Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/J4wT63yaYO7wgyldprevYAD_G8Q.roa
File: J4wT63yaYO7wgyldprevYAD_G8Q.roa (raw, json)
Hash identifier: luK/5QL+n08Nr/n8y3PbejLi734kK+KYrvBoL1sEL4s=
Subject key identifier: 27:8C:13:EB:7C:9A:60:EE:F0:83:29:5D:A6:B7:AF:60:00:FF:1B:C4
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019D8068B9B7B67D1B15DAE4ACEFAB220708
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/J4wT63yaYO7wgyldprevYAD_G8Q.roa
Signing time: Sun 12 Apr 2026 06:37:20 +0000
ROA not before: Sun 12 Apr 2026 06:37:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 185.56.47.0/24 maxlen: 24
185.87.57.0/24 maxlen: 24
188.246.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Apr 2026 03:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:80:68:b9:b7:b6:7d:1b:15:da:e4:ac:ef:ab:22:07:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Apr 12 06:37:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=278c13eb7c9a60eef083295da6b7af6000ff1bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:4a:3b:8a:30:bd:67:c5:10:cd:90:3a:1c:
ff:0e:0a:b9:6a:42:b9:0c:77:98:74:05:12:89:5a:
79:e5:52:5a:0e:4b:27:cd:81:b3:a3:fc:34:6a:36:
dd:c2:23:29:1f:15:10:bb:89:de:35:9a:fd:f3:65:
0e:38:ac:7a:29:ca:44:79:dd:9b:ff:30:7a:89:b8:
56:42:a3:e8:6d:25:77:3d:3b:02:aa:a9:b9:cf:00:
28:aa:eb:95:de:7d:6d:d7:6d:67:3e:ec:54:7a:06:
00:3d:53:73:a6:91:70:ff:6a:24:47:d7:45:ff:6e:
09:ac:8b:e9:4d:73:f6:41:d2:76:c2:44:1b:11:8e:
f1:8c:69:ec:6b:ed:fe:29:88:ef:c9:df:99:b5:93:
03:b0:54:3e:1d:d1:1c:c2:d2:51:e1:7b:76:7a:7c:
a4:13:87:91:dc:b6:81:c5:86:ae:60:ee:e8:f4:c8:
d2:c3:07:8b:8c:f8:f0:bd:34:c9:cc:d9:f5:18:5a:
8d:e8:4a:6d:30:e0:b5:23:3a:05:e0:23:f3:94:9b:
e6:db:a5:2c:dc:31:a4:6f:0b:25:27:0d:56:a7:ae:
04:8f:94:0d:78:e0:b8:b4:97:bd:bb:9a:51:81:e6:
3e:42:28:cd:fa:b7:fb:59:2d:93:6b:4e:d4:87:cb:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8C:13:EB:7C:9A:60:EE:F0:83:29:5D:A6:B7:AF:60:00:FF:1B:C4
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/J4wT63yaYO7wgyldprevYAD_G8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.47.0/24
185.87.57.0/24
188.246.211.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c0:c3:1a:c6:74:41:ef:44:cb:10:51:40:fb:05:25:ec:73:
63:1c:67:af:b6:3f:e9:19:5c:01:cd:c0:41:52:96:81:c1:02:
f5:8a:b9:56:46:08:80:9a:25:56:15:aa:03:cf:53:c9:de:93:
e2:8d:17:4a:7c:bf:3d:bb:aa:b7:74:8d:da:66:44:ad:4b:ae:
27:2b:02:15:ed:7c:bb:fe:c8:5b:d4:8d:7e:09:0b:6e:97:9a:
95:17:00:e2:1b:a4:7d:ae:41:a7:aa:7f:f3:ed:c4:1a:b8:eb:
de:37:1f:c1:04:79:f2:17:3e:22:8c:f1:88:9b:a3:7f:5b:09:
bb:85:e6:91:f6:f8:5c:ab:14:78:f8:d7:a0:bf:55:8b:eb:1a:
f6:fe:99:45:fc:37:06:ba:90:46:ab:f8:5e:32:e9:e1:06:86:
69:9e:90:11:f4:51:bc:73:06:6a:54:c0:26:b1:80:bf:fd:89:
aa:ad:6b:0d:80:35:f9:d7:92:bc:26:f2:25:82:59:af:0c:f8:
1f:9c:49:40:6a:cd:38:1d:45:c9:7e:30:c3:5b:91:39:2c:20:
22:47:51:fd:ca:96:da:63:69:ff:5a:25:ab:1b:eb:16:b3:93:
7b:9d:6d:30:9b:97:12:9f:14:98:8a:1c:8d:1c:21:1e:5f:3c:
f6:eb:de:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:25:51 2026 by rpki-client