Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/FfvxYL4A2V3VqIQLED8CAdYGCyc.roa
File: FfvxYL4A2V3VqIQLED8CAdYGCyc.roa (raw, json)
Hash identifier: adl4o+HhMvp4fUlZqPn+UWMOc4xx4/lZDkgLwyz6kgw=
Subject key identifier: 15:FB:F1:60:BE:00:D9:5D:D5:A8:84:0B:10:3F:02:01:D6:06:0B:27
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01A19AF2FDE65885EA061D2D40F4B46D516D
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/FfvxYL4A2V3VqIQLED8CAdYGCyc.roa
Signing time: Mon 02 Nov 2026 06:29:38 +0000
ROA not before: Mon 02 Nov 2026 06:29:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.147.121.0/24 maxlen: 24
212.116.228.0/23 maxlen: 23
212.116.228.0/24 maxlen: 24
212.116.229.0/24 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.243.0/24 maxlen: 24
212.116.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Nov 2026 19:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9a:f2:fd:e6:58:85:ea:06:1d:2d:40:f4:b4:6d:51:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Nov 2 06:29:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15fbf160be00d95dd5a8840b103f0201d6060b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:64:1b:8f:e9:26:08:7a:b0:68:af:7b:66:
4b:64:46:93:f3:f7:55:1b:32:07:89:d7:35:cd:35:
bf:03:fc:0f:30:b9:96:45:0d:26:67:52:76:7f:04:
8d:73:7e:fb:df:9e:49:dd:38:53:4a:5b:1e:2b:da:
1f:fb:ee:fe:0b:b0:dc:32:5a:41:df:a0:65:c4:f6:
64:07:dd:53:c9:9e:59:31:b0:b2:0b:86:21:45:e2:
e2:ed:ca:73:0e:25:8c:f8:15:e7:58:5e:9e:a1:b7:
3a:8c:b8:c1:08:ce:41:da:09:26:81:2d:c9:de:ec:
ff:e1:87:2b:96:0f:9e:44:46:31:2c:fa:87:10:76:
c1:39:f1:a1:da:e1:8f:31:43:95:da:6c:b5:51:72:
e0:b0:d3:99:5d:78:53:69:02:2a:6c:4d:c5:5e:17:
b2:58:df:31:c1:b7:e4:92:3e:32:9c:0f:cb:54:84:
f5:a5:13:f4:d1:84:ff:48:aa:6e:29:c1:59:b3:aa:
4c:25:04:23:06:e7:aa:0a:59:39:7c:28:2d:a3:d0:
82:0f:fb:1e:b1:0c:7e:84:4c:0d:f8:f8:3e:05:9a:
08:20:01:cb:7c:a0:ca:e2:4b:de:70:18:c7:2c:5c:
0d:5b:83:98:08:48:b8:86:3a:99:42:05:c2:02:1e:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FB:F1:60:BE:00:D9:5D:D5:A8:84:0B:10:3F:02:01:D6:06:0B:27
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/FfvxYL4A2V3VqIQLED8CAdYGCyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.121.0/24
212.116.228.0/23
212.116.238.0/23
212.116.243.0/24
212.116.245.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:97:30:56:99:4f:64:db:34:72:61:bd:84:ac:64:f6:6b:b1:
ae:89:dc:46:cb:f7:f0:c7:20:fc:ad:7c:84:42:bb:76:2a:09:
a6:77:e1:e4:15:56:c0:63:ee:e7:59:a7:bf:ac:c6:00:f9:af:
3d:e6:cb:e0:e2:59:38:5d:5e:ac:70:36:93:ff:84:90:65:4f:
9d:75:05:c0:6d:ed:ff:50:01:bc:52:05:eb:8c:b0:a2:0c:9a:
c3:1b:2c:78:a8:4e:00:70:43:b7:aa:ef:16:25:26:a5:ea:75:
39:43:b1:70:eb:e8:ae:ab:38:6b:21:6e:e5:f4:a6:f7:e7:46:
92:bb:1d:fe:50:28:69:57:3e:f9:25:fb:f3:d0:3c:56:c4:5a:
c4:56:d7:55:ee:16:70:27:fd:3d:ef:4c:56:83:7e:32:77:cd:
6b:07:bd:f8:70:f2:38:b9:62:bc:53:f5:24:42:2d:52:59:21:
7c:e0:ac:ce:04:2d:e4:a3:c2:c6:56:c7:cb:51:c3:68:de:f3:
3c:57:f2:3b:ac:cd:c0:ee:3a:4c:3f:90:a2:ae:79:dc:23:6d:
4d:b6:03:da:c0:7c:82:76:84:ec:79:52:a0:02:83:ee:80:05:
ae:b6:b8:d5:fa:7e:96:cb:6a:7e:2b:bf:12:6a:76:f5:3c:8f:
0f:b4:fe:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 08:37:22 2026 by rpki-client