Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/DVf9crZqxswWxjPrBt2QJlxH5aI.roa
File: DVf9crZqxswWxjPrBt2QJlxH5aI.roa (raw, json)
Hash identifier: 4SCZHNRo+hE4Br6DMPs0ifTV9W6Se2bYBJBKDconEF0=
Subject key identifier: 0D:57:FD:72:B6:6A:C6:CC:16:C6:33:EB:06:DD:90:26:5C:47:E5:A2
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 019B7B364389C3B8A09822AF225D53E3DFD8
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/DVf9crZqxswWxjPrBt2QJlxH5aI.roa
Signing time: Thu 01 Jan 2026 20:18:32 +0000
ROA not before: Thu 01 Jan 2026 20:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198583
IP address blocks: 37.148.242.0/24 maxlen: 24
37.148.243.0/24 maxlen: 24
185.153.245.0/24 maxlen: 24
185.153.246.0/24 maxlen: 24
185.153.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Feb 2026 12:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:43:89:c3:b8:a0:98:22:af:22:5d:53:e3:df:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Jan 1 20:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d57fd72b66ac6cc16c633eb06dd90265c47e5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:4f:fb:11:ed:4b:ef:65:2b:87:e8:3a:6f:
1f:5c:cf:7b:84:13:7c:5c:a9:0f:44:cb:e5:07:fa:
e1:eb:33:e2:ce:76:a8:ff:33:50:b6:a9:e1:c6:ce:
6d:e1:7b:1c:58:ed:1c:43:96:1f:eb:ec:a9:cb:c2:
3e:5c:94:08:04:00:78:3e:e7:2a:e0:22:fd:ee:10:
a8:d1:4d:35:48:05:25:f0:6e:55:d4:c8:27:3d:54:
5a:24:3b:7f:df:28:af:b3:87:74:9e:42:b9:e1:6c:
67:11:85:6a:f7:60:a8:ba:4f:a5:aa:7c:38:3a:a0:
13:8f:ff:8b:00:e0:df:86:2d:e9:78:e5:4a:3e:69:
df:85:d2:02:25:78:77:70:2a:2b:fd:84:f8:7b:de:
ec:96:20:2c:88:61:1d:73:50:4b:e7:ec:a4:d6:4d:
b6:48:29:91:3d:f8:70:ed:71:2c:d4:90:56:8b:9e:
45:02:98:6b:de:8b:67:e2:f9:74:02:be:60:60:dc:
01:40:fe:27:fb:94:cd:21:9e:cc:1d:d5:5d:77:eb:
2e:a9:13:7a:f6:10:93:de:af:87:53:45:77:d2:20:
d0:d6:49:e7:46:78:ba:cf:47:7f:b9:82:1a:f8:d7:
c2:9b:ed:aa:f2:61:db:f6:db:0e:ca:52:72:63:21:
de:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:57:FD:72:B6:6A:C6:CC:16:C6:33:EB:06:DD:90:26:5C:47:E5:A2
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/DVf9crZqxswWxjPrBt2QJlxH5aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.242.0/23
185.153.245.0-185.153.247.255
Signature Algorithm: sha256WithRSAEncryption
6b:b3:b7:fc:15:71:d9:e0:91:5f:f2:f4:86:3e:33:ca:ca:07:
f0:60:bc:53:d4:b4:c5:ec:dd:04:f7:cb:c4:1e:c9:4f:05:b0:
d5:43:57:2f:3d:58:0a:ed:85:05:5b:0c:cb:06:09:01:69:3c:
4f:52:3c:2c:57:28:67:49:a3:91:bb:fa:ec:59:1f:3d:4a:5a:
24:17:a3:b7:0a:75:d5:37:62:42:fd:5d:0d:0c:b0:8a:bb:8d:
65:4b:0c:d0:d2:c2:81:ec:bd:f3:f7:11:e7:d5:50:9c:02:0c:
a2:a8:23:27:a1:d6:e1:65:f9:68:8f:b8:f0:ad:0b:73:e8:83:
e6:c4:af:96:72:e6:88:b8:b9:e5:bd:28:e0:4f:08:9c:7f:04:
ee:29:66:16:4c:4e:36:25:40:bd:96:0c:94:f2:d2:61:85:fb:
ae:00:35:56:73:39:81:1f:15:d5:86:b6:ed:fd:a6:23:ed:ec:
0b:c0:82:44:e2:ee:24:8f:24:e3:d2:dc:a7:d7:8d:8e:48:8c:
ec:b5:cc:f9:a8:96:68:47:7a:33:0b:ec:a8:b8:8e:10:88:d6:
37:85:22:75:92:7c:2a:d0:8c:26:d8:c2:e2:9e:42:43:45:8b:
13:26:7a:a5:0d:6a:57:7a:40:8c:8b:66:f0:38:4c:1a:1e:83:
46:7d:70:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:41:30 2026 by rpki-client