Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ThQ-sKOcNbVBrkBzwyqB_ols5gw.roa
File: ThQ-sKOcNbVBrkBzwyqB_ols5gw.roa (raw, json)
Hash identifier: 7p50l0p5fPNs8s6ePizhS8xe/49RMHeP+5ZmjobKoHs=
Subject key identifier: 4E:14:3E:B0:A3:9C:35:B5:41:AE:40:73:C3:2A:81:FE:89:6C:E6:0C
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019FA2209E0325CCC923D9CB3BD7FEF5613A
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ThQ-sKOcNbVBrkBzwyqB_ols5gw.roa
Signing time: Mon 27 Jul 2026 05:51:14 +0000
ROA not before: Mon 27 Jul 2026 05:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 89.21.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jul 2026 15:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:20:9e:03:25:cc:c9:23:d9:cb:3b:d7:fe:f5:61:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 27 05:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e143eb0a39c35b541ae4073c32a81fe896ce60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4a:5c:22:17:90:30:ef:08:80:5b:06:a6:ee:
a3:88:dc:30:e5:be:b0:10:83:1b:ff:48:af:d0:f5:
0e:d7:bd:14:f5:a6:ae:53:c3:00:67:a8:cd:80:28:
ab:ad:dd:23:98:6e:48:34:14:3a:fa:49:cd:53:45:
30:09:7b:17:90:d0:1f:0d:1f:d7:7e:45:02:0a:a5:
20:d4:07:60:4c:10:a4:05:94:07:22:43:04:db:01:
9b:93:ae:c7:0b:62:b3:b6:8b:f5:c3:fc:46:20:74:
ef:fd:a3:b4:55:c2:05:79:e5:c7:d4:af:c7:cb:80:
06:39:e7:03:9f:96:dc:6b:85:97:2f:92:26:78:45:
15:ee:7b:1c:82:51:4e:8a:e9:ef:fd:2a:e4:b7:a8:
d0:30:98:0a:8e:77:4d:4b:ab:45:c0:dc:45:32:17:
9d:14:22:0e:f7:6c:68:ab:18:f9:9b:d1:25:d3:93:
6a:6e:cf:d2:a9:a3:35:be:8b:06:5c:f4:7a:a6:47:
b4:b1:1d:07:fd:ca:73:88:09:1e:b0:35:5c:44:46:
7a:75:c5:a3:cd:49:98:72:6a:32:98:3c:b9:fc:ef:
29:44:9c:24:b2:67:b8:bd:b1:b7:ad:18:54:cc:cb:
2c:64:17:4e:d4:95:d7:70:c8:82:b9:03:cc:00:43:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:14:3E:B0:A3:9C:35:B5:41:AE:40:73:C3:2A:81:FE:89:6C:E6:0C
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ThQ-sKOcNbVBrkBzwyqB_ols5gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.84.0/24
Signature Algorithm: sha256WithRSAEncryption
84:2a:31:78:2e:39:d9:d2:12:0f:60:8f:af:80:3c:bb:18:c6:
4d:28:a5:e5:ef:d9:ea:4f:07:50:82:3d:78:04:b0:e0:53:2a:
a6:9d:ed:fe:da:c4:eb:46:a1:0a:c7:4c:a3:7d:e4:69:cb:f3:
57:98:91:b7:a9:2f:aa:df:8d:ac:57:17:f1:50:9d:ce:ae:4a:
fd:ce:d6:03:be:07:43:ca:21:b5:18:33:3d:7e:26:0d:3d:f0:
92:fd:d0:aa:51:0a:43:c8:ae:77:fa:76:b2:38:f2:34:77:d6:
f9:f7:47:b8:8b:05:bb:70:b5:54:05:a3:30:90:84:0a:11:17:
18:92:96:b8:6f:70:dc:f8:e2:f6:0c:fb:e1:6b:0f:0f:a6:bf:
e8:df:69:4c:b7:4e:8a:5c:12:0f:11:87:12:c2:39:0c:88:e6:
56:bf:5e:d3:93:7e:18:21:db:9e:8a:0c:97:61:92:2c:e3:c0:
b8:e7:e6:c3:9c:aa:71:55:7b:c6:22:43:b8:39:c0:03:08:d1:
a1:e7:43:66:6e:80:1c:5a:3d:8c:9d:e5:e2:07:61:97:de:94:
07:b4:19:91:6d:7b:fe:24:7d:85:c6:f9:d6:98:d6:b4:57:eb:
1d:5d:46:8c:4b:11:cd:f9:4d:74:fd:e8:29:6f:83:e8:67:12:
29:a3:14:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:33:58 2026 by rpki-client