Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/v07_LcBGaH6XgrgOOQ_dL8oyJGU.roa
File: v07_LcBGaH6XgrgOOQ_dL8oyJGU.roa (raw, json)
Hash identifier: QeEhRaaF5TnJAMUrRy8HDpai7S4qkmXby0cgkN6SZ9U=
Subject key identifier: BF:4E:FF:2D:C0:46:68:7E:97:82:B8:0E:39:0F:DD:2F:CA:32:24:65
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019E93637A142E232138C214143A00EA3225
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/v07_LcBGaH6XgrgOOQ_dL8oyJGU.roa
Signing time: Thu 04 Jun 2026 16:07:10 +0000
ROA not before: Thu 04 Jun 2026 16:07:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.253.0/24 maxlen: 24
45.9.0.0/24 maxlen: 24
85.208.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jun 2026 09:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:63:7a:14:2e:23:21:38:c2:14:14:3a:00:ea:32:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 4 16:07:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf4eff2dc046687e9782b80e390fdd2fca322465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:70:f6:a7:96:2f:94:5b:b4:18:2c:bd:c3:
23:fe:3f:5f:da:2f:7a:8d:8b:21:e9:9c:11:a2:7b:
7c:6a:ce:20:30:6e:e1:c6:2d:3a:1b:c7:b4:6d:4a:
55:93:e1:f5:eb:ee:65:3c:5f:79:d6:9e:70:6c:3e:
1f:ec:e7:b7:4c:eb:48:87:2c:1a:8e:0d:fd:56:00:
79:4b:53:9c:b3:b4:1d:26:1c:86:f7:d4:23:d1:35:
2e:26:38:97:da:bf:d1:31:4b:78:db:26:f6:4d:b7:
a7:1b:8b:b1:2d:bb:b1:b3:2c:53:a0:71:a5:1d:63:
92:10:24:8e:3f:c6:10:46:cc:fa:88:df:f3:60:a4:
4a:14:41:53:cc:2f:79:58:49:6a:2c:9f:2b:05:6b:
44:57:87:3d:3c:3b:5f:20:f0:d1:bf:3d:eb:af:f0:
47:87:2c:3e:4a:64:8c:b6:f6:76:c7:a0:55:88:81:
f3:ed:33:fc:d2:d6:66:6b:9d:9a:43:7f:76:83:d4:
d3:f5:d6:e6:bc:5d:20:36:75:63:1a:78:93:ac:45:
c5:62:11:11:eb:43:cc:52:2e:34:1c:08:5d:8a:fa:
a0:99:1a:ad:9a:2d:43:2c:3e:cf:55:60:a9:b0:db:
96:01:b6:b5:79:bb:18:a3:99:bc:e8:05:4a:2e:ac:
19:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4E:FF:2D:C0:46:68:7E:97:82:B8:0E:39:0F:DD:2F:CA:32:24:65
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/v07_LcBGaH6XgrgOOQ_dL8oyJGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.253.0/24
45.9.0.0/24
85.208.105.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:a8:b4:ac:ea:d8:85:b8:d5:81:4d:ed:e4:78:cd:5b:13:89:
7b:84:bd:ef:98:60:f9:2a:c6:d0:e7:90:8a:63:be:b3:be:6a:
c7:97:12:6c:8b:c3:ba:aa:6f:ae:28:56:ce:5c:58:28:c1:e1:
2e:a6:90:22:a8:92:13:91:0e:97:c4:86:d3:89:06:a6:57:77:
68:10:6b:df:e4:b7:35:1e:2f:cc:9b:20:04:ce:8b:f4:a5:c4:
c4:75:14:6f:45:ef:6d:30:d9:c4:ec:a6:0d:21:65:56:38:8d:
f1:3c:f0:e7:14:8e:9d:df:d1:3c:79:f0:96:ca:e9:6b:60:8b:
2a:20:b2:f7:5b:98:ee:65:c0:0f:81:0b:c7:d6:dd:b5:7d:9e:
46:bb:28:5c:97:62:cd:d7:cd:d0:92:4d:fa:2e:8b:9c:77:fe:
58:93:84:9f:a6:ca:d7:58:3e:98:20:a9:cb:e0:e8:b0:8c:b2:
ef:28:8b:39:38:84:72:86:ea:49:95:ab:d2:5b:c7:85:83:31:
f0:35:93:77:b5:3f:15:da:7a:6e:64:07:96:68:7e:0b:b1:6b:
70:2c:7e:f2:cb:ef:fb:00:8d:02:a5:c0:0c:b6:e2:12:5a:7c:
a9:a5:59:1f:bd:d7:5d:47:82:d2:f3:51:3c:40:3f:4f:7e:34:
d6:5f:85:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:27:07 2026 by rpki-client