67:eb:90:bf:8e:de:bf:b7:67:57:f8:
23:ee:83:d7:6f:17:86:e3:34:b1:58:ae:8f:88:bf:
de:15:9c:20:a5:67:81:14:cb:9c:c4:a7:39:0c:df:
b1:a2:b6:05:9a:cb:c2:ee:4e:98:15:a6:08:bd:67:
92:3e:5e:ec:dd:65:77:f5:a1:bf:fe:34:48:2a:ce:
85:e2:f2:34:fb:12:72:d4:15:21:0a:3b:0a:4e:d2:
dc:ff:8d:e5:a7:9f:1c:e3:80:bd:78:63:db:ad:50:
8e:8d:f2:f9:0c:ac:dd:75:4b:e5:6b:78:79:7f:1b:
48:91:87:35:2f:f2:17:be:32:a7:71:d9:bc:87:0b:
d8:85:91:1a:a5:26:da:ee:54:de:49:92:06:86:90:
34:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4E:D3:2A:D2:D8:E0:D2:F8:6E:23:6A:F5:50:D0:31:67:38:69:B6
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/1-E7TKtLY4NL4biNq9VDQMWc4abY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.13.0/24
85.203.21.0/24
85.203.34.0/24
85.203.46.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ca:f7:d8:93:94:af:70:94:2e:19:8f:7e:8b:2e:8e:52:a5:
32:2e:75:52:7a:a3:0e:c5:39:9f:aa:d5:e1:20:0e:24:11:8c:
fd:9c:e3:4c:a6:7f:40:dc:4f:9e:6e:10:6f:d4:69:ac:95:d8:
ec:32:29:68:c3:64:2c:2e:95:3c:5c:1e:ad:8b:a4:33:8f:2e:
c2:ba:db:16:b9:b6:9a:45:54:95:c5:27:58:19:1d:97:07:50:
ae:b7:56:88:32:1f:04:37:36:ce:60:94:45:53:5e:1e:9a:93:
0f:87:15:44:c9:61:dc:aa:4f:3e:b5:ca:5a:fa:93:09:80:47:
95:3a:51:a2:ad:bd:af:e7:e0:da:20:02:6c:52:9e:45:34:2f:
0a:10:b2:a7:d9:66:d9:60:8f:3b:4a:63:4d:16:05:8b:09:e7:
65:ae:f9:79:5f:70:36:c7:69:c4:62:b8:66:6b:16:ab:8d:3a:
36:4d:9e:ed:ca:d0:34:ee:47:85:83:a7:47:e2:a7:ab:9b:3c:
b0:62:e6:51:8a:bd:9a:1e:21:72:26:2e:e2:f0:6e:ef:b8:08:
20:23:88:f0:fc:f9:d0:c7:88:6d:47:80:2a:88:cd:d7:6e:0c:
89:3f:a6:66:9e:54:09:3b:67:52:5d:02:d7:0c:ad:15:cc:0b:
e3:14:bb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:24:27 2026 by rpki-client