Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/YmEL4_1bn9ADVCZamfyu9l4LfPs.roa
File: YmEL4_1bn9ADVCZamfyu9l4LfPs.roa (raw, json)
Hash identifier: gIlZZCxyDpxP3xCsiqs1ou7KZ4bGnZZXtTmDybNg2+I=
Subject key identifier: 62:61:0B:E3:FD:5B:9F:D0:03:54:26:5A:99:FC:AE:F6:5E:0B:7C:FB
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A1834E760824463161DA449239E15BD799
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/YmEL4_1bn9ADVCZamfyu9l4LfPs.roa
Signing time: Wed 28 Oct 2026 16:18:39 +0000
ROA not before: Wed 28 Oct 2026 16:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 185.7.242.0/24 maxlen: 24
185.81.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Nov 2026 12:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:4e:76:08:24:46:31:61:da:44:92:39:e1:5b:d7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Oct 28 16:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62610be3fd5b9fd00354265a99fcaef65e0b7cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:f8:ed:69:10:03:37:2e:b6:a0:32:75:12:
99:f6:1b:50:d0:aa:fe:d3:7a:94:fb:b7:4b:97:0e:
bf:76:78:10:55:1e:65:da:a8:b7:f1:19:ad:ac:7c:
73:bb:8d:01:8f:28:5c:22:a9:59:1f:4c:af:06:4d:
e5:c2:de:51:cf:72:0e:1f:1b:13:72:21:0c:ea:e9:
95:a4:57:9a:f9:0d:77:71:eb:90:2f:eb:80:f6:df:
4b:22:8f:0b:0f:5b:77:e6:81:04:72:3b:62:fa:68:
6e:ae:5c:ad:3f:45:41:6f:cc:7c:96:43:44:ad:7e:
d0:32:93:d4:b8:bd:fe:1c:ea:32:d3:d3:ca:fa:bb:
67:ce:03:a4:6e:31:59:78:0e:93:e8:9d:66:95:dc:
55:fa:6d:5d:65:7e:d6:66:84:77:5d:d4:26:49:b7:
cb:83:cc:13:d9:99:78:1b:f6:9b:68:26:38:16:15:
83:e0:cb:5a:9c:f5:73:89:e9:b4:30:13:5d:73:96:
c7:7e:1a:d1:b0:24:ff:d9:ea:46:71:49:b2:fd:7c:
ed:62:fd:d9:3a:af:71:d8:94:3c:7f:44:31:cf:de:
95:4e:55:9b:75:65:d7:8f:e0:2b:3d:11:bd:03:53:
01:e5:b7:17:29:93:90:19:aa:43:ea:6d:a3:90:72:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:61:0B:E3:FD:5B:9F:D0:03:54:26:5A:99:FC:AE:F6:5E:0B:7C:FB
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/YmEL4_1bn9ADVCZamfyu9l4LfPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.242.0/24
185.81.153.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:73:a6:17:61:6b:20:ac:b4:21:89:d6:d9:fb:99:b2:75:19:
5d:bd:30:95:9b:70:69:fa:42:fe:d3:b7:3f:c2:d1:e3:fc:e5:
d4:f6:0f:b6:fe:86:80:58:3a:ac:46:96:84:13:65:7d:ca:4b:
01:75:90:b2:bc:a8:40:e8:25:c3:76:2b:0c:e8:13:3d:e5:40:
fe:05:26:e5:d2:35:ca:57:d1:89:d8:77:99:20:7e:db:c0:e0:
47:c4:f7:23:e2:73:74:cc:bf:42:f8:7d:a0:6f:e1:d8:42:d1:
5c:e5:8b:66:d5:df:26:c3:ee:f9:3e:d1:2f:03:fd:b3:10:94:
53:0f:77:cf:f5:d3:19:65:1e:f7:1b:7b:49:e0:78:c6:e8:69:
23:5c:cd:bf:6c:85:23:5a:0c:4b:ae:2f:ae:bd:85:43:95:07:
99:bd:ed:b9:f8:a6:1f:80:71:ab:36:0d:34:b9:d3:aa:99:e0:
e4:1c:62:65:d5:4a:6d:76:52:35:57:ac:cb:70:4c:0b:6f:f6:
43:c5:b7:32:4d:d1:73:e0:ca:c2:fd:ea:a2:2e:77:bc:f1:f1:
b0:81:d7:1f:df:8f:2c:ce:bf:90:f9:f2:c6:ea:00:d0:4c:93:
47:6e:b8:90:2a:bc:d5:f5:c0:69:69:a0:df:f3:3b:e9:b2:0a:
40:84:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:25:54 2026 by rpki-client