Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/jhdb_r0XRcl9Mcv7PgAbpc3alEQ.roa
File: jhdb_r0XRcl9Mcv7PgAbpc3alEQ.roa (raw, json)
Hash identifier: BZ7uV/P7VilBs71H3zS8GxmU/EiaA1em1b4uTkZIOnM=
Subject key identifier: 8E:17:5B:FE:BD:17:45:C9:7D:31:CB:FB:3E:00:1B:A5:CD:DA:94:44
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A0E1BDE8136D2D0970EAC240481013EE99
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/jhdb_r0XRcl9Mcv7PgAbpc3alEQ.roa
Signing time: Sun 27 Sep 2026 07:21:54 +0000
ROA not before: Sun 27 Sep 2026 07:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.148.128.0/22 maxlen: 24
37.148.128.0/24 maxlen: 24
37.148.129.0/24 maxlen: 24
37.148.130.0/24 maxlen: 24
37.148.131.0/24 maxlen: 24
45.157.158.0/23 maxlen: 24
95.155.128.0/23 maxlen: 24
95.155.128.0/24 maxlen: 24
95.155.129.0/24 maxlen: 24
95.155.133.0/24 maxlen: 24
95.155.134.0/24 maxlen: 24
95.155.136.0/24 maxlen: 24
95.155.137.0/24 maxlen: 24
95.155.140.0/24 maxlen: 24
95.155.144.0/24 maxlen: 24
95.155.145.0/24 maxlen: 24
95.155.146.0/23 maxlen: 24
95.155.146.0/24 maxlen: 24
95.155.147.0/24 maxlen: 24
95.155.148.0/23 maxlen: 24
95.155.148.0/24 maxlen: 24
95.155.149.0/24 maxlen: 24
95.155.152.0/22 maxlen: 24
95.155.152.0/24 maxlen: 24
95.155.153.0/24 maxlen: 24
95.155.155.0/24 maxlen: 24
95.155.156.0/24 maxlen: 24
95.155.160.0/20 maxlen: 24
95.155.176.0/21 maxlen: 24
95.155.176.0/24 maxlen: 24
95.155.177.0/24 maxlen: 24
95.155.178.0/24 maxlen: 24
95.155.179.0/24 maxlen: 24
152.89.84.0/24 maxlen: 24
152.89.85.0/24 maxlen: 24
152.89.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Sep 2026 08:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:bd:e8:13:6d:2d:09:70:ea:c2:40:48:10:13:ee:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Sep 27 07:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e175bfebd1745c97d31cbfb3e001ba5cdda9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:b4:3b:d9:9a:4e:cf:c5:ca:d3:a1:a1:bd:
e0:fc:68:6d:b8:65:20:96:51:63:4e:e2:06:2f:cf:
a6:cd:60:2a:9f:ae:85:a9:0f:34:2e:96:39:80:82:
80:2b:46:7c:f5:64:c5:67:b6:ae:c2:08:17:5b:3b:
d4:f6:10:ee:73:cf:46:92:e4:29:af:8f:ae:5e:61:
71:67:c3:cf:87:25:de:a6:b0:6e:ce:85:82:02:31:
48:d4:0d:2a:0f:50:34:a6:43:26:74:64:14:d8:fc:
00:13:42:1b:2d:a8:30:e9:99:8b:58:63:72:a4:1d:
33:0c:86:ac:fd:49:74:ba:39:0c:82:d7:24:eb:e9:
31:1b:58:26:17:9d:1f:1a:82:7d:4c:0e:c1:18:f7:
4e:aa:72:7b:d5:13:bb:cd:e0:97:ce:4d:35:94:5b:
77:c0:ea:2b:a6:49:e0:c9:d0:20:c0:bf:48:83:e3:
a4:fc:7a:d5:e1:84:ef:b5:3b:08:df:53:2e:25:05:
7c:3f:bf:36:f0:42:57:2d:57:fd:64:81:8b:8f:c2:
da:68:a0:07:08:90:8e:d8:33:38:f0:34:47:4e:8a:
8f:47:56:4a:db:43:75:69:c9:eb:ec:e7:f6:48:37:
5a:ad:98:cf:e9:9d:34:7a:fb:02:d8:12:87:f2:28:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:17:5B:FE:BD:17:45:C9:7D:31:CB:FB:3E:00:1B:A5:CD:DA:94:44
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/jhdb_r0XRcl9Mcv7PgAbpc3alEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.128.0/22
45.157.158.0/23
95.155.128.0/23
95.155.133.0-95.155.134.255
95.155.136.0/23
95.155.140.0/24
95.155.144.0-95.155.149.255
95.155.152.0-95.155.156.255
95.155.160.0-95.155.183.255
152.89.84.0/23
152.89.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:92:5a:2f:33:38:fe:09:14:64:bf:41:24:2d:0c:d0:9d:23:
13:23:04:74:6e:df:da:df:8d:61:1e:71:e8:ea:1c:5b:53:59:
53:34:81:be:c9:fd:53:19:a4:cc:0f:cd:e7:b0:db:17:d2:56:
6d:6e:48:bc:3a:05:2a:3b:45:10:9f:38:37:58:6a:d2:2a:2c:
75:88:82:42:c5:2e:3a:6b:f0:07:c9:86:8d:38:13:f3:19:db:
62:45:26:da:a5:aa:e9:0b:08:a8:46:be:ce:66:4c:ba:1b:d9:
50:24:9a:d3:6c:fd:2a:2f:23:99:a8:40:e4:97:25:d7:a7:e1:
60:42:db:71:6b:22:dc:35:84:88:70:5e:22:f5:13:e0:51:c9:
c1:82:98:8e:7c:3c:bc:5f:aa:26:85:56:18:82:0f:04:14:9d:
ce:c6:03:9b:ac:a5:1b:14:20:c6:cb:83:4b:e9:08:3f:9a:58:
a9:2e:68:bd:d9:a6:45:f3:40:73:65:51:a3:72:fc:7f:b0:44:
b5:ad:73:57:73:ef:3d:6b:f1:b7:a8:ba:12:c1:9d:ad:d5:4b:
11:c2:aa:55:a3:f5:33:d1:a9:b9:6b:d4:63:79:2d:92:a8:7c:
5c:24:c1:e5:3f:c2:cf:67:f4:c0:5c:8b:35:4f:9f:bc:10:2b:
75:6c:1c:49
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAaDhvegTbS0JcOrCQEgQE+6ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYwOTI3MDcyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTE3NWJmZWJkMTc0NWM5N2QzMWNiZmIzZTAwMWJhNWNkZGE5NDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Sa0O9maTs/FytOhob3g/GhtuGUg
llFjTuIGL8+mzWAqn66FqQ80LpY5gIKAK0Z89WTFZ7auwggXWzvU9hDuc89GkuQp
r4+uXmFxZ8PPhyXeprBuzoWCAjFI1A0qD1A0pkMmdGQU2PwAE0IbLagw6ZmLWGNy
pB0zDIas/Ul0ujkMgtck6+kxG1gmF50fGoJ9TA7BGPdOqnJ71RO7zeCXzk01lFt3
wOorpkngydAgwL9Ig+Ok/HrV4YTvtTsI31MuJQV8P7828EJXLVf9ZIGLj8LaaKAH
CJCO2DM48DRHToqPR1ZK20N1acnr7Of2SDdarZjP6Z00evsC2BKH8ij4iwIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFI4XW/69F0XJfTHL+z4AG6XN2pREMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvamhkYl9yMFhSY2w5TWN2N1BnQWJwYzNhbEVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQCJZSAAwQB
LZ2eAwQBX5uAMAwDBABfm4UDBABfm4YDBAFfm4gDBABfm4wwDAMEBF+bkAMEAV+b
lDAMAwQDX5uYAwQAX5ucMAwDBAVfm6ADBANfm7ADBAGYWVQDBACYWVcwDQYJKoZI
hvcNAQELBQADggEBAB6SWi8zOP4JFGS/QSQtDNCdIxMjBHRu39rfjWEecejqHFtT
WVM0gb7J/VMZpMwPzeew2xfSVm1uSLw6BSo7RRCfODdYatIqLHWIgkLFLjpr8AfJ
ho04E/MZ22JFJtqlqukLCKhGvs5mTLob2VAkmtNs/SovI5moQOSXJden4WBC23Fr
Itw1hIhwXiL1E+BRycGCmI58PLxfqiaFVhiCDwQUnc7GA5uspRsUIMbLg0vpCD+a
WKkuaL3ZpkXzQHNlUaNy/H+wRLWtc1dz7z1r8beouhLBna3VSxHCqlWj9TPRqblr
1GN5LZKofFwkweU/ws9n9MBcizVPn7wQK3VsHEk=
-----END CERTIFICATE-----
Generated at Thu Oct 1 08:45:50 2026 by rpki-client