Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/FJnX1ULc1x3srU3Ky4SCqHzb_2U.roa
File: FJnX1ULc1x3srU3Ky4SCqHzb_2U.roa (raw, json)
Hash identifier: 5mPinSDj7ixxB48QK9dIV6kd9OfTg2pTDGe3iLuP8AY=
Subject key identifier: 14:99:D7:D5:42:DC:D7:1D:EC:AD:4D:CA:CB:84:82:A8:7C:DB:FF:65
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 019B797EBD65B3F0F235A3EFEAC508F9C85E
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/FJnX1ULc1x3srU3Ky4SCqHzb_2U.roa
Signing time: Thu 01 Jan 2026 12:18:27 +0000
ROA not before: Thu 01 Jan 2026 12:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36892
IP address blocks: 62.56.138.0/24 maxlen: 24
81.199.14.0/24 maxlen: 24
81.199.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jan 2026 09:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:bd:65:b3:f0:f2:35:a3:ef:ea:c5:08:f9:c8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 1 12:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1499d7d542dcd71decad4dcacb8482a87cdbff65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:58:f0:1f:48:c9:9a:7a:c6:86:8f:3a:c4:
50:f9:c2:a8:d2:b7:6d:da:89:e6:fc:c9:a8:c7:15:
3a:12:b5:1b:d6:6c:8e:c6:94:f8:23:49:fa:b7:f0:
af:05:df:40:8d:e0:02:7c:bb:45:03:ef:85:f0:8e:
c4:f0:14:60:35:7b:a3:22:0c:ab:bf:90:bb:aa:48:
09:6e:30:72:58:71:01:aa:50:4e:ce:39:1e:58:71:
10:0e:95:73:94:f5:80:b5:7c:33:2f:c5:a5:b0:ee:
9d:01:bc:06:e0:cc:fc:28:57:42:4d:fd:cf:b7:71:
e8:06:e9:a5:79:b4:76:f3:3f:2d:a2:f9:4b:61:08:
d0:20:c8:f7:25:da:43:d7:5e:1e:bb:8a:9e:fb:3b:
86:b9:ad:a6:b0:1e:e5:fe:12:b6:7a:c7:f4:51:b3:
00:8a:7d:52:c7:95:6e:a7:d6:04:10:e3:be:2b:30:
b1:a8:2f:26:2e:ca:3e:0e:89:03:86:01:43:45:29:
f4:c7:de:62:d9:57:6f:17:e1:ac:89:ba:00:1e:f2:
27:35:64:09:4c:05:11:1d:9e:28:33:1b:09:ea:b4:
5b:c8:e6:63:28:fc:4b:56:2f:df:cf:41:5c:7d:da:
18:a0:ce:97:23:be:80:c2:50:a9:c1:7c:59:f8:37:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:99:D7:D5:42:DC:D7:1D:EC:AD:4D:CA:CB:84:82:A8:7C:DB:FF:65
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/FJnX1ULc1x3srU3Ky4SCqHzb_2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.138.0/24
81.199.14.0/24
81.199.89.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9f:b7:e9:a5:f8:23:7b:29:c2:2a:4a:18:90:31:1c:e4:47:
a7:17:2e:d5:1e:3e:88:08:23:9e:28:5a:47:8d:ae:d6:e6:4f:
a0:94:bd:42:a5:d5:cb:82:41:d0:ce:9b:55:d3:72:b2:8c:b8:
a1:13:31:69:7e:d0:f7:2c:7f:ef:4d:e4:68:4d:42:a3:34:71:
87:2d:ab:5c:a5:2d:ad:7f:2c:25:1f:ef:f6:bc:a5:55:44:98:
fb:d5:4b:9d:ee:b5:1b:d1:a1:e2:b6:7c:94:66:6e:0f:a5:f4:
9a:8b:db:9d:42:bd:26:b5:b0:95:46:e5:ec:99:af:fb:ed:71:
51:cd:e3:a5:72:21:5c:1a:ac:d4:76:b0:86:20:f9:87:df:90:
b3:a1:09:59:22:3f:94:11:4f:06:8e:f5:54:36:81:17:da:00:
6a:52:26:9a:ba:7e:b8:56:51:a5:fa:e7:8c:a3:a8:44:a5:3d:
2a:6a:c8:f0:12:d6:51:b2:de:0d:01:11:7c:62:de:b4:d9:14:
6b:6f:b2:0f:da:43:c4:6d:bf:46:4a:6c:ea:c9:a3:a1:d7:e8:
68:0b:6a:05:8e:38:7f:3a:ef:c0:bd:f6:fe:b7:29:6b:bf:e5:
42:5c:d3:94:a0:cd:26:4a:3a:49:95:51:d7:cf:66:6a:2d:6f:
8c:f7:88:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:21:56 2026 by rpki-client