Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/YH6-ZQLld-X8E0Wf7KV2-6F_WF4.roa
File: YH6-ZQLld-X8E0Wf7KV2-6F_WF4.roa (raw, json)
Hash identifier: vFtM97oSlF93O+UEz5ibivem+1hy07kMJ/la3800jyw=
Subject key identifier: 60:7E:BE:65:02:E5:77:E5:FC:13:45:9F:EC:A5:76:FB:A1:7F:58:5E
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 01A0C03448B42B5722C74523C0265E614CA1
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/YH6-ZQLld-X8E0Wf7KV2-6F_WF4.roa
Signing time: Sun 20 Sep 2026 19:04:07 +0000
ROA not before: Sun 20 Sep 2026 19:04:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219369
IP address blocks: 195.10.233.0/24 maxlen: 24
2a0b:9402::/48 maxlen: 48
2a0b:9405::/32 maxlen: 32
2a0b:9405::/33 maxlen: 33
2a0b:9405:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Wed 23 Sep 2026 12:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:34:48:b4:2b:57:22:c7:45:23:c0:26:5e:61:4c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Sep 20 19:04:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=607ebe6502e577e5fc13459feca576fba17f585e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:e4:af:10:47:c4:13:c2:b4:ad:f8:ab:28:
4a:45:bf:99:0f:ea:6d:c0:c7:60:0b:a5:09:3e:5d:
e0:ea:5b:67:b1:b2:5d:a1:67:35:6e:e3:04:1a:7c:
97:20:06:55:f9:b4:a1:b4:d4:50:36:d1:81:a5:2a:
25:c7:72:cd:71:3a:24:1c:f0:0f:c1:04:15:e9:28:
a0:58:0b:b3:0b:ac:b4:6c:af:14:b5:b5:8c:2c:f7:
d8:44:a3:24:0b:79:b6:0b:80:cb:09:ff:c3:6d:a0:
5f:2b:ed:9d:8d:65:ea:57:70:fd:0a:ee:7e:7c:05:
da:e8:b7:be:66:ca:2b:d0:d6:9c:8a:90:94:1a:5a:
9c:2f:1f:f6:21:77:af:37:0c:3b:db:ed:6c:bc:40:
1f:5f:2a:ed:8b:8e:aa:bd:30:db:91:98:a9:63:d0:
8b:9e:da:19:92:e0:72:d1:e6:0e:5f:b7:a7:cb:e1:
08:ce:80:f2:c5:f2:81:82:59:93:4e:13:c7:32:12:
86:fc:02:26:6b:33:54:4e:b3:64:a4:91:5e:a0:80:
5b:20:5c:a6:36:b0:c9:83:5a:bf:72:44:92:a7:f1:
d0:e2:55:4f:33:0e:3e:32:f4:1d:e2:7e:df:f2:d0:
fe:e0:c5:9b:ce:63:d0:53:e6:ff:0f:72:8a:a2:83:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7E:BE:65:02:E5:77:E5:FC:13:45:9F:EC:A5:76:FB:A1:7F:58:5E
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/YH6-ZQLld-X8E0Wf7KV2-6F_WF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.233.0/24
IPv6:
2a0b:9402::/48
2a0b:9405::/32
Signature Algorithm: sha256WithRSAEncryption
0b:ae:20:bb:80:ad:de:9a:f1:ce:18:0b:33:07:c8:3c:51:a4:
27:3b:0a:b0:8c:f4:8f:b6:09:8e:b4:08:cc:6c:a7:c0:6f:24:
56:4a:54:ae:04:84:37:7c:77:98:1b:cd:dd:29:3f:d0:a2:ac:
f3:22:4c:3b:1c:fa:5b:5b:74:50:8a:da:7c:81:28:87:1c:21:
bc:9c:6a:9d:f8:4e:36:3a:a1:39:ad:53:53:10:ca:86:ea:e1:
37:b5:ed:ec:e6:7c:e4:3f:79:f7:5a:44:e3:7f:d1:51:7b:9c:
c9:ab:3d:f3:b6:38:34:b0:c1:4e:ba:ed:e9:76:0f:3d:dd:66:
4c:f9:7a:36:17:19:fb:bb:16:25:a6:16:98:82:c3:a4:09:6c:
e0:49:19:ba:48:97:43:63:04:7e:f7:16:3f:4b:58:e1:0c:3c:
2f:d9:15:1c:ac:99:0c:44:b6:1e:5b:c4:c1:3c:91:f1:b4:d6:
28:41:ca:bd:b0:b9:d7:e0:fc:c1:57:f9:e1:da:a8:d6:56:a0:
48:77:c5:a3:61:25:ef:1c:a7:6d:30:20:f2:8e:f8:7c:d8:34:
5f:94:6d:9c:b2:b2:6b:a4:18:18:86:fb:2f:75:f5:98:43:a6:
e5:29:c3:23:78:c5:92:6b:64:68:7b:3a:3f:9e:dc:8c:24:a4:
ad:4b:95:e9
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaDANEi0K1cix0UjwCZeYUyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTAyZTJkMjRiMWYyMTY5MTMwODgyMDdhMjY4ZTY2MjZi
MGNlMzkwHhcNMjYwOTIwMTkwNDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDdlYmU2NTAyZTU3N2U1ZmMxMzQ1OWZlY2E1NzZmYmExN2Y1ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyzkrxBHxBPCtK34qyhKRb+ZD+pt
wMdgC6UJPl3g6ltnsbJdoWc1buMEGnyXIAZV+bShtNRQNtGBpSolx3LNcTokHPAP
wQQV6SigWAuzC6y0bK8UtbWMLPfYRKMkC3m2C4DLCf/DbaBfK+2djWXqV3D9Cu5+
fAXa6Le+Zsor0NacipCUGlqcLx/2IXevNww72+1svEAfXyrti46qvTDbkZipY9CL
ntoZkuBy0eYOX7eny+EIzoDyxfKBglmTThPHMhKG/AImazNUTrNkpJFeoIBbIFym
NrDJg1q/ckSSp/HQ4lVPMw4+MvQd4n7f8tD+4MWbzmPQU+b/D3KKooO8iQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGB+vmUC5Xfl/BNFn+yldvuhf1heMB8GA1UdIwQY
MBaAFH1QLi0ksfIWkTCIIHomjmYmsM45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMt
NTFkNzU1NjhhOWUzLzEvWUg2LVpRTGxkLVg4RTBXZjdLVjItNkZfV0Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMtNTFkNzU1NjhhOWUz
LzEvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAwwrpMBYE
AgACMBADBwAqC5QCAAADBQAqC5QFMA0GCSqGSIb3DQEBCwUAA4IBAQALriC7gK3e
mvHOGAszB8g8UaQnOwqwjPSPtgmOtAjMbKfAbyRWSlSuBIQ3fHeYG83dKT/Qoqzz
Ikw7HPpbW3RQitp8gSiHHCG8nGqd+E42OqE5rVNTEMqG6uE3te3s5nzkP3n3WkTj
f9FRe5zJqz3ztjg0sMFOuu3pdg893WZM+Xo2Fxn7uxYlphaYgsOkCWzgSRm6SJdD
YwR+9xY/S1jhDDwv2RUcrJkMRLYeW8TBPJHxtNYoQcq9sLnX4PzBV/nh2qjWVqBI
d8WjYSXvHKdtMCDyjvh82DRflG2csrJrpBgYhvsvdfWYQ6blKcMjeMWSa2Roezo/
ntyMJKStS5Xp
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:31:18 2026 by rpki-client