Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/luAw2jYVmpn9eurnz1BnIFvtfYU.roa
File: luAw2jYVmpn9eurnz1BnIFvtfYU.roa (raw, json)
Hash identifier: 7Nl0RPUrfN0RNCIg9WSPabqce+Xmja79+3jCEvDNrUs=
Subject key identifier: 96:E0:30:DA:36:15:9A:99:FD:7A:EA:E7:CF:50:67:20:5B:ED:7D:85
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019EA149361F92A38A70C7974C99E3A713FC
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/luAw2jYVmpn9eurnz1BnIFvtfYU.roa
Signing time: Sun 07 Jun 2026 08:53:10 +0000
ROA not before: Sun 07 Jun 2026 08:53:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62212
IP address blocks: 85.137.164.0/22 maxlen: 24
87.236.146.0/24 maxlen: 24
91.184.248.0/22 maxlen: 24
91.199.137.0/24 maxlen: 24
91.199.147.0/24 maxlen: 24
91.199.154.0/24 maxlen: 24
91.199.160.0/24 maxlen: 24
92.61.70.0/23 maxlen: 24
109.172.8.0/23 maxlen: 24
109.238.94.0/23 maxlen: 24
141.133.172.0/23 maxlen: 24
188.127.246.0/23 maxlen: 24
193.124.56.0/22 maxlen: 24
2a11:3b80::/29 maxlen: 48
2a11:3b80::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 16 Jun 2026 06:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a1:49:36:1f:92:a3:8a:70:c7:97:4c:99:e3:a7:13:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Jun 7 08:53:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96e030da36159a99fd7aeae7cf5067205bed7d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e2:6b:28:20:fc:0f:f6:6b:b9:08:0b:30:aa:
85:5c:e9:a7:5d:97:40:50:40:43:b5:f5:c5:95:e6:
61:b6:7b:2e:23:06:b7:99:af:61:45:7e:00:b7:1a:
42:97:f3:47:c6:d2:36:a6:01:a0:12:78:fb:53:94:
39:97:c7:0f:e5:96:78:a1:0e:2e:6b:f2:c5:e9:38:
5d:f7:45:12:f4:cf:a0:d1:ec:cb:3a:03:a7:25:f5:
2d:40:8b:e3:10:d7:03:c1:c4:c2:d7:cb:8b:c5:04:
41:b4:16:ab:57:5c:70:51:28:2a:e6:4c:7b:aa:43:
e3:92:53:99:06:cc:32:88:28:23:ea:eb:93:c6:83:
fe:75:3e:fd:5a:45:0e:e0:aa:eb:88:60:8d:64:1e:
97:52:7d:89:c7:27:30:ee:a6:17:eb:b5:5d:d7:66:
ad:09:24:d7:bd:14:38:01:42:71:06:e1:a1:f0:3c:
64:d1:a8:e7:c0:4c:96:58:bc:66:30:e9:ee:e5:6d:
e2:b1:50:9e:c4:47:68:d5:16:d1:04:6b:b0:5d:76:
e0:37:ef:c4:f7:f6:3a:96:7c:a4:ed:ef:39:38:bd:
56:a7:86:1d:b4:5b:0f:63:ff:07:4d:c2:36:58:0d:
48:70:35:0c:af:a2:21:b5:32:60:c9:5e:79:4d:5a:
d2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E0:30:DA:36:15:9A:99:FD:7A:EA:E7:CF:50:67:20:5B:ED:7D:85
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/luAw2jYVmpn9eurnz1BnIFvtfYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.164.0/22
87.236.146.0/24
91.184.248.0/22
91.199.137.0/24
91.199.147.0/24
91.199.154.0/24
91.199.160.0/24
92.61.70.0/23
109.172.8.0/23
109.238.94.0/23
141.133.172.0/23
188.127.246.0/23
193.124.56.0/22
IPv6:
2a11:3b80::/29
Signature Algorithm: sha256WithRSAEncryption
8d:1c:ab:14:51:b8:11:c0:a5:d5:10:31:47:56:37:38:6a:1e:
9f:cc:1e:a4:d3:b1:ca:2c:32:26:8a:72:58:36:0e:a7:19:34:
92:9e:e0:5d:10:3f:1c:81:ec:36:23:20:13:a5:27:61:de:b8:
d4:2d:09:49:3d:c1:0a:d9:8c:a3:88:9f:84:e8:c8:e5:2f:6c:
0d:e5:e3:1f:0b:da:80:69:b1:b7:a0:25:5d:9c:ed:45:d0:f7:
7c:40:bb:da:18:c8:1e:15:46:71:01:75:3f:e9:dd:fa:f8:9e:
07:98:6b:e6:71:74:01:5d:b4:8f:50:95:fa:ef:29:06:e0:3a:
35:91:c5:b4:71:c8:5a:f7:57:70:e5:cd:2c:07:c2:83:49:62:
47:f8:d7:97:2e:7f:8c:c2:a5:44:e6:7a:a0:a6:ed:f8:f2:85:
71:db:45:02:c2:34:20:d1:75:8a:4d:49:d2:66:7e:32:36:82:
48:03:d3:f6:67:a6:e0:6a:16:e4:48:be:68:40:73:30:4d:64:
81:c9:93:2a:80:08:a3:e6:cc:7b:4c:3a:6d:a2:6b:71:fe:db:
a7:c3:df:55:90:86:7c:35:de:42:cf:ca:45:7b:2e:25:dc:d7:
a1:72:92:ce:2d:01:7c:06:d0:31:ca:fe:05:54:06:d0:4f:86:
66:c4:81:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:27:45 2026 by rpki-client