Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/hXEB9XP2yhZznym4ssuOJ6ab6W8.roa
File: hXEB9XP2yhZznym4ssuOJ6ab6W8.roa (raw, json)
Hash identifier: FYoOBKdFN63+lXqVp+9wmvdBHhpUdp8aqAZ/D3+OIIc=
Subject key identifier: 85:71:01:F5:73:F6:CA:16:73:9F:29:B8:B2:CB:8E:27:A6:9B:E9:6F
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 019F22620757B7B0C1C3D06CB4E869A202C5
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/hXEB9XP2yhZznym4ssuOJ6ab6W8.roa
Signing time: Thu 02 Jul 2026 10:31:17 +0000
ROA not before: Thu 02 Jul 2026 10:31:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42861
IP address blocks: 185.149.144.0/22 maxlen: 22
185.157.120.0/24 maxlen: 24
195.10.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jul 2026 23:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:62:07:57:b7:b0:c1:c3:d0:6c:b4:e8:69:a2:02:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Jul 2 10:31:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=857101f573f6ca16739f29b8b2cb8e27a69be96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:44:5c:16:5c:2d:6d:d7:42:f8:5e:e7:5d:
35:79:88:74:e0:04:59:4b:39:9e:7f:7b:fd:72:3f:
53:6c:b8:fc:70:d6:a3:7f:0a:db:53:13:ca:34:1a:
35:3d:ab:73:4e:87:51:02:38:2b:15:a5:82:cd:ac:
7a:fa:bc:38:2c:e2:10:40:3c:fc:ff:17:88:6f:90:
34:59:41:b4:92:eb:d6:2e:45:48:9c:64:06:d3:f3:
9a:65:e0:4e:07:86:8e:44:a2:9a:97:db:0b:cc:4b:
97:d1:90:ea:b8:75:48:62:4f:b8:d3:ab:54:2e:2d:
4a:1a:18:b8:67:5a:b7:1d:d4:03:16:f3:5a:22:be:
b2:c1:3f:94:5a:48:58:bf:fd:3f:09:07:91:71:2c:
72:d3:f7:ab:b1:73:56:82:de:a4:fc:e0:50:1c:e7:
dc:0a:2d:e0:4b:1f:71:69:03:0b:7e:eb:ac:b4:8f:
d6:cd:6f:c8:06:aa:19:18:d6:29:f7:78:a3:41:91:
7d:1a:b1:bd:e8:ba:f2:6d:91:0f:69:f9:3b:c2:6f:
c3:87:94:76:a0:34:c7:fb:44:76:ba:d3:53:8f:9b:
84:89:db:10:1e:8a:db:4c:25:01:92:2f:b7:1b:77:
e8:d8:ed:89:c9:b3:cc:a6:b9:8d:29:7b:90:f8:22:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:71:01:F5:73:F6:CA:16:73:9F:29:B8:B2:CB:8E:27:A6:9B:E9:6F
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/hXEB9XP2yhZznym4ssuOJ6ab6W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.144.0/22
185.157.120.0/24
195.10.205.0/24
Signature Algorithm: sha256WithRSAEncryption
de:48:e3:79:ff:f3:b8:81:39:1e:99:1c:d1:b8:d8:3c:d2:ed:
df:d7:ba:0c:54:4f:c8:b0:c8:af:52:b8:51:60:8b:70:80:63:
24:e8:42:93:05:9a:7a:9b:bf:17:49:e0:02:de:da:07:4f:15:
f5:c6:a4:20:b8:a8:22:f7:9f:e2:3c:46:be:79:dc:0e:4d:71:
ef:83:77:80:a4:57:eb:07:9c:65:2c:11:c8:44:54:9f:b9:01:
a1:28:bf:4b:1f:34:91:fd:e5:f6:27:13:75:57:f7:11:81:cb:
da:86:d3:16:e8:2b:de:73:34:90:ad:b3:b0:86:35:64:db:69:
cd:ab:99:3b:46:19:a3:a9:03:cc:c3:21:98:64:ee:5f:9a:f2:
e5:6f:8f:e2:22:76:44:f4:5d:8b:25:ea:8d:69:00:5b:cd:cf:
4c:0e:28:7d:7e:b9:68:86:77:3d:c7:b9:a7:a3:fb:4e:9a:94:
71:7a:2e:4b:58:d0:20:f9:1b:d9:db:79:e5:36:21:ed:cd:c2:
e0:77:53:16:af:30:5d:09:68:5b:8c:de:40:32:50:61:3e:88:
04:30:1b:06:2e:57:6b:50:69:f0:2c:76:47:f6:ff:45:c3:aa:
b4:a2:f7:91:95:27:0c:56:b8:c7:0d:00:5e:e6:4e:9c:b5:9a:
2c:8c:3e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:25:47 2026 by rpki-client