Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/VWsWyAjpERJfrZ2g4I5jQh3qNkI.roa
File: VWsWyAjpERJfrZ2g4I5jQh3qNkI.roa (raw, json)
Hash identifier: grm0wDjmetYXy317dAMerpu+VQXPKmwc2d8e++oooEY=
Subject key identifier: 55:6B:16:C8:08:E9:11:12:5F:AD:9D:A0:E0:8E:63:42:1D:EA:36:42
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019C35845E8A3DB55C611871146E1091007A
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/VWsWyAjpERJfrZ2g4I5jQh3qNkI.roa
Signing time: Sat 07 Feb 2026 00:33:13 +0000
ROA not before: Sat 07 Feb 2026 00:33:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 158.94.220.0/24 maxlen: 24
158.94.221.0/24 maxlen: 24
2a01:fb01::/32 maxlen: 64
2a01:fb04::/32 maxlen: 64
2a01:fb07::/32 maxlen: 64
Validation: Failed, certificate revoked on Mon 02 Mar 2026 04:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:35:84:5e:8a:3d:b5:5c:61:18:71:14:6e:10:91:00:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Feb 7 00:33:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=556b16c808e911125fad9da0e08e63421dea3642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:d2:7c:5b:f3:4a:ee:94:27:31:75:43:2d:
d3:15:86:e3:e2:8c:3f:82:08:5d:71:62:05:b3:b5:
58:24:62:c8:c0:cc:34:e1:a9:b3:79:7e:21:59:60:
50:c6:dd:27:97:d4:22:3b:e7:6c:1e:6e:ee:73:26:
7c:33:2d:6d:3c:7b:c9:5b:6e:3b:94:dd:fd:07:2b:
fc:58:ea:a9:36:4a:49:67:c1:56:4c:85:b6:20:ee:
d6:1c:56:ba:5c:3e:9e:ad:58:41:6e:b8:15:fa:f5:
e4:09:17:15:a9:2d:b5:08:70:10:67:5e:8b:87:91:
21:d7:9e:c4:7b:24:dd:21:2c:52:e0:4f:50:4b:b6:
d2:3e:66:70:0c:f1:0b:15:bd:34:8e:88:54:32:1e:
00:21:2a:ac:63:a6:75:d5:fe:0c:6f:1f:b3:bb:62:
ee:67:26:1b:51:f4:7a:26:82:40:b8:f3:b9:16:45:
57:80:df:1b:b5:fe:c5:a2:49:71:d5:10:13:b8:95:
cc:a8:2b:97:48:7f:27:3e:d2:28:09:2e:51:4f:e1:
63:55:d9:fa:c9:4f:e7:8a:95:df:5d:62:b2:21:4a:
d3:e3:13:4a:6a:33:b7:53:01:19:2e:2c:e2:71:db:
0f:f4:b2:98:ed:16:72:6b:29:9d:82:02:25:f3:a2:
9f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6B:16:C8:08:E9:11:12:5F:AD:9D:A0:E0:8E:63:42:1D:EA:36:42
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/VWsWyAjpERJfrZ2g4I5jQh3qNkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.220.0/23
IPv6:
2a01:fb01::/32
2a01:fb04::/32
2a01:fb07::/32
Signature Algorithm: sha256WithRSAEncryption
08:3d:63:d6:f2:f4:9f:1f:d5:75:7b:a6:96:c2:97:18:fb:e3:
10:66:38:19:32:06:9c:4b:e6:90:ea:57:76:12:07:28:9b:44:
87:23:0a:4c:e8:4d:ac:2d:f7:15:45:6d:ca:63:37:7a:c6:30:
a0:07:9c:a3:e8:74:36:c9:ca:1b:ad:76:d9:00:da:9b:7d:32:
86:9a:5d:21:b8:04:1f:d9:8b:c5:e3:f8:10:d1:f5:ed:00:6f:
cc:46:1f:18:d3:81:0f:4b:fc:68:91:4c:1b:6c:8b:5b:da:16:
6f:4b:ce:9b:ba:c9:e2:35:bd:f2:20:a8:9c:81:05:95:0e:89:
e2:4b:bb:f8:c1:e5:db:34:e9:76:7f:46:55:50:0b:3f:2f:86:
ab:13:fc:f2:a0:7f:ba:9a:c7:ee:61:4d:c5:b4:4f:1e:cf:c0:
a6:fd:71:52:21:28:b9:41:1e:0c:4e:c6:ba:fc:9e:57:0b:8d:
9c:6f:0f:db:96:65:0c:84:55:5d:e8:a5:eb:de:b9:6a:89:f0:
7a:23:c1:cd:c3:db:80:87:89:4d:84:69:48:ad:53:92:fc:8e:
0d:99:b9:5b:40:06:6b:01:1a:92:a0:dd:d3:6d:dd:52:5c:44:
3a:37:93:50:df:7e:ca:86:b4:48:90:99:86:c0:46:2c:55:45:
1d:39:41:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:36:41 2026 by rpki-client