Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/f4Wl9qwvaKg_qqi6ViXnKUTgiTs.roa
File: f4Wl9qwvaKg_qqi6ViXnKUTgiTs.roa (raw, json)
Hash identifier: yvTlpGrkvHfexxX/TOPAXGzKQ6ZNjD5cfuV96QadSy8=
Subject key identifier: 7F:85:A5:F6:AC:2F:68:A8:3F:AA:A8:BA:56:25:E7:29:44:E0:89:3B
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D73AC898378F25B878C56DA2178ED169C
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/f4Wl9qwvaKg_qqi6ViXnKUTgiTs.roa
Signing time: Thu 09 Apr 2026 19:16:20 +0000
ROA not before: Thu 09 Apr 2026 19:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215290
IP address blocks: 2a0d:b846::/32 maxlen: 32
2a11:b4c1::/32 maxlen: 32
2a11:e2c1::/32 maxlen: 32
2a12:2805::/32 maxlen: 32
2a12:8786::/32 maxlen: 32
2a12:a502::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 17 Apr 2026 11:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:ac:89:83:78:f2:5b:87:8c:56:da:21:78:ed:16:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 9 19:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f85a5f6ac2f68a83faaa8ba5625e72944e0893b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:22:4d:1f:d6:17:bb:42:b5:c9:82:46:c5:
c9:36:25:14:e3:c1:45:4a:04:08:89:01:b7:eb:5d:
6d:09:ca:47:89:cb:9e:23:9e:b0:4e:b8:99:82:87:
6e:c3:0e:51:c0:5c:fa:af:c7:0a:43:50:93:32:60:
88:73:a0:30:fb:65:06:b7:c6:0f:32:ea:ef:46:e2:
3b:aa:31:9d:26:6d:da:90:f4:d6:fe:f7:34:80:9d:
1f:44:a0:f1:02:06:a4:62:1a:cd:38:e5:4a:12:4b:
b5:0f:53:ca:4d:5e:ef:08:46:88:e1:fa:7c:f8:e5:
4b:fc:98:c9:af:67:46:34:1e:33:9d:a0:3f:49:ab:
1e:47:82:36:91:fb:49:d0:e3:32:96:81:ea:f3:ad:
44:06:87:fc:9f:de:8e:04:fd:e9:9e:62:a0:a8:df:
f9:d0:1f:b6:a5:70:b6:1d:eb:d0:0f:ac:e6:4d:7f:
b2:4b:10:34:06:9c:ed:e0:d9:bd:e2:15:29:96:c6:
59:a1:b5:a2:73:77:d8:66:60:f9:6c:8f:8c:ac:12:
2a:db:82:0e:00:2a:ce:65:76:ae:d3:64:43:dd:f5:
cb:81:e5:6c:62:4e:13:8d:57:39:d8:fc:81:de:74:
86:8d:10:93:15:8a:ff:e9:32:e3:fe:1d:e6:9e:da:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:85:A5:F6:AC:2F:68:A8:3F:AA:A8:BA:56:25:E7:29:44:E0:89:3B
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/f4Wl9qwvaKg_qqi6ViXnKUTgiTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b846::/32
2a11:b4c1::/32
2a11:e2c1::/32
2a12:2805::/32
2a12:8786::/32
2a12:a502::/32
Signature Algorithm: sha256WithRSAEncryption
39:7e:10:92:6c:10:ea:ad:3a:69:36:bc:22:df:9b:e9:42:fb:
17:f4:c7:ac:eb:eb:cf:4d:76:54:77:a6:64:5e:2f:34:08:ea:
4b:40:c7:2f:9d:2e:12:de:4a:2b:db:f1:dd:55:91:83:f1:71:
1c:d6:21:d1:70:90:c6:db:7d:8e:56:e3:13:0f:b4:ed:c1:ab:
a9:72:7b:bd:fa:3b:b2:ba:cc:4c:0c:c9:33:1a:e0:bd:73:eb:
8c:e8:09:5e:c0:1d:1b:e8:e9:68:c8:a7:b9:e6:f4:3f:e2:11:
7b:8a:3d:b9:83:44:ba:f8:0b:8e:24:ae:3e:e2:0b:26:1c:ca:
46:73:af:f2:15:88:19:12:1d:f6:9e:ab:48:4a:28:98:60:5f:
1f:74:d5:d9:c7:92:a1:65:23:86:50:f9:77:21:34:4e:fb:58:
9a:55:be:9f:04:6a:90:12:f8:30:db:ed:38:7e:d6:9a:e3:70:
f9:34:6e:45:6e:86:93:c1:ea:12:d7:51:63:3e:93:4d:ff:c2:
cc:a5:c2:70:6b:23:fb:9e:0d:45:dc:52:f4:d7:82:32:62:34:
4b:b5:eb:40:6b:6b:80:28:d4:68:86:c2:07:53:d8:80:ec:95:
40:ae:ca:33:29:41:8b:4b:73:c0:23:5b:e2:02:68:80:ec:f4:
37:ba:c3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:26:37 2026 by rpki-client