Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xCHCBZo_pDvCxpBBH-3VKJOGBv4.roa
File: xCHCBZo_pDvCxpBBH-3VKJOGBv4.roa (raw, json)
Hash identifier: TiR5m2ICI8w0GJcIst9wvzhA6rbt7g06HZiSqGMTELI=
Subject key identifier: C4:21:C2:05:9A:3F:A4:3B:C2:C6:90:41:1F:ED:D5:28:93:86:06:FE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0A47D45027E3EAD1067BBFF121694C6E3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xCHCBZo_pDvCxpBBH-3VKJOGBv4.roa
Signing time: Tue 15 Sep 2026 09:54:28 +0000
ROA not before: Tue 15 Sep 2026 09:54:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27411
IP address blocks: 45.137.87.0/24 maxlen: 24
45.152.197.0/24 maxlen: 24
2a0c:7886:b4::/48 maxlen: 48
2a0f:31c5::/32 maxlen: 32
2a10:67c7::/32 maxlen: 32
2a10:68c6::/32 maxlen: 32
2a13:9280::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 22 Sep 2026 07:25:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:7d:45:02:7e:3e:ad:10:67:bb:ff:12:16:94:c6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 15 09:54:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c421c2059a3fa43bc2c690411fedd528938606fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:5f:90:81:e4:15:ff:f1:a2:90:5f:98:d9:
41:7a:c5:ab:cb:9d:c5:fc:2d:42:44:b7:ee:04:fa:
d5:11:01:33:8f:88:00:2d:88:7e:35:5e:41:cd:b5:
47:b4:1b:d5:e1:15:67:b5:4c:23:f4:ca:96:04:9e:
e7:73:5e:c0:3b:fa:e5:bf:a8:03:91:f1:d4:92:f8:
ef:59:a0:c6:2f:c6:3a:91:7c:00:94:0d:04:1b:e5:
7e:b7:0e:fe:34:dc:48:48:a2:c1:1f:27:c6:f3:d1:
d0:b8:19:69:84:8b:b8:86:15:db:ae:2c:a5:a6:ab:
b2:27:0c:2b:3e:93:05:5c:91:0a:85:f2:51:79:4d:
23:98:c6:d0:00:e9:33:78:4e:a9:bb:12:32:d8:fb:
4a:ed:c6:88:15:24:2f:b4:12:4b:25:08:fe:9b:4b:
11:ac:21:52:fb:6c:17:5e:9c:64:28:ef:e1:d0:0b:
40:55:73:d7:a2:2a:78:82:32:88:04:94:27:b8:59:
79:15:0e:20:fa:fc:bc:e3:94:aa:8a:03:c8:ee:c4:
26:59:83:ec:7d:b1:3a:65:5a:05:38:50:75:b2:13:
68:64:21:ec:f4:89:d5:86:62:ef:c3:7b:8e:fb:af:
a0:63:6a:e7:45:aa:bc:24:8c:8e:09:b8:d5:4d:ec:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:21:C2:05:9A:3F:A4:3B:C2:C6:90:41:1F:ED:D5:28:93:86:06:FE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xCHCBZo_pDvCxpBBH-3VKJOGBv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.87.0/24
45.152.197.0/24
IPv6:
2a0c:7886:b4::/48
2a0f:31c5::/32
2a10:67c7::/32
2a10:68c6::/32
2a13:9280::/32
Signature Algorithm: sha256WithRSAEncryption
c6:6d:33:8d:2b:d4:dd:1d:f0:da:1e:30:53:55:a8:96:21:e1:
a1:d0:fc:4a:f7:f0:24:57:77:be:c2:28:ee:dc:42:81:a1:aa:
51:a8:bb:65:91:b4:87:9c:a8:f5:47:c3:61:75:88:44:a0:1c:
f2:45:18:28:c2:44:75:4a:9c:27:de:8e:e9:c8:03:ee:85:57:
f5:08:78:a4:6f:aa:f2:38:5c:ca:f5:04:18:a9:cd:b7:b1:27:
20:da:1a:a9:b3:d8:54:3e:5d:c6:66:6d:47:62:c9:e2:48:76:
92:23:65:48:60:b0:ad:7f:53:80:b5:cb:70:89:de:81:68:9b:
1a:9e:77:a0:2d:32:b7:01:ee:e1:70:3e:4d:98:6a:d9:af:d1:
cd:18:75:64:17:cc:c2:40:ce:18:dc:54:fa:51:fe:38:58:67:
ea:a3:b2:05:45:12:28:06:ea:5d:5c:7d:63:af:92:aa:5b:6f:
d1:4f:ae:66:f8:87:5c:84:89:cd:9c:0c:42:1f:6b:e8:f8:88:
0c:61:47:c0:69:51:ce:c5:6e:97:6e:2d:e1:7f:64:ba:a2:e8:
6f:17:20:1f:fb:54:37:17:9b:87:c3:b8:09:50:dc:2f:84:47:
28:0e:6a:b4:32:1b:20:43:8d:ea:b2:1e:b4:e9:57:3d:9e:a9:
57:a5:e7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:37:38 2026 by rpki-client