Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Wkv31kZMkk9dM5FYTb0h-BicRME.roa
File: Wkv31kZMkk9dM5FYTb0h-BicRME.roa (raw, json)
Hash identifier: PyLmaC5WXq+Du8IYqIzNYReZHoxCJ9PR7QQ1T/MCgi4=
Subject key identifier: 5A:4B:F7:D6:46:4C:92:4F:5D:33:91:58:4D:BD:21:F8:18:9C:44:C1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019A492180E0E15F7D339AE6A78ED873DF3F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Wkv31kZMkk9dM5FYTb0h-BicRME.roa
Signing time: Mon 03 Nov 2025 09:52:03 +0000
ROA not before: Mon 03 Nov 2025 09:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 77.93.137.0/24 maxlen: 24
77.93.149.0/24 maxlen: 24
82.152.174.0/23 maxlen: 23
82.153.208.0/22 maxlen: 22
82.163.19.0/24 maxlen: 24
89.213.58.0/24 maxlen: 24
89.213.60.0/23 maxlen: 24
89.213.108.0/23 maxlen: 24
89.213.110.0/24 maxlen: 24
89.213.122.0/24 maxlen: 24
89.213.126.0/24 maxlen: 24
89.213.194.0/23 maxlen: 24
89.213.198.0/23 maxlen: 24
89.213.200.0/23 maxlen: 24
89.213.202.0/23 maxlen: 24
89.213.204.0/23 maxlen: 24
89.213.240.0/23 maxlen: 24
89.213.249.0/24 maxlen: 24
89.213.250.0/24 maxlen: 24
213.210.16.0/24 maxlen: 24
213.210.18.0/24 maxlen: 24
213.210.33.0/24 maxlen: 24
213.210.51.0/24 maxlen: 24
213.218.220.0/24 maxlen: 24
217.144.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Nov 2025 09:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:21:80:e0:e1:5f:7d:33:9a:e6:a7:8e:d8:73:df:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 3 09:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a4bf7d6464c924f5d3391584dbd21f8189c44c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:7e:ca:cf:ab:d1:a8:69:74:3c:01:49:df:
87:4f:0f:39:41:0a:65:c0:6c:72:88:8a:a1:17:8c:
61:dc:32:95:c2:00:09:70:34:3d:06:80:e0:b6:fa:
60:95:57:d2:1d:22:04:b4:d8:29:b5:d9:53:1a:9e:
04:e9:81:06:eb:15:96:49:e8:4e:73:e5:03:15:52:
de:fc:74:d0:82:3d:bf:d6:2e:cf:9a:ce:5e:d2:fc:
84:58:dd:c1:8e:6f:cf:f0:7b:31:9f:3a:7a:9a:df:
9b:1c:2e:ae:e4:4a:c6:91:54:06:16:ce:90:e1:22:
1a:3f:95:ba:4e:d4:3c:ac:7e:2e:b4:83:66:04:ed:
fc:06:bb:ce:10:e7:81:ea:00:ef:51:1a:02:63:c2:
3d:13:4d:23:25:f0:af:95:c6:08:41:16:84:d8:72:
0a:46:c5:0d:e3:ac:80:f2:1f:9a:17:0f:26:c1:82:
f3:eb:e0:2a:da:1e:9e:43:42:f3:e3:b3:40:0b:17:
4d:ce:36:ed:b9:8d:27:1d:11:2e:55:45:d1:1a:90:
73:54:8f:e8:94:ac:73:5f:89:9c:69:5d:7f:a2:a2:
ee:79:e2:df:8d:6e:e5:c0:52:f3:fe:05:e8:b2:9d:
59:54:66:b9:c2:76:5b:22:51:bc:fd:f5:d0:c0:9f:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4B:F7:D6:46:4C:92:4F:5D:33:91:58:4D:BD:21:F8:18:9C:44:C1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Wkv31kZMkk9dM5FYTb0h-BicRME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.137.0/24
77.93.149.0/24
82.152.174.0/23
82.153.208.0/22
82.163.19.0/24
89.213.58.0/24
89.213.60.0/23
89.213.108.0-89.213.110.255
89.213.122.0/24
89.213.126.0/24
89.213.194.0/23
89.213.198.0-89.213.205.255
89.213.240.0/23
89.213.249.0-89.213.250.255
213.210.16.0/24
213.210.18.0/24
213.210.33.0/24
213.210.51.0/24
213.218.220.0/24
217.144.151.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6a:d5:1d:55:b3:1d:4d:4b:78:9d:bd:42:3a:72:e2:79:c4:
2c:74:6c:b1:bd:67:6e:5f:cf:fa:a3:25:b6:af:fe:46:79:dc:
f5:3a:34:69:9a:0b:10:95:96:fc:6b:52:8d:97:7e:70:c5:6d:
a1:97:2f:6b:a0:da:83:b9:e5:dd:21:e9:c0:64:6e:e8:bc:8e:
6b:54:b3:c2:e3:cc:c6:e9:c9:ea:9f:35:4c:84:c8:64:65:c5:
8c:20:53:f5:99:57:07:22:d0:d8:c3:c3:f1:5f:c3:68:2c:0e:
f3:91:c1:ef:6a:5b:e3:dc:24:37:8a:65:2b:83:6e:37:4d:53:
ae:a7:8d:0c:f1:9d:5d:15:c9:26:62:77:e1:93:38:70:d7:41:
1b:68:a9:b6:cb:7c:93:83:d8:c2:70:72:3e:b7:bc:56:e7:c0:
a7:90:3b:a1:5d:51:24:0d:e4:a0:41:f3:a1:4c:46:ba:63:91:
94:50:9c:8b:2a:f1:44:01:db:d2:56:17:34:f8:2a:a1:f8:28:
fe:9a:b4:b6:19:32:84:7e:77:85:1f:74:0b:f9:cf:40:dc:be:
b7:35:43:87:c0:a2:69:5a:1a:9e:e3:c1:43:ae:b3:9d:0c:e6:
f7:86:15:b7:4f:3d:e6:fb:78:16:13:c8:19:75:93:56:fc:be:
8a:f3:84:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:42:06 2025 by rpki-client