Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/FJCduZ5F_LNl1B68SNwAcaqcnVM.roa
File: FJCduZ5F_LNl1B68SNwAcaqcnVM.roa (raw, json)
Hash identifier: ik7VYECA7V9tZz9/6iTk6xsMHVkaLzTDiIFqRWej80U=
Subject key identifier: 14:90:9D:B9:9E:45:FC:B3:65:D4:1E:BC:48:DC:00:71:AA:9C:9D:53
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019C93DC3172EA3DA3D84A377E67E1DB9CC9
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/FJCduZ5F_LNl1B68SNwAcaqcnVM.roa
Signing time: Wed 25 Feb 2026 08:13:27 +0000
ROA not before: Wed 25 Feb 2026 08:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.66.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Mar 2026 20:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:dc:31:72:ea:3d:a3:d8:4a:37:7e:67:e1:db:9c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Feb 25 08:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14909db99e45fcb365d41ebc48dc0071aa9c9d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:bf:83:21:19:b9:f2:f7:6a:3a:18:ad:7b:
6e:e2:77:ea:1a:c9:8a:db:59:8b:35:20:74:fa:60:
8e:42:02:f5:aa:a8:80:39:01:fd:a9:8f:31:3a:80:
bb:29:80:ad:53:c1:1d:70:22:37:d9:24:fb:07:ab:
c6:f4:31:d4:89:98:dc:62:6a:8a:ff:51:d9:f1:1e:
00:12:92:9e:21:db:3d:54:e5:63:80:f2:da:7c:e4:
01:28:5b:4f:8c:cf:e7:b8:02:83:7a:9c:b9:e9:18:
d7:bf:b9:a3:eb:33:be:a8:3c:4d:02:bc:f7:33:36:
3b:57:43:12:95:2f:7f:ad:5a:e1:41:5c:85:9b:7b:
66:24:48:a1:5f:b6:50:d5:36:a2:6d:11:18:ba:f5:
50:82:18:14:5e:80:a7:b3:cc:75:1e:28:9d:88:07:
24:a2:73:d6:dd:59:58:e5:e0:15:8b:b1:6f:71:ec:
6a:62:34:0d:27:07:8b:b8:d5:de:eb:64:d3:22:1b:
81:04:e0:fb:78:2b:51:62:15:90:94:3e:44:03:60:
89:8f:ef:ee:2b:e2:c3:15:f9:1c:e2:bd:61:a2:0a:
b5:0a:b5:29:a0:d6:16:7d:45:52:9d:98:eb:6a:d9:
82:22:cb:e1:5a:39:ac:f5:92:7a:c5:68:d2:f6:59:
b7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:90:9D:B9:9E:45:FC:B3:65:D4:1E:BC:48:DC:00:71:AA:9C:9D:53
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/FJCduZ5F_LNl1B68SNwAcaqcnVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.55.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d6:1d:8d:04:c9:59:86:e3:03:67:89:86:ca:69:a8:d1:58:
bb:5a:f7:20:2d:52:b5:e5:04:e6:c8:4a:6a:77:d9:16:af:14:
fa:0b:48:f8:9a:d7:ba:52:d0:69:3d:2e:97:f0:96:f6:66:c6:
c1:31:fd:c9:7f:4b:3b:29:e1:bd:ed:fb:d2:d8:3c:dc:c4:30:
fc:50:cb:07:42:5c:48:20:1d:6d:39:21:0d:a0:42:ff:7c:ab:
68:ca:52:c5:96:22:b2:ea:1b:58:79:c0:13:7a:15:88:0f:79:
65:17:59:25:9c:60:00:d2:5e:f2:10:ea:a4:9f:9d:30:9b:31:
f1:60:14:dc:b1:d7:c1:21:52:79:00:2f:8b:df:d5:55:e6:e8:
92:4f:3f:04:11:76:c4:e2:18:0d:12:5d:a8:93:0a:b0:c2:fa:
7f:4b:8f:17:30:ce:7b:3b:55:d9:0e:27:83:b2:63:9c:21:22:
18:39:84:46:0b:91:65:cd:d6:65:7f:7b:64:8e:47:e2:e9:42:
d9:f7:75:98:ae:e5:a4:99:ef:3d:cf:29:70:54:69:f1:e4:ef:
2a:eb:d0:d0:b7:b9:cf:86:7c:da:ce:e0:c7:67:bc:65:03:ea:
8e:56:94:05:3d:30:df:a2:52:18:7d:66:b7:68:51:49:c8:f5:
20:06:b6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:56:22 2026 by rpki-client