Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/72Y4XviEoHhiA2hjit-jcKqb5yo.roa
File: 72Y4XviEoHhiA2hjit-jcKqb5yo.roa (raw, json)
Hash identifier: e/Uy4iHvfEeYoOnvQmWjEhI2iGZ7VhZwQElyRtT0+uU=
Subject key identifier: EF:66:38:5E:F8:84:A0:78:62:03:68:63:8A:DF:A3:70:AA:9B:E7:2A
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0AF009B2C1BA8C5A3EA9F33F312AD246E
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/72Y4XviEoHhiA2hjit-jcKqb5yo.roa
Signing time: Thu 17 Sep 2026 10:54:07 +0000
ROA not before: Thu 17 Sep 2026 10:54:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 109.66.70.0/24 maxlen: 24
109.66.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 01:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:00:9b:2c:1b:a8:c5:a3:ea:9f:33:f3:12:ad:24:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 17 10:54:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef66385ef884a078620368638adfa370aa9be72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:fd:40:5b:e7:47:03:e6:03:8d:a4:f5:76:
73:d2:74:3b:74:b4:ce:bb:71:99:ec:82:a8:88:76:
33:7f:6f:7a:30:01:2a:fe:a8:f6:c4:fc:d4:36:aa:
22:47:af:aa:c3:17:da:5f:17:ce:4e:4f:db:9c:19:
ff:c8:36:9c:69:73:00:66:63:3c:00:58:c5:3f:e3:
2b:ee:f3:8d:6f:4d:ce:ed:b3:26:14:54:ab:86:0f:
0f:b6:c2:ae:41:11:59:9e:7d:b4:48:f6:3a:ff:5c:
e0:8b:f6:e9:47:04:cf:33:a3:9f:02:aa:b9:82:fb:
19:15:99:08:8f:e2:b0:ce:0e:8c:20:b7:f4:2d:62:
7f:00:68:6f:cf:b2:2c:63:e7:43:5c:6f:92:98:69:
2b:d4:d9:66:22:c1:dc:59:a6:37:61:9e:1f:dd:db:
06:cb:cb:28:9a:2f:07:b8:53:68:9a:6b:d2:39:5a:
f0:41:7f:e0:38:c5:69:1d:44:b7:54:9d:4a:57:c7:
4a:4e:ac:f8:50:a3:b2:84:c9:7a:22:63:d2:c1:63:
ed:4d:87:be:9c:21:7e:70:fd:57:3a:42:09:e2:44:
bb:e4:c8:b5:fc:8d:31:9e:9f:3e:4c:7e:e7:88:9c:
c7:ca:53:a4:9a:f7:68:20:f6:c3:cc:b5:fb:e2:a7:
e0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:66:38:5E:F8:84:A0:78:62:03:68:63:8A:DF:A3:70:AA:9B:E7:2A
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/72Y4XviEoHhiA2hjit-jcKqb5yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.70.0/24
109.66.158.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:96:57:fd:90:a3:49:45:1e:23:48:0e:07:e9:d3:b1:d6:e1:
cc:bb:66:9b:32:98:5b:89:12:d0:31:be:7c:c7:6f:f0:44:2c:
56:81:14:8a:19:15:38:63:a0:98:1d:f4:b0:f4:dc:94:77:9b:
8a:53:41:fd:42:b2:f9:8b:7e:c7:3f:c9:26:32:95:de:69:02:
07:e3:82:f2:20:fa:e2:34:07:13:ab:f5:41:85:78:3a:8f:83:
95:11:1f:1f:ed:1a:f8:19:40:1d:cb:c2:d7:dd:41:ef:29:86:
f1:cf:95:0c:a6:e8:5b:e2:38:40:2d:f1:63:64:1a:78:af:68:
92:4a:00:7d:73:9e:49:6e:3e:25:38:70:da:1a:48:af:95:18:
50:67:ad:d5:0e:34:c8:ea:b6:da:ab:71:1f:de:c8:f6:92:ad:
0c:d1:84:0d:07:91:e2:7a:9a:47:e1:a8:21:fd:ab:db:a0:e7:
2d:ba:bc:c3:ec:3e:32:b2:6d:52:ef:fc:6c:19:6a:cc:5e:fc:
33:22:3c:31:5a:b8:55:23:bf:1c:60:e2:cf:3c:7d:f7:dd:02:
f6:f9:ec:aa:29:92:7a:55:ef:e9:72:ae:73:99:bc:0f:47:d8:
16:18:75:97:cd:d5:4c:0b:99:e8:65:97:79:8b:4f:8a:af:0f:
7e:4b:30:e9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCvAJssG6jFo+qfM/MSrSRuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTE3MTA1NDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjY2Mzg1ZWY4ODRhMDc4NjIwMzY4NjM4YWRmYTM3MGFhOWJlNzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIT9QFvnRwPmA42k9XZz0nQ7dLTO
u3GZ7IKoiHYzf296MAEq/qj2xPzUNqoiR6+qwxfaXxfOTk/bnBn/yDacaXMAZmM8
AFjFP+Mr7vONb03O7bMmFFSrhg8PtsKuQRFZnn20SPY6/1zgi/bpRwTPM6OfAqq5
gvsZFZkIj+Kwzg6MILf0LWJ/AGhvz7IsY+dDXG+SmGkr1NlmIsHcWaY3YZ4f3dsG
y8somi8HuFNommvSOVrwQX/gOMVpHUS3VJ1KV8dKTqz4UKOyhMl6ImPSwWPtTYe+
nCF+cP1XOkIJ4kS75Mi1/I0xnp8+TH7niJzHylOkmvdoIPbDzLX74qfgUwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO9mOF74hKB4YgNoY4rfo3Cqm+cqMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvNzJZNFh2aUVvSGhpQTJoaml0LWpjS3FiNXlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbUJGAwQA
bUKeMA0GCSqGSIb3DQEBCwUAA4IBAQBullf9kKNJRR4jSA4H6dOx1uHMu2abMphb
iRLQMb58x2/wRCxWgRSKGRU4Y6CYHfSw9NyUd5uKU0H9QrL5i37HP8kmMpXeaQIH
44LyIPriNAcTq/VBhXg6j4OVER8f7Rr4GUAdy8LX3UHvKYbxz5UMpuhb4jhALfFj
ZBp4r2iSSgB9c55Jbj4lOHDaGkivlRhQZ63VDjTI6rbaq3Ef3sj2kq0M0YQNB5Hi
eppH4agh/avboOcturzD7D4ysm1S7/xsGWrMXvwzIjwxWrhVI78cYOLPPH333QL2
+eyqKZJ6Ve/pcq5zmbwPR9gWGHWXzdVMC5noZZd5i0+Krw9+SzDp
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:52:34 2026 by rpki-client