Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/4il9DjL2kUR0ik1ID59Q5hTtQwc.roa
File: 4il9DjL2kUR0ik1ID59Q5hTtQwc.roa (raw, json)
Hash identifier: YFpPTVYrX7XxkEt64XW6qJvYThZfNCvu0LrjAx1rvJc=
Subject key identifier: E2:29:7D:0E:32:F6:91:44:74:8A:4D:48:0F:9F:50:E6:14:ED:43:07
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019D9550E6F32DF1B7611E82F3D7AB931FE5
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/4il9DjL2kUR0ik1ID59Q5hTtQwc.roa
Signing time: Thu 16 Apr 2026 08:03:20 +0000
ROA not before: Thu 16 Apr 2026 08:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 95.170.19.0/24 maxlen: 24
95.170.20.0/24 maxlen: 24
95.170.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Apr 2026 07:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:50:e6:f3:2d:f1:b7:61:1e:82:f3:d7:ab:93:1f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Apr 16 08:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2297d0e32f69144748a4d480f9f50e614ed4307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:0d:09:b8:8b:55:0f:40:5d:a6:5e:22:e2:
89:4c:c0:c6:89:c4:d9:b6:77:56:bf:a7:cc:b4:21:
4d:76:ed:23:36:b7:41:e8:fe:00:a4:0b:a6:01:16:
7b:7b:63:00:fb:d0:43:52:e0:c3:f9:a0:37:c4:5b:
81:cb:4a:30:ed:1e:ad:b4:99:70:cd:63:5d:9e:62:
f8:0b:d3:ad:1b:ff:3f:68:57:30:ae:3a:2e:61:a4:
0f:cb:b1:06:93:30:c1:30:4e:2b:25:b0:0a:df:02:
1b:5e:b9:1e:42:48:13:09:33:a9:d0:41:01:55:0e:
75:01:0a:7c:39:72:21:fc:bd:84:1a:22:f2:4c:7f:
6e:e8:01:f7:e6:b2:99:a5:42:d9:be:2a:22:58:f4:
c7:13:92:1f:fb:7f:9a:0c:53:7e:04:ad:cb:a8:60:
59:e6:da:e1:f5:9e:bb:db:70:5c:90:a0:72:ca:44:
db:9e:a0:5d:07:b8:2b:12:ed:24:5a:a1:41:58:35:
a3:7d:c9:f4:86:ef:7b:14:89:38:3d:98:61:c9:77:
fc:55:2a:f7:30:5c:ad:73:e5:a1:24:d2:60:23:1b:
fc:7f:7f:42:51:4c:8a:0c:db:bd:1d:05:05:8c:42:
5c:22:01:3e:76:6f:b2:3a:b5:62:4b:b5:f0:2b:48:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:29:7D:0E:32:F6:91:44:74:8A:4D:48:0F:9F:50:E6:14:ED:43:07
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/4il9DjL2kUR0ik1ID59Q5hTtQwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.19.0-95.170.20.255
95.170.27.0/24
Signature Algorithm: sha256WithRSAEncryption
52:34:ce:3a:b4:41:30:28:5a:d3:bc:67:9d:c7:d0:81:1e:a8:
73:a6:02:f0:b6:83:9e:c7:b6:7a:87:2f:82:87:57:e2:52:ad:
4c:a7:8f:f2:77:1a:be:b4:1a:c9:72:c8:a0:0d:dd:d3:3e:5e:
83:27:6c:f8:4d:b6:f7:8e:8f:55:b4:d7:e6:fa:38:65:1d:a4:
88:b2:46:00:f1:04:54:8b:27:57:f7:ea:6b:5d:16:17:71:6f:
46:ef:10:c5:13:2c:c7:02:d9:23:74:cf:3a:25:b0:19:56:80:
00:14:03:8f:0f:66:83:f0:36:41:e5:51:f5:81:bc:29:09:f9:
18:74:c7:20:35:7b:6e:a8:ef:e0:a8:0d:09:56:25:7a:34:5b:
c6:e1:d6:1d:a8:a8:74:e0:74:73:ea:6f:8d:17:02:2a:16:e8:
e4:5b:51:87:d3:f0:9f:81:46:79:b9:58:43:ea:fe:c6:ac:e9:
82:75:9f:4a:bc:d1:5b:97:07:80:01:2c:b5:22:a9:e3:f3:cb:
a2:f2:c8:77:6a:11:3c:e4:42:32:b6:d9:74:3f:a8:ea:48:dd:
ef:4b:1e:a5:ed:0c:e0:91:01:cd:cb:d8:cb:88:8a:a7:ee:b4:
14:67:38:63:cf:4b:fd:ce:47:80:f2:47:f7:b0:fa:56:23:cb:
fc:17:4e:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:13 2026 by rpki-client