Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mVRtjyklYchq-GXIDvXLtUFZeDw.roa
File: mVRtjyklYchq-GXIDvXLtUFZeDw.roa (raw, json)
Hash identifier: GjLG43IMyD/lJsszQpSm21Io5fK4Hpt8iaBZ1p0Stto=
Subject key identifier: 99:54:6D:8F:29:25:61:C8:6A:F8:65:C8:0E:F5:CB:B5:41:59:78:3C
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A105C5CA241E597BF64962B2634768D0C9
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mVRtjyklYchq-GXIDvXLtUFZeDw.roa
Signing time: Sun 04 Oct 2026 07:16:50 +0000
ROA not before: Sun 04 Oct 2026 07:16:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 147.90.24.0/23 maxlen: 24
147.90.28.0/24 maxlen: 24
147.90.33.0/24 maxlen: 24
147.90.37.0/24 maxlen: 24
147.90.47.0/24 maxlen: 24
147.90.65.0/24 maxlen: 24
158.173.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Oct 2026 09:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:c5:ca:24:1e:59:7b:f6:49:62:b2:63:47:68:d0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 4 07:16:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99546d8f292561c86af865c80ef5cbb54159783c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:de:44:be:50:9b:b7:8d:1b:ab:88:9e:0a:c7:
3a:03:05:6e:16:c8:fd:9a:68:bb:3f:3f:53:0d:00:
ac:21:3e:97:aa:2a:9d:28:11:69:be:b5:51:96:90:
f8:53:14:69:bb:8e:03:de:98:f5:24:ad:4e:08:44:
8c:6c:60:6c:93:2b:83:fc:39:0e:0b:84:34:0b:76:
3d:f8:aa:af:19:be:ad:c2:b3:c0:28:6d:be:d2:7e:
ba:21:8e:ae:b2:49:20:ff:b4:97:cb:65:eb:aa:51:
70:49:39:b9:94:74:47:d1:49:64:03:3a:cd:65:30:
30:39:65:52:97:2c:18:af:39:e0:c1:48:1f:68:2f:
67:56:0b:05:4a:13:26:f9:ec:60:76:79:21:23:f6:
5c:e4:ab:15:0d:2c:50:15:36:af:00:33:d4:13:b8:
e4:13:53:ca:3a:72:b5:8a:74:8a:9a:5a:17:da:ed:
f5:aa:31:9a:f1:e4:01:00:79:71:f5:bb:ca:41:5e:
1a:cd:b4:ea:b5:30:fd:28:0f:52:7d:55:2b:13:24:
d6:23:6f:4b:7f:33:3b:fe:ae:dd:e5:e7:23:43:7d:
13:1b:39:ad:70:73:d7:5f:97:e6:ac:fe:d1:5c:9f:
33:76:9f:23:62:95:d8:57:a1:a7:25:18:21:6d:9c:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:6D:8F:29:25:61:C8:6A:F8:65:C8:0E:F5:CB:B5:41:59:78:3C
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mVRtjyklYchq-GXIDvXLtUFZeDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.24.0/23
147.90.28.0/24
147.90.33.0/24
147.90.37.0/24
147.90.47.0/24
147.90.65.0/24
158.173.204.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:77:da:d0:cf:67:de:ea:bc:08:b4:45:69:b6:96:55:d8:5a:
34:24:e0:98:db:bd:a3:3e:bf:15:59:04:d2:0f:21:e4:fa:9c:
c1:c5:3c:86:bb:ec:c4:9d:79:50:50:64:d9:92:c0:c8:c9:56:
fb:77:71:77:cc:da:f9:61:df:cb:ef:52:c8:d4:d1:41:b4:ea:
2e:9c:3b:ab:f3:14:7b:50:9e:84:7e:3a:18:0e:fb:cf:b5:47:
0a:76:c1:31:50:e5:fb:a0:2d:a9:cf:69:1d:94:17:ad:4f:1d:
d2:89:1a:d4:d5:f3:2b:95:56:60:00:9e:2b:23:77:7f:51:25:
9a:83:f2:2d:3e:69:aa:19:f9:cf:48:6c:b8:04:e5:51:ea:47:
27:81:63:5b:72:fc:dc:07:d2:de:ee:08:43:bd:a5:fe:5d:5c:
65:6e:e3:9f:a9:d4:62:f9:4d:73:b2:dc:c6:cd:01:ce:21:21:
01:1c:50:7f:12:5d:79:83:ad:fd:31:01:de:ad:cd:d1:9a:45:
ba:87:ae:5b:c7:40:99:43:4b:04:0b:35:6d:66:c3:d5:cd:fe:
44:0f:c6:d3:47:8e:c0:8b:8a:a2:22:58:c3:47:a6:31:a0:7e:
8b:66:15:30:a3:59:50:b7:20:9f:17:80:be:e2:a9:00:c0:03:
29:07:72:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:49:23 2026 by rpki-client