Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TEyItSSVr0zcNei_rI_XKh4KYwo.roa
File: TEyItSSVr0zcNei_rI_XKh4KYwo.roa (raw, json)
Hash identifier: 9yokCYJXP4JVzPikUFGkGh2ChdAjMaAq5DhH8wvsI6o=
Subject key identifier: 4C:4C:88:B5:24:95:AF:4C:DC:35:E8:BF:AC:8F:D7:2A:1E:0A:63:0A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A087F2714A5517C0B37CEFEE084ECB2EB9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TEyItSSVr0zcNei_rI_XKh4KYwo.roa
Signing time: Wed 09 Sep 2026 20:53:27 +0000
ROA not before: Wed 09 Sep 2026 20:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55286
IP address blocks: 2a0e:15c6::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 21 Sep 2026 09:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:f2:71:4a:55:17:c0:b3:7c:ef:ee:08:4e:cb:2e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 9 20:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c4c88b52495af4cdc35e8bfac8fd72a1e0a630a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:07:38:ea:ca:31:1f:ce:e8:09:9d:5f:2a:07:
d1:f9:f3:44:0b:c4:dd:d8:e7:9a:e1:f5:4b:97:42:
1a:95:71:c2:42:95:58:30:7f:93:db:54:2b:57:25:
fe:53:10:c9:50:5a:cf:6a:af:48:4b:8d:f3:38:fa:
36:2d:0c:0e:31:8f:71:1d:0c:87:09:8d:3a:23:88:
9b:8d:0c:c0:77:b2:4f:a4:8b:f2:90:e0:82:c9:9a:
99:1c:e6:69:17:80:ca:02:ce:7c:c5:47:df:4d:b5:
0b:61:7e:08:4e:18:1e:84:84:35:ee:6f:ea:10:8b:
16:9d:29:e1:84:96:3e:e1:e3:73:82:ad:fd:07:09:
c6:be:2f:95:d0:cb:7b:c6:c2:62:66:5d:bb:59:a1:
2c:85:3c:43:f3:80:32:61:9a:00:1b:98:90:82:85:
5a:a3:f0:3e:b2:f3:14:ab:20:ac:ae:e4:1a:71:c4:
65:60:42:7b:5e:c5:48:90:fe:9e:96:4f:65:12:01:
30:0c:79:68:c2:15:3d:64:14:6c:09:ec:60:06:92:
a9:0d:ab:a8:7c:ed:00:68:55:70:6c:c7:33:3c:f5:
71:cf:49:c8:fa:3b:a2:96:51:99:0a:a9:db:6b:a8:
52:9d:84:c6:13:51:f6:61:e4:cf:ef:ac:26:6f:4f:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4C:88:B5:24:95:AF:4C:DC:35:E8:BF:AC:8F:D7:2A:1E:0A:63:0A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TEyItSSVr0zcNei_rI_XKh4KYwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:15c6::/32
Signature Algorithm: sha256WithRSAEncryption
83:93:87:87:e7:f5:e5:66:ae:05:df:fe:0f:79:2c:3c:07:b8:
0a:7a:95:a4:29:05:52:b4:f4:aa:41:01:8a:00:93:c8:78:2c:
99:f4:8d:62:26:8e:81:75:72:00:fb:e1:2e:a8:5b:98:9f:8f:
14:7e:b2:36:fc:c0:1c:ec:5f:2e:2d:0a:24:1c:3a:0b:b4:be:
73:c1:d9:87:40:5d:44:de:89:b1:ea:95:7e:f7:87:f4:25:63:
eb:5e:d1:f8:05:67:7b:cf:f7:74:d9:32:08:15:fe:44:c1:41:
c0:0c:eb:e9:0a:2d:93:14:cb:69:ac:75:b7:28:84:c4:f0:05:
17:29:d1:18:76:fc:47:ca:59:21:37:71:36:13:73:83:66:d6:
12:60:30:52:76:48:1f:15:f0:e4:1b:48:9d:34:d9:15:cd:4e:
b8:c9:69:24:69:ec:60:97:0a:3c:47:99:0a:d7:bb:62:65:7d:
60:85:b3:a8:96:7d:13:c4:84:c5:52:49:6e:5d:20:ae:5e:43:
90:d4:e0:46:0b:9c:63:4b:39:e7:f9:72:7e:0b:a2:10:01:5b:
a4:a8:ed:fa:2f:11:c7:d7:bc:e1:4f:67:70:56:05:6e:f9:2c:
53:69:93:c4:6e:d9:20:7e:c5:d0:e8:29:0a:0d:fa:cf:86:b0:
16:89:c3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:06:44 2026 by rpki-client