Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/TwY4w9W_772BKe9je1CBrtxFPmU.roa
File: TwY4w9W_772BKe9je1CBrtxFPmU.roa (raw, json)
Hash identifier: 6sF23tEpjzhUR1oSG4y6d7zZiRNrq/s0Rv3gd6PQQQc=
Subject key identifier: 4F:06:38:C3:D5:BF:EF:BD:81:29:EF:63:7B:50:81:AE:DC:45:3E:65
Certificate issuer: /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial: 01A07FC9658B3D08EA5F4BBDCA04B492C125
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/TwY4w9W_772BKe9je1CBrtxFPmU.roa
Signing time: Tue 08 Sep 2026 06:51:40 +0000
ROA not before: Tue 08 Sep 2026 06:51:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24958
IP address blocks: 37.200.112.0/21 maxlen: 22
93.91.16.0/20 maxlen: 21
109.73.112.0/20 maxlen: 21
109.73.112.0/24 maxlen: 24
176.65.64.0/21 maxlen: 22
185.10.12.0/22 maxlen: 23
213.129.64.0/19 maxlen: 20
213.129.84.0/24 maxlen: 24
2a00:1430::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 22 Sep 2026 10:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:c9:65:8b:3d:08:ea:5f:4b:bd:ca:04:b4:92:c1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
Validity
Not Before: Sep 8 06:51:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f0638c3d5bfefbd8129ef637b5081aedc453e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:46:25:72:ac:ef:fb:5b:0a:75:98:0d:23:
f7:a2:3c:cb:68:f1:75:0c:20:fd:08:0d:b8:38:29:
06:c8:68:a7:0f:0e:df:2a:4d:b2:4c:15:57:c1:fc:
5a:46:5b:a3:71:24:48:99:bb:43:c6:6b:ec:63:a2:
0f:32:fe:99:34:e2:c0:5f:d2:11:e7:a6:37:44:9a:
5a:e1:ac:76:c1:64:60:ff:c3:6f:a5:a0:d2:e7:9e:
e8:c5:45:3e:54:70:06:04:c8:40:3a:f7:bb:a5:b7:
07:42:35:a6:66:1b:ce:69:dd:57:6b:08:0c:69:aa:
96:7f:7e:28:90:db:c5:12:fe:f8:4a:10:65:0a:52:
9a:fe:85:da:a2:91:e6:dc:a4:1b:d9:d5:71:c1:0f:
b3:f8:ee:fb:f0:8d:5f:e5:e0:e5:bb:fd:92:8d:f6:
13:22:16:c5:f2:b2:6f:78:4b:c4:79:93:08:36:5d:
ee:c4:9b:5f:b3:2b:23:41:05:36:30:e0:61:72:21:
86:5d:fd:bd:d9:40:57:41:cc:de:ec:a1:f6:1e:b2:
2e:36:fb:a0:2c:4d:11:0a:30:9c:11:33:dd:4b:0c:
c1:42:57:96:f2:d8:0c:b3:35:6d:10:ad:3b:6b:76:
84:ad:cd:76:5e:c9:d6:2a:74:a6:84:bd:95:4e:5b:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:06:38:C3:D5:BF:EF:BD:81:29:EF:63:7B:50:81:AE:DC:45:3E:65
X509v3 Authority Key Identifier:
keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/TwY4w9W_772BKe9je1CBrtxFPmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.200.112.0/21
93.91.16.0/20
109.73.112.0/20
176.65.64.0/21
185.10.12.0/22
213.129.64.0/19
IPv6:
2a00:1430::/32
Signature Algorithm: sha256WithRSAEncryption
18:58:e1:24:28:1c:0f:f1:8e:3b:5f:95:b4:83:82:c6:e2:91:
33:b1:eb:f8:18:3a:e2:12:72:36:85:03:e4:20:af:d4:47:0c:
78:3b:71:7f:3b:7b:3e:88:e5:5c:56:cb:4d:4f:5c:e8:81:ba:
f8:87:b7:9c:90:e3:80:30:1a:83:e8:e0:e5:38:7c:67:52:7a:
a9:48:30:a0:70:a3:e5:ec:27:7b:f8:1e:00:bd:8b:ce:d2:ba:
ed:32:d7:fd:4c:e1:21:ae:99:35:f5:2d:dd:c6:03:e1:4e:38:
60:4e:30:99:de:53:fa:7f:75:54:40:1e:5d:b8:79:fb:70:2c:
25:8a:33:2b:45:6c:a0:65:9d:81:c1:9c:4a:87:60:2d:a1:8a:
5b:bd:c4:16:8f:8f:55:c3:80:16:40:a8:03:9a:b4:e9:71:54:
ad:01:f6:7b:41:41:60:06:1b:79:b1:36:27:a9:c5:6f:a1:8f:
df:fa:48:aa:ae:64:45:4b:ec:b4:df:20:e8:11:3c:d6:b2:8d:
d2:3c:b0:3e:a9:41:e2:7a:ea:28:a1:b9:1b:0c:86:c0:64:fb:
61:54:07:1e:32:82:29:c3:83:08:29:f0:14:11:ca:12:ad:6a:
1b:93:82:6c:df:27:e1:5e:eb:8e:94:37:aa:5d:34:65:4c:c6:
6b:14:4f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:09:55 2026 by rpki-client