Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/rOLXrAYPC-HHeY5KvcVsdCNFsoU.roa
File: rOLXrAYPC-HHeY5KvcVsdCNFsoU.roa (raw, json)
Hash identifier: fiS5+LWgFhMQYxEuuFFIaTRLiSbNXF0CYLYTUhoBO0s=
Subject key identifier: AC:E2:D7:AC:06:0F:0B:E1:C7:79:8E:4A:BD:C5:6C:74:23:45:B2:85
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01A178B364C5083A9B7456413F2481FFC7D2
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/rOLXrAYPC-HHeY5KvcVsdCNFsoU.roa
Signing time: Mon 26 Oct 2026 14:53:05 +0000
ROA not before: Mon 26 Oct 2026 14:53:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51173
IP address blocks: 37.203.48.0/24 maxlen: 24
37.203.49.0/24 maxlen: 24
37.203.50.0/24 maxlen: 24
37.203.51.0/24 maxlen: 24
37.203.52.0/24 maxlen: 24
37.203.53.0/24 maxlen: 24
89.106.136.0/24 maxlen: 24
89.106.137.0/24 maxlen: 24
89.106.139.0/24 maxlen: 24
89.106.140.0/24 maxlen: 24
89.106.141.0/24 maxlen: 24
89.106.142.0/24 maxlen: 24
89.106.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Nov 2026 14:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:b3:64:c5:08:3a:9b:74:56:41:3f:24:81:ff:c7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Oct 26 14:53:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ace2d7ac060f0be1c7798e4abdc56c742345b285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dd:79:90:c7:77:57:7b:35:6d:d4:30:36:4d:
78:db:82:6e:5c:fb:25:96:8d:43:f7:c2:9d:12:ce:
7f:b7:77:08:60:20:29:83:d3:2d:3f:85:00:7e:56:
66:c6:8c:77:6f:fc:ec:d5:92:6f:02:27:9a:94:77:
46:40:4d:ef:43:21:11:b3:7d:27:9c:fb:e1:f2:47:
84:4c:7a:a5:cf:c5:18:45:88:f2:ef:d2:6d:c5:c6:
24:f6:87:20:89:0f:d3:30:fc:40:0a:ad:ee:42:28:
36:26:c5:79:59:6f:f7:61:4e:85:93:be:06:a6:10:
87:c2:2a:f5:7b:06:aa:6a:de:54:40:0f:0c:1c:12:
cd:7d:10:29:89:24:1f:5e:e5:31:d3:c6:f7:ff:34:
81:af:ae:2b:03:87:e1:ae:6c:5f:ee:60:29:55:7c:
28:87:1d:cf:34:98:12:a7:32:72:0d:5c:bc:76:7a:
70:5f:b8:16:cc:e2:0b:9f:ef:37:02:e9:8d:96:6c:
2d:ea:01:82:2d:07:8c:25:8a:15:59:61:3b:28:b9:
fe:81:a0:ec:d1:ca:2a:f8:f4:ae:73:b6:e2:43:5d:
7b:be:7f:aa:e6:77:11:3a:e0:f8:4b:1d:9f:d6:24:
11:bf:d5:3a:2d:7c:a7:41:ca:96:01:f4:89:93:74:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E2:D7:AC:06:0F:0B:E1:C7:79:8E:4A:BD:C5:6C:74:23:45:B2:85
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/rOLXrAYPC-HHeY5KvcVsdCNFsoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.48.0-37.203.53.255
89.106.136.0/23
89.106.139.0-89.106.143.255
Signature Algorithm: sha256WithRSAEncryption
1b:42:9d:dc:8e:e8:43:7a:ab:13:42:4f:1a:b6:f8:02:58:e8:
f0:4c:7f:03:b1:b2:39:b9:57:65:c8:ca:21:3d:02:8f:7d:53:
d8:22:96:2f:8b:54:bf:cb:8a:bc:84:79:dc:77:93:a0:da:c9:
34:e8:83:0e:d8:50:a2:c4:8b:5c:80:0f:54:a6:2f:0c:42:19:
6b:74:e8:0d:c0:2e:85:85:75:87:1d:c2:8a:06:b4:62:d1:52:
b1:d4:61:18:4f:26:10:1d:89:bf:02:0f:4c:50:a0:e2:be:8e:
d8:e6:f0:c3:6a:55:1a:90:97:bf:34:74:ab:f1:2d:77:e1:4c:
10:1b:6a:35:c5:37:19:aa:a7:56:9a:6a:8b:04:f0:1a:a2:9f:
42:8e:c0:22:bc:6d:1c:4e:0d:c3:57:08:5b:98:88:0b:25:5f:
de:cb:83:93:5e:3f:94:b0:94:7f:98:76:b7:9f:9f:05:15:1f:
18:8b:7b:d8:2a:63:05:55:29:32:c7:6d:26:8e:ff:21:72:88:
c7:5d:f9:83:02:e2:60:92:2f:4e:60:5d:c5:74:dd:bb:e7:b6:
84:26:51:2a:5d:94:46:a4:e5:c4:5e:eb:b2:ee:bf:1f:88:b3:
86:93:cf:93:3a:f6:43:61:5b:a6:cb:b9:9d:19:52:a9:88:c8:
67:d5:f5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:45:22 2026 by rpki-client