Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/G4807vwNJFSu-fYWUfawQzAewtY.roa
File: G4807vwNJFSu-fYWUfawQzAewtY.roa (raw, json)
Hash identifier: /HcA1agzg8gJSg6419eMwugv9946CvnLFy6hSCP6ltQ=
Subject key identifier: 1B:8F:34:EE:FC:0D:24:54:AE:F9:F6:16:51:F6:B0:43:30:1E:C2:D6
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0910D5F1C45EE2C3E7D2861CB8AEF3D3B
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/G4807vwNJFSu-fYWUfawQzAewtY.roa
Signing time: Fri 11 Sep 2026 15:19:27 +0000
ROA not before: Fri 11 Sep 2026 15:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.171.246.0/24 maxlen: 24
139.28.50.0/24 maxlen: 24
193.32.207.0/24 maxlen: 24
193.187.133.0/24 maxlen: 24
193.187.134.0/24 maxlen: 24
212.115.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 12:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:0d:5f:1c:45:ee:2c:3e:7d:28:61:cb:8a:ef:3d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 11 15:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b8f34eefc0d2454aef9f61651f6b043301ec2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:46:9d:e7:dc:6f:ae:5d:01:d0:2f:28:89:
8d:fb:35:26:c0:79:b8:c8:32:12:b3:0c:b6:c5:2f:
96:a7:83:47:02:02:e6:c5:60:7b:05:75:2f:3c:e2:
af:45:46:80:77:7a:0c:12:0e:af:e2:c8:61:2d:6c:
95:6f:d4:8d:e8:e9:b8:b8:f4:95:65:6d:14:4e:23:
05:8e:44:b2:d0:29:56:55:1d:cc:df:1e:ef:d4:b8:
32:ff:57:f5:ed:46:a7:34:fb:bd:c0:1f:02:3b:79:
fc:8f:26:79:d8:de:76:dc:b9:57:70:94:e9:87:e9:
e6:57:2a:c6:c3:a9:bb:19:33:ee:ea:da:72:90:12:
1c:c0:87:fc:de:30:c6:7f:b0:fd:a5:c6:4c:f9:33:
b6:02:25:bc:5a:eb:61:76:40:bc:e5:e7:d1:46:9a:
be:97:0c:1d:91:c2:70:42:67:65:e8:4c:73:38:1c:
be:a0:3d:37:60:1a:22:da:48:48:e0:e1:3c:b4:10:
1d:3d:f8:1b:91:cc:f4:1e:70:7b:56:03:36:a8:ab:
81:04:71:e4:bc:63:82:9e:fc:03:91:9b:d7:8d:3e:
31:89:f5:bc:49:da:71:6d:e5:c9:61:34:17:ab:56:
ed:0d:82:3f:ac:47:48:cc:3b:1e:92:ea:49:a7:90:
12:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8F:34:EE:FC:0D:24:54:AE:F9:F6:16:51:F6:B0:43:30:1E:C2:D6
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/G4807vwNJFSu-fYWUfawQzAewtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.246.0/24
139.28.50.0/24
193.32.207.0/24
193.187.133.0-193.187.134.255
212.115.102.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ef:12:3c:83:91:3d:93:cb:83:61:33:47:83:02:a5:14:5e:
a5:55:0e:e8:21:21:47:a6:93:1d:83:1d:0d:51:a8:28:e5:87:
c2:a4:30:80:2e:8e:fd:f9:b6:2e:3e:ea:ea:7c:40:c6:86:3c:
d2:04:c5:e1:94:23:72:71:ec:da:45:86:1e:b0:10:9f:55:0a:
45:95:53:37:fd:92:58:13:05:4c:89:c4:8b:12:d6:b0:96:43:
8c:2f:5b:d9:75:fa:d0:ed:ad:df:c1:c9:ff:28:ad:31:08:50:
8c:f6:4f:ce:95:83:da:84:b0:97:f0:49:02:7f:e2:d8:6e:33:
e1:38:9f:c4:21:6b:08:c4:db:ba:51:02:2b:5d:2a:16:8c:ef:
fa:4f:e6:dd:a6:48:0b:c2:6a:1f:05:e5:6e:c9:de:3d:6b:67:
de:3a:6c:58:43:ee:66:bf:ab:67:e4:29:a2:7b:22:16:bf:53:
a8:88:cc:eb:2e:95:1b:6b:3b:d5:2f:01:f3:f0:94:1e:48:1d:
92:ac:ed:01:15:86:7a:20:36:a2:d7:af:85:c8:df:6b:7a:cf:
b8:e6:79:f6:9d:a9:f5:ad:0b:b0:ea:27:42:30:90:17:d9:3c:
8d:52:26:1b:86:09:1e:a9:87:2a:59:92:70:4a:a8:52:fd:0f:
81:9a:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:13:54 2026 by rpki-client