Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/bCPDxwJHkuukIA5NrRhqsjUu02k.roa
File: bCPDxwJHkuukIA5NrRhqsjUu02k.roa (raw, json)
Hash identifier: sYz71sSkvkSaFDq0bif5odKO04RSPGtH9MdBekO6lAY=
Subject key identifier: 6C:23:C3:C7:02:47:92:EB:A4:20:0E:4D:AD:18:6A:B2:35:2E:D3:69
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019C8F0924E282078857655CED5FE4AF6AF6
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/bCPDxwJHkuukIA5NrRhqsjUu02k.roa
Signing time: Tue 24 Feb 2026 09:44:27 +0000
ROA not before: Tue 24 Feb 2026 09:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 109.122.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Mar 2026 20:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:09:24:e2:82:07:88:57:65:5c:ed:5f:e4:af:6a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Feb 24 09:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c23c3c7024792eba4200e4dad186ab2352ed369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2c:75:09:d1:4b:a1:26:d4:6b:05:6e:30:57:
51:88:65:81:5e:97:d3:93:ee:de:76:11:4c:08:f3:
cf:3e:1c:73:f3:b1:20:91:43:2b:a2:9e:4a:14:62:
ff:29:e9:5d:bb:76:86:45:e4:e9:4f:d0:06:1a:1e:
a4:8a:a2:87:ee:02:d2:0a:71:cc:8e:46:0a:bc:2f:
83:94:b9:57:71:d5:5d:e5:8d:a9:1a:37:b9:b4:4d:
de:d3:46:51:a9:81:ab:4c:44:80:10:5b:c3:21:01:
3f:27:39:ec:60:86:88:4c:f7:13:50:ba:77:01:4b:
52:12:4f:e1:00:c8:1c:67:ff:0d:88:91:ab:ab:b3:
45:1f:5d:84:18:98:d6:11:df:47:91:5a:df:7c:3e:
4e:7c:53:88:59:e7:2a:1d:bc:5e:5f:88:f8:16:47:
a0:08:52:97:f3:53:7a:85:9e:bc:03:f1:ab:b0:9d:
61:f0:d0:08:e8:98:d6:6c:f6:1b:73:ed:16:40:26:
b3:b3:61:7e:81:4e:c5:41:95:7f:7d:7f:1c:a1:12:
e9:30:1a:54:05:bb:b2:4b:bb:63:69:8c:0f:6b:89:
49:bd:b3:e5:bf:04:52:62:f6:cd:cf:8d:03:bd:f2:
c8:dc:8d:db:40:f8:bb:01:02:c2:15:d2:b3:39:25:
d0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:23:C3:C7:02:47:92:EB:A4:20:0E:4D:AD:18:6A:B2:35:2E:D3:69
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/bCPDxwJHkuukIA5NrRhqsjUu02k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.58.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d1:b3:ae:5e:31:10:43:05:f0:2e:e6:c0:8a:c0:84:9e:84:
e5:1b:cd:b6:c3:99:17:83:0d:a2:d5:13:65:a3:18:fb:d7:d9:
36:ed:e7:fa:af:ba:fe:85:76:53:28:97:a5:2b:e7:73:d5:c0:
74:af:67:61:28:5f:9d:f3:4b:68:e2:df:cd:b6:66:6f:03:3b:
36:71:08:9d:1e:62:c1:4a:04:5a:79:62:0b:4b:ad:d5:54:45:
ef:4f:83:25:f8:55:d6:7f:1e:10:c3:59:e0:a7:dd:f1:bd:9e:
ad:8f:9c:ad:68:94:0b:d2:03:2a:7f:92:76:01:f0:ab:a5:bf:
02:32:cd:98:15:55:86:9b:aa:d5:b6:eb:a2:28:c5:57:0f:35:
3b:53:7d:09:d1:56:3d:af:d0:f3:2c:f2:46:ea:6c:40:b4:33:
19:d3:aa:ea:5f:e1:2b:f7:12:2f:99:b8:e3:d6:ac:c3:a0:9f:
cb:0c:73:e7:f1:06:1c:4f:0b:c8:89:83:10:3d:24:a6:77:49:
2c:ce:ee:66:91:fa:ef:15:e8:de:88:26:50:26:4e:c9:24:29:
14:7c:00:7e:26:4e:52:04:8c:b2:7f:2a:b9:81:14:25:53:26:
ca:05:38:77:6f:b2:24:4a:ff:1a:5c:83:31:ff:3b:15:d6:2e:
9a:d9:23:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:33 2026 by rpki-client