Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Dtf56EXoZIeKytUb274i34L5O8U.roa
File: Dtf56EXoZIeKytUb274i34L5O8U.roa (raw, json)
Hash identifier: CY583xlrdNV8G6+DBWx17Sjs7wZ9lKveKxXIJ040Jws=
Subject key identifier: 0E:D7:F9:E8:45:E8:64:87:8A:CA:D5:1B:DB:BE:22:DF:82:F9:3B:C5
Certificate issuer: /CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Certificate serial: 01A0C58FBFDA43DB3333525A0DC9B5C11DB4
Authority key identifier: 94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Dtf56EXoZIeKytUb274i34L5O8U.roa
Signing time: Mon 21 Sep 2026 20:02:07 +0000
ROA not before: Mon 21 Sep 2026 20:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36776
IP address blocks: 185.111.40.0/24 maxlen: 24
185.111.41.0/24 maxlen: 24
185.111.42.0/24 maxlen: 24
185.111.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 12:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8f:bf:da:43:db:33:33:52:5a:0d:c9:b5:c1:1d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Validity
Not Before: Sep 21 20:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ed7f9e845e864878acad51bdbbe22df82f93bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0e:3b:e8:62:ac:51:f3:9d:c3:e9:13:cc:57:
86:e5:9d:be:02:39:bf:3a:62:73:93:22:82:f5:97:
2c:38:e4:08:54:14:f7:ab:21:ba:30:8e:6f:d6:57:
b5:19:40:66:38:7e:1a:78:58:4b:b6:ce:0f:85:a9:
a4:f3:de:b5:ca:ce:4b:32:ac:02:1d:de:83:da:19:
9d:a2:73:02:01:de:e7:ac:03:b8:f0:a3:5d:c0:f0:
93:b8:13:08:5c:44:ab:f8:48:82:f7:a3:f9:cf:2c:
3c:ea:00:30:a2:c9:32:46:0c:3e:a1:a2:7e:89:9a:
33:41:ef:44:ec:ed:1e:52:27:98:63:08:c1:95:cc:
27:10:6c:84:49:c8:7f:de:19:ab:c5:e0:1d:07:ba:
79:71:6e:e2:39:5c:50:e0:75:17:8a:7b:23:b0:8a:
20:a9:63:63:1e:9f:94:80:d9:ac:9e:89:fc:81:21:
13:6f:b6:aa:47:5a:10:b4:83:3a:3c:76:84:65:2a:
cc:e5:42:31:f8:f8:36:35:36:86:e3:f9:3e:11:03:
10:b7:ad:32:58:da:eb:d5:b9:b8:64:68:44:92:03:
41:68:c3:e2:48:d2:8e:71:14:b1:1c:a6:2a:82:06:
d7:21:19:87:3f:dc:8c:69:f6:15:0b:fe:c2:75:84:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D7:F9:E8:45:E8:64:87:8A:CA:D5:1B:DB:BE:22:DF:82:F9:3B:C5
X509v3 Authority Key Identifier:
keyid:94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Dtf56EXoZIeKytUb274i34L5O8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.40.0/22
Signature Algorithm: sha256WithRSAEncryption
67:8c:3a:6e:fe:18:dc:b9:1a:8b:9b:49:12:2f:d2:38:ec:39:
f8:2c:58:b2:bc:93:06:eb:2c:a5:be:f4:cc:bb:a3:a0:7a:bc:
1d:a3:e6:c2:82:d6:b6:fa:9c:73:bb:a3:99:a4:bf:9e:af:36:
11:ac:6a:90:9c:16:63:7c:e8:3a:2d:0e:19:fb:9f:a6:62:08:
78:b2:73:59:98:fd:5d:69:f9:ca:9d:09:96:29:34:29:92:cb:
c3:56:7b:7d:59:57:57:65:3b:a6:1b:dc:99:a2:32:d7:90:53:
7c:89:87:6d:dd:f6:de:34:96:fb:ed:87:ad:b9:03:15:6f:62:
fd:c1:d1:99:da:f5:c8:8b:b8:c7:2b:6c:46:5e:0d:7a:f5:1b:
50:f8:f9:cf:cc:54:36:d9:a3:80:df:b1:c9:e5:2e:b6:01:82:
3b:05:a1:3e:b5:25:1b:bb:0a:20:c3:32:53:14:e8:5e:da:84:
c4:7b:06:56:ac:fa:be:9d:d8:8e:80:a4:8e:fd:de:ab:a5:00:
0f:19:0a:1e:b7:d7:82:3e:40:86:f6:86:9a:b6:77:fa:f0:16:
45:52:47:20:7a:e1:10:11:53:3b:50:67:60:99:db:13:5c:92:
bc:61:d5:ec:42:7f:d7:f9:6e:c3:d6:79:9d:22:a4:74:d2:58:
66:ba:9e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:37:58 2026 by rpki-client