Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/1-teoAgd2JZTg7DwCgMsV7qifVO8.roa
File:                     1-teoAgd2JZTg7DwCgMsV7qifVO8.roa (raw, json)
Hash identifier:          tSe2pOkDz7Vc7UkVbuHbsm4HHAkwlWNx0rR39Kzx14c=
Subject key identifier:   FA:D7:A8:02:07:76:25:94:E0:EC:3C:02:80:CB:15:EE:A8:9F:54:EF
Certificate issuer:       /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial:       01A0B3A31EE9F17BE8A11A2BC96DD390E1EF
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/1-teoAgd2JZTg7DwCgMsV7qifVO8.roa
Signing time:             Fri 18 Sep 2026 08:30:07 +0000
ROA not before:           Fri 18 Sep 2026 08:30:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205111
IP address blocks:        91.103.153.0/24 maxlen: 24
                          91.103.155.0/24 maxlen: 24
                          136.143.168.0/24 maxlen: 24
                          136.143.169.0/24 maxlen: 24
                          136.143.170.0/23 maxlen: 23
                          136.143.170.0/24 maxlen: 24
                          136.143.171.0/24 maxlen: 24
                          144.89.64.0/23 maxlen: 23
                          144.89.64.0/24 maxlen: 24
                          144.89.65.0/24 maxlen: 24
                          144.89.66.0/23 maxlen: 23
                          144.89.66.0/24 maxlen: 24
                          144.89.67.0/24 maxlen: 24
                          144.89.68.0/23 maxlen: 23
                          144.89.68.0/24 maxlen: 24
                          144.89.69.0/24 maxlen: 24
                          144.89.70.0/23 maxlen: 23
                          185.230.212.0/23 maxlen: 23
                          185.230.212.0/24 maxlen: 24
                          185.230.213.0/24 maxlen: 24
                          185.230.214.0/23 maxlen: 23
                          185.230.214.0/24 maxlen: 24
                          185.230.215.0/24 maxlen: 24
                          199.67.72.0/23 maxlen: 23
                          199.67.74.0/23 maxlen: 23
                          199.67.74.0/24 maxlen: 24
                          199.67.75.0/24 maxlen: 24
                          199.67.88.0/23 maxlen: 23
                          199.67.90.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 23 Sep 2026 12:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b3:a3:1e:e9:f1:7b:e8:a1:1a:2b:c9:6d:d3:90:e1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
        Validity
            Not Before: Sep 18 08:30:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fad7a80207762594e0ec3c0280cb15eea89f54ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8f:67:b6:67:b0:18:2f:9e:8e:0e:2b:cd:90:
                    e2:d1:99:34:0c:ad:8e:8d:e2:12:75:e3:3f:5c:fd:
                    5b:3e:9f:ef:eb:84:9b:ab:bd:11:50:3c:f0:5d:1c:
                    6a:92:8c:95:ab:29:6d:c3:90:7d:e1:32:26:b1:a2:
                    cc:e6:3e:f8:3a:7a:d2:87:01:a3:4f:5e:1e:a1:4b:
                    5e:ec:38:b0:f5:0d:f9:97:0c:dc:a8:81:17:cd:40:
                    a5:5b:cc:a7:db:af:bf:d6:85:9c:54:a4:81:82:25:
                    94:cf:aa:c6:57:3e:d2:f3:55:72:6d:91:a3:47:b3:
                    ab:cc:d4:a7:60:9a:08:29:ad:34:34:22:e6:12:82:
                    df:d0:36:82:de:c5:88:9a:77:06:39:a5:17:62:2f:
                    b2:63:27:26:5e:05:e4:f5:91:90:97:cf:bb:99:5b:
                    df:31:22:fc:3e:6f:51:3b:41:a5:3e:59:a3:59:59:
                    49:6e:4b:f2:af:d6:0c:93:42:83:1e:5a:1d:12:73:
                    06:a7:61:3c:bf:36:0b:cb:49:8c:4c:03:75:fe:e0:
                    39:8f:e6:04:5e:e3:c6:53:b3:dc:c6:ec:21:d8:a6:
                    c5:be:92:e1:bc:ab:ed:ae:e5:cc:b7:23:13:28:89:
                    e4:4e:0c:a9:2b:b7:95:0d:5d:89:0f:7c:3b:c8:89:
                    df:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D7:A8:02:07:76:25:94:E0:EC:3C:02:80:CB:15:EE:A8:9F:54:EF
            X509v3 Authority Key Identifier:
                keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/1-teoAgd2JZTg7DwCgMsV7qifVO8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.103.153.0/24
                  91.103.155.0/24
                  136.143.168.0/22
                  144.89.64.0/21
                  185.230.212.0/22
                  199.67.72.0/22
                  199.67.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:18:13:bf:c3:94:53:02:6b:5b:0e:ed:19:ed:1a:88:22:04:
         d2:7a:65:9d:16:6a:67:40:61:35:83:40:a9:66:bc:f8:0c:d0:
         81:9f:8f:d7:60:af:8b:74:20:7d:b7:d4:55:6b:af:38:44:05:
         e6:e8:1b:74:be:f8:0d:cf:ad:f7:bd:b2:cf:1a:f9:6e:09:47:
         d6:4f:eb:85:3f:fb:c2:71:3b:19:f5:4b:9d:ef:b3:6b:01:6b:
         73:3a:71:f2:f7:a5:16:86:f0:67:65:b0:bb:f0:17:61:13:44:
         7a:67:e3:4d:53:da:0e:43:de:32:81:ba:82:61:13:e7:8b:73:
         db:3b:66:25:76:86:78:39:b8:be:cb:f7:91:04:08:a1:63:15:
         a7:71:a1:fc:90:ff:7e:28:3e:88:b9:72:f5:9c:3a:af:7e:83:
         e8:35:28:fb:3c:09:59:39:f3:b8:74:e2:52:14:c3:92:da:2a:
         04:b2:d5:b5:34:c5:b9:02:65:bb:92:95:ec:68:73:de:e4:53:
         33:f3:cb:ec:bb:a8:90:70:a7:6b:51:c1:0b:9c:c2:13:44:66:
         44:a7:be:d3:68:d9:69:00:b7:9b:2d:d9:dc:e4:6f:53:74:cf:
         6f:67:6f:c0:74:3a:e9:d0:e0:d7:9a:58:d5:7a:89:76:9e:17:
         e9:b9:80:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:40:28 2026 by rpki-client