Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wBSz0XpyVyNUDwq_IJqkCaHHkqk.roa
File: wBSz0XpyVyNUDwq_IJqkCaHHkqk.roa (raw, json)
Hash identifier: n9y2BUSZfIQT7p4b90JWwCu1fpnjg5dH6UyfWO0Mab8=
Subject key identifier: C0:14:B3:D1:7A:72:57:23:54:0F:0A:BF:20:9A:A4:09:A1:C7:92:A9
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0AE1FB63CF2AA3A34E1ED47361B2DC01F
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wBSz0XpyVyNUDwq_IJqkCaHHkqk.roa
Signing time: Thu 17 Sep 2026 06:48:28 +0000
ROA not before: Thu 17 Sep 2026 06:48:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 37.98.145.0/24 maxlen: 24
77.107.88.0/24 maxlen: 24
80.240.94.0/24 maxlen: 24
81.168.32.0/24 maxlen: 24
81.168.80.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.197.0/24 maxlen: 24
82.152.200.0/24 maxlen: 24
82.152.211.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.66.0/24 maxlen: 24
82.153.119.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
89.213.66.0/24 maxlen: 24
89.213.67.0/24 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.153.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 07:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:1f:b6:3c:f2:aa:3a:34:e1:ed:47:36:1b:2d:c0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 17 06:48:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c014b3d17a725723540f0abf209aa409a1c792a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:f9:d3:4a:ad:cd:3f:28:b2:89:75:87:64:
70:dc:18:3b:3b:8f:49:ad:a6:c4:7a:35:07:60:e2:
2b:cc:1f:7b:62:79:07:05:d4:4c:c9:dc:87:00:25:
1f:38:71:11:c7:ae:1c:e4:d3:86:4a:e7:33:63:94:
0d:de:9f:95:39:d2:c0:ed:b5:fb:46:b0:b6:34:ae:
12:e7:46:f3:c9:5a:6d:d7:96:ab:9a:00:c7:10:13:
d4:91:0c:fa:30:09:99:d7:26:e5:10:34:fa:07:86:
8d:54:0a:09:c0:c7:d4:b7:ab:b4:1c:ff:bd:d3:6b:
69:87:ad:0b:4f:44:5f:b3:a1:81:08:63:b0:47:03:
a4:22:12:5e:9e:27:9f:ae:43:ce:ff:24:94:b3:81:
1a:68:8b:61:a4:b3:21:0b:be:af:31:fb:f4:75:26:
d8:1f:09:73:d8:54:de:34:cc:69:a3:34:94:ab:90:
81:63:94:01:f6:51:35:44:56:8d:f4:e4:6a:d9:23:
83:4e:94:a7:00:31:25:f3:63:df:31:d3:2a:f5:dc:
23:a9:8e:93:38:8e:98:30:b5:70:fc:2c:0b:36:ad:
b1:e9:54:16:b9:09:6b:d8:b5:22:ea:19:b2:ca:58:
de:d0:b6:c0:47:d1:fa:c0:92:c0:08:c7:83:c0:9b:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:14:B3:D1:7A:72:57:23:54:0F:0A:BF:20:9A:A4:09:A1:C7:92:A9
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wBSz0XpyVyNUDwq_IJqkCaHHkqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.145.0/24
77.107.88.0/24
80.240.94.0/24
81.168.32.0/24
81.168.80.0/24
82.152.8.0/24
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0/24
82.152.98.0/24
82.152.109.0/24
82.152.197.0/24
82.152.200.0/24
82.152.211.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.66.0/24
82.153.119.0/24
82.153.205.0/24
89.213.66.0/23
109.176.40.0-109.176.55.255
109.176.153.0/24
213.130.130.0/24
213.130.149.0/24
213.218.214.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f9:a1:8d:30:e1:c9:cc:80:57:f8:ae:f4:fb:35:47:30:22:
44:ed:70:2f:00:08:82:c3:26:61:ab:6f:4e:07:05:f2:62:14:
5a:62:f9:be:56:ef:5b:31:90:da:02:83:5c:94:67:e0:9a:e4:
37:b6:c9:53:d9:6b:80:e5:3b:a0:c1:58:7d:f5:57:e1:65:6c:
69:5e:71:ee:41:d9:ee:39:e4:49:fd:c8:99:05:dc:02:9b:9b:
35:35:db:2c:04:20:5a:94:6d:c8:42:fd:88:d8:c3:8d:28:02:
93:d9:43:24:26:aa:b9:ea:72:74:bd:b6:c5:c9:c7:5e:0b:a2:
18:c7:ae:85:1f:90:95:e6:49:89:81:b4:78:9b:1d:5d:40:50:
2b:4a:53:d9:33:8f:be:8f:cb:e8:23:14:dd:ab:7a:c8:14:0b:
06:18:6f:f3:6c:46:c9:c1:57:a4:b8:63:eb:a1:17:d5:81:06:
0a:15:60:9b:1d:98:7a:f1:22:a1:5d:4e:0f:8e:eb:ae:89:c9:
10:e6:37:54:2a:b8:86:80:b9:ba:c3:6c:33:82:4b:79:56:4a:
ff:8f:55:a9:68:21:99:86:bd:80:94:b8:6e:f6:f4:95:58:32:
ac:af:7f:fa:c8:9d:ca:62:e2:6b:e3:85:27:49:f2:89:b3:a4:
b1:1a:42:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:32:27 2026 by rpki-client