Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/KouX5TbAvCqJk402fHmGq516TBs.roa
File: KouX5TbAvCqJk402fHmGq516TBs.roa (raw, json)
Hash identifier: qhhigSXmJHi3rlFwqLwNhGZbCESw+/qG2yJwN8RcF+g=
Subject key identifier: 2A:8B:97:E5:36:C0:BC:2A:89:93:8D:36:7C:79:86:AB:9D:7A:4C:1B
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A1061DAD78A8999E838289940078DB2EFE
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/KouX5TbAvCqJk402fHmGq516TBs.roa
Signing time: Sun 04 Oct 2026 08:52:50 +0000
ROA not before: Sun 04 Oct 2026 08:52:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 93.186.96.0/20 maxlen: 32
185.140.160.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 05 Oct 2026 07:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:1d:ad:78:a8:99:9e:83:82:89:94:00:78:db:2e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Oct 4 08:52:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a8b97e536c0bc2a89938d367c7986ab9d7a4c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:19:f1:eb:2c:7b:94:65:51:46:ce:24:90:
7a:75:a6:5c:b0:b7:54:fd:55:61:37:fb:44:24:4c:
de:3b:5a:29:64:6c:6a:a9:4f:a8:2c:13:09:19:61:
ce:36:ef:eb:ba:2c:29:9a:ce:d8:af:98:b4:10:02:
84:ea:ec:c9:59:7c:5f:45:26:4b:a8:1e:8d:b1:df:
40:74:13:1b:9a:f8:84:6d:c2:f7:93:2f:4a:f3:31:
9c:b5:f4:85:16:df:eb:0d:28:ff:a0:19:c8:6c:b8:
d6:a3:54:39:72:35:11:f0:7b:4b:92:82:9e:26:73:
7a:ca:d4:cf:4b:93:51:42:48:63:5f:d1:cf:ee:71:
68:7e:31:65:11:64:1d:7b:64:16:3a:c3:96:20:99:
cd:1c:57:a7:1e:71:7f:f2:77:5f:1f:32:13:9f:bf:
e0:f4:7e:bf:ef:9e:32:5c:cd:24:c1:22:28:83:ad:
c0:0c:2b:46:c7:e6:c7:a1:31:8f:0f:a6:c2:ba:58:
09:65:8e:ae:cf:cf:aa:96:e4:77:6d:6c:14:93:fc:
bd:b5:c1:cd:a3:34:df:b5:80:8f:be:a0:5e:b7:9b:
c9:25:9b:0b:ba:bc:d2:73:7f:e6:d6:5a:b6:ab:ca:
86:31:af:cc:bf:29:fe:0b:92:b4:7d:90:05:13:4a:
da:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8B:97:E5:36:C0:BC:2A:89:93:8D:36:7C:79:86:AB:9D:7A:4C:1B
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/KouX5TbAvCqJk402fHmGq516TBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.96.0/20
185.140.160.0/22
Signature Algorithm: sha256WithRSAEncryption
75:73:9b:fa:06:52:f8:25:d4:51:df:d5:ce:43:32:bf:00:24:
e8:92:8c:72:0e:d4:24:e4:b3:dd:6b:62:a0:14:59:6e:39:99:
2c:dc:66:1f:e2:27:37:27:c3:dd:1d:ac:9e:24:ba:3d:5d:a0:
90:f2:17:31:62:f2:2a:73:8f:15:2d:b0:ea:35:48:c3:c3:ac:
38:88:78:60:12:9b:46:17:e4:13:70:7c:54:1a:01:25:dc:ea:
ad:80:7c:52:f7:28:36:9a:a6:cf:7a:6b:e6:69:70:4f:ca:82:
4d:b9:69:8c:28:b1:cf:04:fc:a6:d5:23:c9:bb:90:7d:6e:b1:
ce:8f:1c:02:69:cb:04:17:25:70:66:bd:97:d3:50:fa:bb:28:
01:08:b3:f1:ac:f3:34:ad:05:ee:a5:31:e1:52:01:b3:ef:5d:
27:67:3e:c9:c7:d7:7a:74:34:40:b0:6a:b3:f4:fd:10:da:db:
b7:e8:d7:ec:bc:7f:ba:da:35:39:cf:f3:d4:33:d8:70:f3:60:
10:90:78:4d:31:39:6e:9c:03:a2:28:0a:b5:88:f9:5b:f6:de:
51:10:47:a2:15:4d:c0:cd:c4:ea:7b:25:d4:18:d1:df:62:d6:
35:4c:8c:7f:0a:10:52:bf:42:63:99:65:1d:9a:ea:38:1b:4e:
4f:4d:5c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:27:48 2026 by rpki-client