Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-ypRwiOPvI3RhS5qu1YrLw6fAOs.roa
File: 1-ypRwiOPvI3RhS5qu1YrLw6fAOs.roa (raw, json)
Hash identifier: 0KyGl7rRNZnL26IVs01PPRIViwBNoOiBk4hDBUXyEhI=
Subject key identifier: FB:2A:51:C2:23:8F:BC:8D:D1:85:2E:6A:BB:56:2B:2F:0E:9F:00:EB
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0C9CCA893A0B8F478EE12BCF358E9EA21
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-ypRwiOPvI3RhS5qu1YrLw6fAOs.roa
Signing time: Tue 22 Sep 2026 15:47:07 +0000
ROA not before: Tue 22 Sep 2026 15:47:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 62.41.24.0/24 maxlen: 24
92.71.160.0/19 maxlen: 19
194.122.83.0/24 maxlen: 24
194.231.132.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Sep 2026 05:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:cc:a8:93:a0:b8:f4:78:ee:12:bc:f3:58:e9:ea:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 22 15:47:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb2a51c2238fbc8dd1852e6abb562b2f0e9f00eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:f3:75:d6:05:fa:6f:6f:df:24:27:5f:0b:
56:22:21:5c:84:75:1f:47:42:23:6a:6a:4b:2b:04:
81:af:3d:74:bd:9b:74:b2:4f:48:3d:cd:d3:0e:5e:
01:2b:a1:58:c3:9f:f9:69:55:8f:f8:cf:6f:56:04:
b5:99:29:84:c6:0e:a6:e9:66:85:4b:74:64:77:c7:
81:24:ab:52:a4:61:06:c0:ae:df:ff:59:97:b5:0d:
50:ee:b9:fe:c6:bf:f9:db:a4:9f:1a:65:6f:88:f4:
3a:3d:5b:52:28:77:ac:cb:bb:c6:d6:6c:9c:f0:53:
ed:08:f9:23:c4:55:a3:31:db:ba:0a:84:9a:b6:19:
60:d4:04:53:39:f2:62:16:cf:e0:e7:c2:73:2e:d3:
0e:1a:0a:54:ee:a0:f7:e5:7c:6e:7e:35:0a:1f:3f:
5a:6d:00:cc:d0:2f:31:59:f5:bd:f6:1f:7e:d3:d0:
1a:fd:72:a4:88:79:f6:3e:d5:e3:df:9b:f0:19:bb:
7c:eb:6f:a4:b5:ef:41:14:61:3e:67:29:46:41:39:
ab:9d:45:58:f2:fc:e6:ba:7b:3e:f2:68:41:45:1d:
c1:5f:87:69:28:7e:3d:f2:d5:39:b1:20:80:61:a9:
94:55:5e:83:62:ee:57:e4:6c:41:ad:e3:78:56:bd:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2A:51:C2:23:8F:BC:8D:D1:85:2E:6A:BB:56:2B:2F:0E:9F:00:EB
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-ypRwiOPvI3RhS5qu1YrLw6fAOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.24.0/24
92.71.160.0/19
194.122.83.0/24
194.231.132.0/24
194.231.142.0/24
194.231.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:70:13:52:e4:ca:86:6c:42:d9:e7:a2:96:73:e5:d5:17:f1:
60:46:33:8a:d0:97:59:2c:fc:de:fb:8d:d9:b0:bf:85:a3:39:
f7:f1:49:8c:f1:15:11:87:4c:b6:69:4f:1b:69:83:45:b5:56:
8c:7f:df:07:29:f9:b7:67:d6:ce:09:6c:64:db:0b:b8:e7:a5:
57:5f:02:55:4a:3a:c1:8c:9c:2b:29:6d:d6:5d:41:39:4f:e7:
49:ce:01:82:1e:96:ac:b1:57:97:5c:ba:2a:99:3a:f5:02:07:
00:84:ca:06:92:dc:a5:69:2a:9a:ba:86:7f:06:da:4f:0c:92:
ea:aa:ef:aa:85:b0:2a:85:3e:f1:16:ab:4f:36:83:0b:8c:87:
64:17:ea:3b:60:71:7e:41:4d:83:b3:be:0f:78:f6:13:21:28:
4f:c8:c7:8d:6c:15:d7:c4:eb:88:16:d8:4d:4f:e7:13:05:80:
86:51:1c:dc:3d:77:bd:70:1e:c4:68:e0:32:01:57:ad:79:51:
59:d3:a1:45:16:9c:e4:a2:a2:18:5a:d8:ad:11:3a:49:cd:6c:
5c:9c:14:57:5e:92:e9:df:45:61:a6:af:29:be:26:94:0d:bf:
05:fa:3f:06:ad:ef:9b:88:de:7b:70:8b:4e:d8:97:ab:4e:d5:
76:27:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:44:29 2026 by rpki-client