Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/g4j4W3SlUUPkdhomljyzzWtUUfQ.roa
File: g4j4W3SlUUPkdhomljyzzWtUUfQ.roa (raw, json)
Hash identifier: EKBbTv5T/iUrH+WBaH5ULP3qBYT4kuCA4rscHLDPrKY=
Subject key identifier: 83:88:F8:5B:74:A5:51:43:E4:76:1A:26:96:3C:B3:CD:6B:54:51:F4
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 01A0B819B38B9BD5ED4F3AE813FD08EB4836
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/g4j4W3SlUUPkdhomljyzzWtUUfQ.roa
Signing time: Sat 19 Sep 2026 05:18:07 +0000
ROA not before: Sat 19 Sep 2026 05:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62005
IP address blocks: 45.66.248.0/24 maxlen: 24
45.66.249.0/24 maxlen: 24
45.86.228.0/24 maxlen: 24
45.86.229.0/24 maxlen: 24
45.86.231.0/24 maxlen: 24
45.129.199.0/24 maxlen: 24
45.143.166.0/23 maxlen: 23
45.150.108.0/24 maxlen: 24
45.150.109.0/24 maxlen: 24
62.106.66.0/24 maxlen: 24
62.204.35.0/24 maxlen: 24
77.72.85.0/24 maxlen: 24
83.97.79.0/24 maxlen: 24
91.211.27.0/24 maxlen: 24
91.235.234.0/24 maxlen: 24
91.242.228.0/24 maxlen: 24
91.242.241.0/24 maxlen: 24
130.49.155.0/24 maxlen: 24
146.19.49.0/24 maxlen: 24
146.19.143.0/24 maxlen: 24
146.19.185.0/24 maxlen: 24
146.19.254.0/24 maxlen: 24
155.212.242.0/24 maxlen: 24
155.212.243.0/24 maxlen: 24
176.124.32.0/24 maxlen: 24
176.124.33.0/24 maxlen: 24
185.39.18.0/24 maxlen: 24
185.123.53.0/24 maxlen: 24
193.104.75.0/24 maxlen: 24
193.109.120.0/24 maxlen: 24
193.200.16.0/24 maxlen: 24
193.200.17.0/24 maxlen: 24
194.26.141.0/24 maxlen: 24
194.59.183.0/24 maxlen: 24
194.61.120.0/24 maxlen: 24
194.61.121.0/24 maxlen: 24
195.54.160.0/24 maxlen: 24
212.46.38.0/24 maxlen: 24
213.109.147.0/24 maxlen: 24
213.109.192.0/24 maxlen: 24
2a10:1fc0:1::/48 maxlen: 48
2a10:1fc0:2::/48 maxlen: 48
2a10:1fc0:3::/48 maxlen: 48
2a10:1fc0:4::/48 maxlen: 48
2a10:1fc0:5::/48 maxlen: 48
2a10:1fc0:6::/48 maxlen: 48
2a10:1fc0:8::/48 maxlen: 48
2a10:1fc0:9::/48 maxlen: 48
2a10:1fc0:b::/48 maxlen: 48
2a10:1fc0:c::/48 maxlen: 48
2a10:1fc0:d::/48 maxlen: 48
2a10:1fc0:e::/48 maxlen: 48
2a10:1fc0:f::/48 maxlen: 48
2a10:1fc0:10::/48 maxlen: 48
2a10:1fc0:11::/48 maxlen: 48
2a10:1fc0:12::/48 maxlen: 48
2a10:1fc0:13::/48 maxlen: 48
2a10:1fc0:14::/48 maxlen: 48
2a10:1fc0:15::/48 maxlen: 48
2a10:1fc0:16::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 25 Sep 2026 07:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:19:b3:8b:9b:d5:ed:4f:3a:e8:13:fd:08:eb:48:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Sep 19 05:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8388f85b74a55143e4761a26963cb3cd6b5451f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a5:3b:ad:9d:50:ee:3f:98:89:61:f3:9a:80:
aa:3e:c9:6d:2a:6e:5c:e7:1d:b3:48:9d:07:68:7f:
03:7a:03:af:42:11:12:54:18:ba:29:e5:38:8b:92:
a0:85:67:9f:2d:7a:7d:94:bc:15:32:57:c5:69:b8:
5a:cb:1e:e4:e0:66:66:d9:c5:87:df:98:e8:20:47:
be:75:6b:04:be:4d:ac:7b:44:73:07:cd:64:8a:7e:
90:ec:73:57:7c:00:9a:f7:47:c3:4a:7f:6d:1d:36:
42:ea:bb:c8:1c:48:01:51:3b:de:fa:ac:08:32:4b:
c5:bb:01:69:7e:d0:02:04:47:69:7c:2c:9b:81:cc:
7a:64:00:ef:17:ab:50:13:a6:62:74:70:48:64:f9:
f2:cc:9d:86:1f:23:ad:2e:d2:a9:f7:ad:0b:8b:63:
5a:a2:c0:f9:e2:5e:28:95:2f:0c:3b:8a:95:81:9b:
6f:66:7b:d8:41:4e:f3:5b:32:e9:04:89:07:7a:66:
c8:8d:4a:ff:9c:95:5e:0e:91:56:94:31:0e:7b:1a:
b8:51:b0:1e:15:5d:e6:a1:7b:97:fd:9a:7b:83:26:
78:6a:81:fb:9a:d4:37:88:49:65:23:b3:7f:e7:27:
36:28:95:18:5a:de:39:67:5a:40:af:d8:5d:e8:f4:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:88:F8:5B:74:A5:51:43:E4:76:1A:26:96:3C:B3:CD:6B:54:51:F4
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/g4j4W3SlUUPkdhomljyzzWtUUfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.248.0/23
45.86.228.0/23
45.86.231.0/24
45.129.199.0/24
45.143.166.0/23
45.150.108.0/23
62.106.66.0/24
62.204.35.0/24
77.72.85.0/24
83.97.79.0/24
91.211.27.0/24
91.235.234.0/24
91.242.228.0/24
91.242.241.0/24
130.49.155.0/24
146.19.49.0/24
146.19.143.0/24
146.19.185.0/24
146.19.254.0/24
155.212.242.0/23
176.124.32.0/23
185.39.18.0/24
185.123.53.0/24
193.104.75.0/24
193.109.120.0/24
193.200.16.0/23
194.26.141.0/24
194.59.183.0/24
194.61.120.0/23
195.54.160.0/24
212.46.38.0/24
213.109.147.0/24
213.109.192.0/24
IPv6:
2a10:1fc0:1::-2a10:1fc0:6:ffff:ffff:ffff:ffff:ffff
2a10:1fc0:8::/47
2a10:1fc0:b::-2a10:1fc0:16:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b4:22:59:ef:d5:a5:9c:69:cb:78:c8:f5:74:86:26:f0:0e:f4:
2c:ad:53:c0:03:67:3b:4b:e8:0e:5a:c0:5c:af:55:26:f0:6a:
dd:3c:24:86:86:13:ac:d0:8f:83:91:83:20:eb:7e:df:71:a9:
03:12:c5:e1:b3:45:9b:64:b0:be:c8:f2:6c:8d:3d:94:83:c9:
57:2c:75:88:ff:36:11:c4:8e:db:9f:dd:cb:2f:b6:16:44:b1:
87:f2:69:e4:98:97:26:f5:12:7f:f3:e4:b4:1b:74:ad:81:e2:
3f:b4:1a:9e:95:77:54:08:f4:b2:28:e1:c4:44:23:d3:6a:36:
ef:73:6d:1e:89:0b:b4:32:2d:55:bf:a4:82:4c:ae:6a:16:f6:
b3:41:d6:27:00:e4:d0:3d:68:58:d0:88:f2:eb:b3:a3:6d:b1:
3a:46:2b:64:03:16:a9:03:17:41:26:cc:63:6a:5f:74:71:a1:
c3:08:89:e8:47:64:1e:8e:27:d3:1e:1a:21:aa:c8:d3:8d:fd:
f0:94:d2:05:d7:d5:22:d5:28:df:34:d9:b5:b5:0e:d5:99:e9:
51:c7:69:34:97:42:64:e7:b1:5b:bb:da:e8:6a:ee:94:ed:4a:
e6:29:2c:48:6f:23:41:75:61:00:ae:5a:2f:8c:6e:75:ac:ae:
08:7b:c6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:53:54 2026 by rpki-client