Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/TS5Ma-fovfefTgmZ-vCpYQsw9G8.roa
File: TS5Ma-fovfefTgmZ-vCpYQsw9G8.roa (raw, json)
Hash identifier: nFFEqbY8W939OQPhCLuCsc5Q4pBLQCDlrZw2XFs2kVo=
Subject key identifier: 4D:2E:4C:6B:E7:E8:BD:F7:9F:4E:09:99:FA:F0:A9:61:0B:30:F4:6F
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A0A1BE228A039DD1860A271802C7C79BF6
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/TS5Ma-fovfefTgmZ-vCpYQsw9G8.roa
Signing time: Mon 14 Sep 2026 21:06:27 +0000
ROA not before: Mon 14 Sep 2026 21:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209946
IP address blocks: 185.100.157.0/24 maxlen: 24
185.102.115.0/24 maxlen: 24
185.177.239.0/24 maxlen: 24
193.221.200.0/23 maxlen: 24
217.145.226.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 16:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:be:22:8a:03:9d:d1:86:0a:27:18:02:c7:c7:9b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Sep 14 21:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d2e4c6be7e8bdf79f4e0999faf0a9610b30f46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2d:9c:fe:d5:df:25:21:92:f2:15:fa:4e:ab:
4f:45:19:74:c2:0f:f9:7d:86:cb:ab:4d:58:f9:f7:
36:c2:c4:bb:c6:1c:c9:6e:16:96:f5:d0:5b:80:4c:
e4:07:1d:3e:f0:a8:5f:69:43:7e:27:9a:6e:e3:c6:
6e:39:e5:90:1b:74:43:bd:1d:07:0f:9a:4e:4f:6d:
0e:91:7d:7f:ed:13:74:4e:af:7b:ac:06:73:0e:0f:
3d:7e:ea:0c:ef:de:fc:65:9c:e1:ad:12:4c:5a:ab:
19:cf:ec:21:60:64:e7:0a:e7:f2:a3:93:ed:c4:7d:
01:4c:f8:45:3f:62:91:33:64:19:9e:bc:73:01:3c:
8a:e2:d5:ee:19:32:04:2e:ac:0d:85:09:09:f8:18:
3f:2b:7b:89:62:e4:76:d2:6a:57:c5:0e:8c:ea:b3:
fb:dc:a7:95:6e:c8:af:98:3f:75:c8:68:7a:09:0f:
a9:b1:81:81:f0:62:f4:09:1d:f4:b5:57:c9:74:79:
93:52:ca:3c:09:0c:d4:63:1b:e6:f9:95:61:06:e8:
c9:01:ce:ee:15:f9:84:d1:f6:03:10:58:79:53:02:
c5:9e:63:24:9b:c3:2f:2b:9e:73:44:94:e7:02:9f:
2c:3c:22:b0:d6:22:15:e9:e5:41:1c:2b:2a:bb:83:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2E:4C:6B:E7:E8:BD:F7:9F:4E:09:99:FA:F0:A9:61:0B:30:F4:6F
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/TS5Ma-fovfefTgmZ-vCpYQsw9G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.157.0/24
185.102.115.0/24
185.177.239.0/24
193.221.200.0/23
217.145.226.0/23
Signature Algorithm: sha256WithRSAEncryption
14:58:b8:c3:0f:a9:a9:bf:13:26:00:5f:4d:92:e9:4c:3b:dc:
e6:13:52:d3:97:30:c0:35:ed:6d:24:b3:ba:43:3a:80:c6:21:
3b:04:59:09:d8:52:3d:9a:6e:5a:7e:5b:df:fd:c9:77:82:f7:
f3:e8:2f:b8:f7:92:d7:e6:5d:40:a8:70:19:4f:da:b9:78:49:
ff:7a:44:6a:2d:b6:fc:9c:c4:48:d3:49:e4:70:b3:af:55:cc:
d9:a6:5b:39:2b:59:aa:f8:6d:0a:27:af:09:61:f8:7f:7d:50:
6f:7f:36:42:8b:f0:97:10:14:2d:42:7f:ce:88:f0:06:60:b2:
0b:7c:f1:68:3e:ac:61:0b:50:10:eb:ee:0a:61:71:ef:65:41:
00:e0:7a:29:df:f4:49:8a:7d:19:ec:ec:92:0e:b5:c9:91:9d:
a2:8a:21:88:78:ad:cc:27:2a:e7:ff:a2:6b:64:7d:a0:a8:b3:
24:5d:2b:22:41:29:58:1c:74:50:63:79:35:5f:a3:74:47:1c:
14:ef:98:d9:43:ad:74:27:6d:13:1e:43:98:82:b8:7c:71:a7:
23:f3:76:a9:ab:99:14:42:31:f6:dc:38:c1:2e:48:4a:4d:fc:
26:4a:f9:ee:ab:b0:2f:9e:ab:8f:9c:b4:7a:30:12:f1:7b:de:
dc:fa:2c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:02:23 2026 by rpki-client