Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SJuzNLZwD_aAE34UujLAt-6MDx4.roa
File: SJuzNLZwD_aAE34UujLAt-6MDx4.roa (raw, json)
Hash identifier: kwR5iuDHmcOidayFWwrvvHwdh4lggY624pxdZKLp2dw=
Subject key identifier: 48:9B:B3:34:B6:70:0F:F6:80:13:7E:14:BA:32:C0:B7:EE:8C:0F:1E
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A1963AF6C75B5304A92508036C435563A3
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SJuzNLZwD_aAE34UujLAt-6MDx4.roa
Signing time: Sun 01 Nov 2026 08:30:09 +0000
ROA not before: Sun 01 Nov 2026 08:30:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 89.34.228.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.37.119.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.38.229.0/24 maxlen: 24
89.42.80.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/24 maxlen: 24
89.42.86.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.47.117.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
185.101.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Nov 2026 11:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:3a:f6:c7:5b:53:04:a9:25:08:03:6c:43:55:63:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 1 08:30:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=489bb334b6700ff680137e14ba32c0b7ee8c0f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:29:30:24:69:f1:72:73:fa:df:eb:86:44:
c2:99:c9:39:25:ac:23:74:be:ed:2b:ff:6c:b6:89:
3a:8b:d9:d0:fb:a6:b2:f4:ce:3f:a1:71:fc:fc:3f:
de:5c:b4:6b:38:33:60:0a:43:25:21:f0:c4:d7:40:
b2:e7:f8:86:ea:d7:e0:35:92:a4:df:57:4a:f0:fe:
db:b1:6a:6f:93:5a:60:01:32:58:50:22:2d:05:c4:
3b:f6:86:02:0e:09:40:7b:82:bf:71:69:bb:91:6f:
70:be:47:23:fb:4c:d0:52:22:30:6a:fb:6c:35:fd:
23:78:1d:a6:8f:b2:ec:92:13:ce:1b:d8:eb:06:65:
94:52:b3:f8:94:4b:49:48:1a:90:db:88:a2:51:cf:
14:d8:7e:28:f8:d1:f2:c6:52:f8:93:f6:6a:f3:d2:
7e:76:b1:0f:e0:c7:eb:6c:50:ea:6f:09:65:41:c4:
e1:26:3e:4e:8c:83:69:ae:3f:29:3c:6b:6e:c1:db:
9f:58:e9:08:97:b6:95:78:0c:bb:a7:91:7a:ca:70:
84:d9:b8:b4:d8:ca:88:ce:53:a6:ff:98:ad:48:bc:
3d:f1:63:f0:1f:65:12:72:79:dd:4b:6e:18:1d:e7:
0f:b3:ab:82:d4:55:de:b1:05:e3:54:9c:e8:d4:59:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9B:B3:34:B6:70:0F:F6:80:13:7E:14:BA:32:C0:B7:EE:8C:0F:1E
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SJuzNLZwD_aAE34UujLAt-6MDx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.228.0/24
89.34.231.0/24
89.37.119.0/24
89.38.228.0/23
89.42.80.0-89.42.82.255
89.42.86.0/24
89.43.143.0/24
89.46.3.0/24
89.47.117.0/24
89.47.126.0/24
185.101.105.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c0:f1:56:03:a9:11:4c:b0:b6:70:45:fc:4a:e1:a5:39:6b:
46:a5:92:ae:74:b8:13:81:3c:f5:a0:c0:37:c4:21:ed:ee:cc:
e7:56:86:12:3b:ae:d1:4b:29:ee:93:0b:f7:22:b4:e4:78:ab:
14:62:5b:40:ca:eb:83:a8:62:27:82:aa:e2:76:30:88:7c:75:
24:22:a6:f1:6d:4b:19:bd:27:a2:a1:8f:65:8c:52:29:02:f5:
54:e0:9a:5b:0a:63:cd:de:a4:cb:b9:2f:1a:7b:de:bf:f8:5d:
64:06:88:f2:5f:a3:79:fb:a4:d9:4f:1c:c1:25:12:1b:01:9c:
79:09:b9:f4:46:53:f2:3f:84:67:41:aa:9d:aa:51:43:8a:28:
9a:a2:a1:1c:2f:d1:f8:ce:6d:00:1c:9b:f8:6f:92:e8:68:14:
2e:a6:2d:10:d2:a1:a7:c0:87:d8:78:eb:17:a4:4a:13:23:16:
0e:78:59:49:d7:4c:2d:42:dc:32:1d:69:f8:f7:b8:47:9e:f6:
92:8e:40:54:3a:b1:0d:f4:86:ae:a3:60:b2:5b:74:00:53:a7:
20:7d:96:0d:e0:6b:bc:74:5d:1c:ad:bd:73:b9:a0:36:9d:6a:
05:7f:0a:ca:3d:c6:83:58:0d:10:6c:db:90:d5:e5:9f:5d:ee:
4f:3b:59:e6
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAaGWOvbHW1MEqSUIA2xDVWOjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYxMTAxMDgzMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODliYjMzNGI2NzAwZmY2ODAxMzdlMTRiYTMyYzBiN2VlOGMwZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf4pMCRp8XJz+t/rhkTCmck5Jawj
dL7tK/9stok6i9nQ+6ay9M4/oXH8/D/eXLRrODNgCkMlIfDE10Cy5/iG6tfgNZKk
31dK8P7bsWpvk1pgATJYUCItBcQ79oYCDglAe4K/cWm7kW9wvkcj+0zQUiIwavts
Nf0jeB2mj7LskhPOG9jrBmWUUrP4lEtJSBqQ24iiUc8U2H4o+NHyxlL4k/Zq89J+
drEP4MfrbFDqbwllQcThJj5OjINprj8pPGtuwdufWOkIl7aVeAy7p5F6ynCE2bi0
2MqIzlOm/5itSLw98WPwH2UScnndS24YHecPs6uC1FXesQXjVJzo1Fl38wIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFEibszS2cA/2gBN+FLoywLfujA8eMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvU0p1ek5MWndEX2FBRTM0VXVqTEF0LTZNRHg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQAWSLkAwQA
WSLnAwQAWSV3AwQBWSbkMAwDBARZKlADBABZKlIDBABZKlYDBABZK48DBABZLgMD
BABZL3UDBABZL34DBAC5ZWkwDQYJKoZIhvcNAQELBQADggEBADnA8VYDqRFMsLZw
RfxK4aU5a0alkq50uBOBPPWgwDfEIe3uzOdWhhI7rtFLKe6TC/citOR4qxRiW0DK
64OoYieCquJ2MIh8dSQipvFtSxm9J6Khj2WMUikC9VTgmlsKY83epMu5Lxp73r/4
XWQGiPJfo3n7pNlPHMElEhsBnHkJufRGU/I/hGdBqp2qUUOKKJqioRwv0fjObQAc
m/hvkuhoFC6mLRDSoafAh9h46xekShMjFg54WUnXTC1C3DIdafj3uEee9pKOQFQ6
sQ30hq6jYLJbdABTpyB9lg3ga7x0XRytvXO5oDadagV/Cso9xoNYDRBs25DV5Z9d
7k87WeY=
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:38:57 2026 by rpki-client