Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1tAy7J_I7U7trh7N0_r8Dtq_NWg.roa
File: 1tAy7J_I7U7trh7N0_r8Dtq_NWg.roa (raw, json)
Hash identifier: OnfOZ86JExM175uyjUCHVggoMD7BW9OQ59GdPtE7Kzk=
Subject key identifier: D6:D0:32:EC:9F:C8:ED:4E:ED:AE:1E:CD:D3:FA:FC:0E:DA:BF:35:68
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019D202130625930FB0FA8D799379408B847
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1tAy7J_I7U7trh7N0_r8Dtq_NWg.roa
Signing time: Tue 24 Mar 2026 13:55:39 +0000
ROA not before: Tue 24 Mar 2026 13:55:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 79.132.64.0/24 maxlen: 24
79.132.65.0/24 maxlen: 24
79.132.66.0/24 maxlen: 24
80.81.58.0/24 maxlen: 24
83.223.153.0/24 maxlen: 24
83.223.154.0/24 maxlen: 24
91.190.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Mar 2026 09:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:21:30:62:59:30:fb:0f:a8:d7:99:37:94:08:b8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 24 13:55:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6d032ec9fc8ed4eedae1ecdd3fafc0edabf3568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:ef:1c:10:21:f2:f0:c4:c6:f3:f8:16:4d:
72:ad:8a:7a:86:93:ad:3c:02:09:bf:04:da:3a:0e:
ce:c4:7f:9f:f1:46:73:bd:5d:c6:0f:39:ba:df:70:
02:bb:05:73:8d:b0:52:9f:27:76:5c:f5:8f:3e:50:
47:a1:90:a3:0d:b8:e3:ef:fd:f3:50:ba:9d:85:30:
c8:fa:a2:5d:f4:93:7a:87:55:17:4a:9e:d5:4b:75:
87:fe:5d:cf:f7:8a:1f:b0:2f:fa:5f:fb:16:bf:83:
00:10:32:8a:fc:ce:87:23:af:f2:09:96:82:91:ea:
82:bb:cd:30:6e:50:c0:47:cc:70:ea:67:cf:60:ca:
2d:47:f4:00:4e:6d:94:3e:d9:49:dd:37:58:17:18:
46:54:11:00:9f:ee:5b:f8:b7:04:3e:73:6b:1f:d6:
b6:f5:e3:a9:f8:8d:d5:37:1a:dd:0c:ba:08:ac:bd:
e3:ec:88:80:91:43:fb:a5:a7:7c:4d:7a:01:5c:e3:
80:10:7e:36:aa:d1:54:1f:8f:73:b8:ba:76:c6:14:
74:2d:e4:c9:f8:ba:61:1a:66:14:46:1e:2d:81:71:
59:66:ff:55:44:02:66:ce:03:e0:e9:75:85:ad:b1:
7e:ab:e2:d4:bd:de:24:c1:d7:fe:ed:53:94:b5:77:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D0:32:EC:9F:C8:ED:4E:ED:AE:1E:CD:D3:FA:FC:0E:DA:BF:35:68
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1tAy7J_I7U7trh7N0_r8Dtq_NWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.64.0-79.132.66.255
80.81.58.0/24
83.223.153.0-83.223.154.255
91.190.47.0/24
Signature Algorithm: sha256WithRSAEncryption
19:74:c4:e4:17:46:9a:6b:0b:06:ba:62:63:b1:6b:48:6b:b0:
02:fa:dd:5c:0a:c6:bb:a8:be:de:17:fe:e9:22:a8:7e:85:26:
43:07:33:f0:ba:ef:54:cc:c7:2f:55:9f:3c:8d:e1:f0:ed:c3:
cc:cd:e1:5b:ab:ee:37:6f:da:9d:43:11:71:ff:80:6b:21:db:
c2:b5:f6:89:bf:c4:34:c5:de:e1:86:16:af:7b:11:0b:d5:0b:
ee:32:96:3d:83:ce:9a:b5:43:2b:d8:c1:b8:a0:c4:91:84:3f:
7b:98:0e:85:83:6a:72:1a:ab:6a:2f:eb:61:c4:d6:9d:b2:71:
06:f9:84:c9:2d:8c:b5:4a:9c:79:b9:e9:4d:dc:12:20:f1:4d:
da:a8:8a:ce:bc:1c:81:2f:dc:dd:da:83:9a:6e:98:24:30:f0:
a6:e6:8a:4a:6c:c5:47:89:80:5e:6b:2a:89:df:c8:cc:3b:18:
21:ad:0b:90:b1:a5:df:fd:61:29:f4:a7:77:58:0e:47:33:ba:
6c:73:5e:8f:27:29:8d:67:23:b4:dd:fc:87:d5:65:5c:02:4a:
db:2b:2c:8d:43:43:fa:4c:e4:0e:f7:86:e1:86:d7:42:7c:c2:
17:1b:08:04:cb:ad:6d:09:56:07:c8:64:66:a5:3f:97:2e:b2:
81:58:01:79
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZ0gITBiWTD7D6jXmTeUCLhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjYwMzI0MTM1NTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmQwMzJlYzlmYzhlZDRlZWRhZTFlY2RkM2ZhZmMwZWRhYmYzNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtozvHBAh8vDExvP4Fk1yrYp6hpOt
PAIJvwTaOg7OxH+f8UZzvV3GDzm633ACuwVzjbBSnyd2XPWPPlBHoZCjDbjj7/3z
ULqdhTDI+qJd9JN6h1UXSp7VS3WH/l3P94ofsC/6X/sWv4MAEDKK/M6HI6/yCZaC
keqCu80wblDAR8xw6mfPYMotR/QATm2UPtlJ3TdYFxhGVBEAn+5b+LcEPnNrH9a2
9eOp+I3VNxrdDLoIrL3j7IiAkUP7pad8TXoBXOOAEH42qtFUH49zuLp2xhR0LeTJ
+LphGmYURh4tgXFZZv9VRAJmzgPg6XWFrbF+q+LUvd4kwdf+7VOUtXf+KQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFNbQMuyfyO1O7a4ezdP6/A7avzVoMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvMXRBeTdKX0k3VTd0cmg3TjBfcjhEdHFfTldnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAZPhEAD
BABPhEIDBABQUTowDAMEAFPfmQMEAFPfmgMEAFu+LzANBgkqhkiG9w0BAQsFAAOC
AQEAGXTE5BdGmmsLBrpiY7FrSGuwAvrdXArGu6i+3hf+6SKofoUmQwcz8LrvVMzH
L1WfPI3h8O3DzM3hW6vuN2/anUMRcf+AayHbwrX2ib/ENMXe4YYWr3sRC9UL7jKW
PYPOmrVDK9jBuKDEkYQ/e5gOhYNqchqrai/rYcTWnbJxBvmEyS2MtUqcebnpTdwS
IPFN2qiKzrwcgS/c3dqDmm6YJDDwpuaKSmzFR4mAXmsqid/IzDsYIa0LkLGl3/1h
KfSnd1gORzO6bHNejycpjWcjtN38h9VlXAJK2yssjUND+kzkDveG4YbXQnzCFxsI
BMutbQlWB8hkZqU/ly6ygVgBeQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:59 2026 by rpki-client