Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/IVl9tJ2hJ9Ahy8m5Ni_2Brnuaok.roa
File: IVl9tJ2hJ9Ahy8m5Ni_2Brnuaok.roa (raw, json)
Hash identifier: wgaREvfjvS33JSfKaB0/RdjkYFp5pSCI+werZcsYi6E=
Subject key identifier: 21:59:7D:B4:9D:A1:27:D0:21:CB:C9:B9:36:2F:F6:06:B9:EE:6A:89
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019D201F5C8A864015D4D8239B9DA1797AB2
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/IVl9tJ2hJ9Ahy8m5Ni_2Brnuaok.roa
Signing time: Tue 24 Mar 2026 13:53:39 +0000
ROA not before: Tue 24 Mar 2026 13:53:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44133
IP address blocks: 83.223.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Mar 2026 09:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:1f:5c:8a:86:40:15:d4:d8:23:9b:9d:a1:79:7a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 24 13:53:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21597db49da127d021cbc9b9362ff606b9ee6a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:66:1c:79:03:4c:e7:94:01:9f:41:1b:3d:
f9:46:c0:32:cd:a0:bc:ba:0d:2a:dd:07:d5:7a:98:
4d:b8:5f:33:87:04:18:3c:f6:20:5c:2b:13:7f:2d:
7d:bb:ae:32:96:68:f2:c5:1a:87:e9:e2:5e:f8:11:
4b:fb:94:2a:3a:0a:fd:8f:61:f4:d1:49:e3:10:b2:
f7:b2:a1:47:e5:94:31:38:65:2b:ea:b3:a5:35:03:
f0:c2:32:3f:c3:c4:10:1e:ab:41:96:d9:0e:86:08:
91:89:16:ed:07:89:2d:ff:47:35:b8:b8:43:dc:f1:
61:ee:1f:c9:30:1f:b2:8c:b4:17:34:27:4a:5f:96:
00:17:ae:88:3e:f9:97:fa:5c:fc:ea:a9:20:f0:f6:
89:fc:40:54:eb:3f:41:4e:7e:dd:af:23:ce:1d:64:
c1:1a:77:dd:ee:6d:c8:63:db:a1:21:49:f9:e7:b8:
49:42:ab:43:16:6a:f4:4b:ab:97:72:9d:81:c5:bc:
63:ed:9d:5c:12:bc:fb:9d:06:32:af:1a:6e:2f:e1:
c2:95:76:d7:b7:18:4b:cd:60:11:53:da:6b:79:65:
f0:38:21:6e:2c:bd:9a:b2:c1:5d:8a:73:8c:03:1c:
40:13:2d:12:89:df:f8:78:c7:c6:76:0e:44:4e:25:
48:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:59:7D:B4:9D:A1:27:D0:21:CB:C9:B9:36:2F:F6:06:B9:EE:6A:89
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/IVl9tJ2hJ9Ahy8m5Ni_2Brnuaok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.223.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a6:56:ec:24:85:c2:bc:17:f6:4b:9b:4c:ee:2f:79:b2:ad:
4d:ba:cf:f8:83:e1:e1:54:f3:26:79:27:4f:79:67:e6:64:36:
23:a8:b4:84:d4:8b:b5:9f:9b:37:46:5f:70:aa:4a:ef:22:e6:
58:65:5a:40:7d:e9:47:bd:b8:f1:e8:0a:e4:75:7b:8f:ca:e6:
17:a5:5e:c6:9f:41:65:5d:0b:17:ba:cf:82:c9:c8:08:8b:94:
15:c3:6a:4e:63:d8:b3:e3:69:93:48:65:7e:21:25:4e:09:9c:
70:4f:e6:86:d9:4b:38:d5:bd:f4:ce:fe:99:61:11:99:ca:68:
1b:0b:8e:2f:79:e0:82:26:19:d5:4c:1b:23:4d:8a:66:c3:80:
59:46:93:ef:3f:cd:62:6c:e4:dc:e8:30:8e:42:9c:36:c4:10:
48:70:6b:fe:9e:5b:26:97:c5:8d:b0:c7:85:2f:3c:72:be:e9:
86:b6:09:67:b8:d6:1f:83:b1:cb:da:ab:87:6a:69:33:ac:d5:
87:92:08:9d:14:80:29:5f:69:4c:4e:08:64:7e:61:5a:13:42:
b5:c4:93:e6:c3:f5:7c:48:08:9c:1a:e9:8a:e5:88:ca:8d:9f:
7f:89:2b:23:c4:5a:18:4d:10:3e:01:aa:18:fe:46:4d:0c:4d:
d1:11:ff:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:33:36 2026 by rpki-client