Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/m1Al-YDg7vHQ_2ktYHubROTWiNA.roa
File: m1Al-YDg7vHQ_2ktYHubROTWiNA.roa (raw, json)
Hash identifier: i2jDLz3DrIYh+UCf62VRynudvFSeeeDlWLFceZd91gQ=
Subject key identifier: 9B:50:25:F9:80:E0:EE:F1:D0:FF:69:2D:60:7B:9B:44:E4:D6:88:D0
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D293FC9559639151161D7E56C302EBA0E
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/m1Al-YDg7vHQ_2ktYHubROTWiNA.roa
Signing time: Thu 26 Mar 2026 08:25:39 +0000
ROA not before: Thu 26 Mar 2026 08:25:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213618
IP address blocks: 147.90.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Mar 2026 09:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:3f:c9:55:96:39:15:11:61:d7:e5:6c:30:2e:ba:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 26 08:25:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b5025f980e0eef1d0ff692d607b9b44e4d688d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:03:5b:c9:8b:7c:7a:e3:fe:a0:10:e4:1f:55:
a8:c1:65:01:3b:92:18:b5:f2:cf:ac:4e:09:bc:04:
9c:58:71:62:bc:94:c5:42:5f:c7:9e:ac:ad:99:f9:
8d:4d:d2:48:9c:78:60:ba:db:dc:6b:2e:15:f8:08:
4a:03:75:aa:16:a4:b7:95:c5:4f:c0:bf:88:87:08:
96:62:39:ce:46:b7:93:9a:30:4c:c2:0f:b2:24:e4:
e9:04:07:c8:1d:14:f2:e0:d0:2d:55:34:19:e5:05:
c7:3c:7e:19:e8:35:30:ec:b5:aa:fb:e8:43:53:1e:
39:5f:14:bc:dd:a0:42:22:6d:27:61:57:4d:a8:8c:
17:6c:27:8f:51:27:ac:72:e7:2f:ec:77:65:55:57:
67:09:da:2b:3b:4b:e5:03:43:12:cd:b6:a5:25:a0:
9e:1f:89:6d:48:00:82:5e:c6:5d:16:5d:1e:b3:17:
57:b1:68:57:f1:f8:0f:55:00:b5:13:94:d0:26:ab:
9f:bf:b0:45:ab:90:3b:f4:52:ea:3d:f6:9e:2d:e1:
f1:d8:eb:8a:85:57:94:46:54:13:3d:01:58:7f:72:
d4:06:37:fd:5e:38:ea:b5:d4:17:bc:57:80:39:40:
29:e9:fe:39:93:e5:a6:a9:32:2c:9d:f0:4e:5a:99:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:50:25:F9:80:E0:EE:F1:D0:FF:69:2D:60:7B:9B:44:E4:D6:88:D0
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/m1Al-YDg7vHQ_2ktYHubROTWiNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d8:ea:f8:73:62:f5:03:c7:b1:b5:ca:29:09:c7:68:0a:c1:
d0:4e:6e:02:94:47:c6:04:63:86:8b:5f:93:59:55:74:ff:2c:
0b:d3:bf:b6:b4:ef:21:fa:9d:8e:e1:f1:7a:61:b2:d1:88:82:
90:56:0b:e2:05:75:1d:30:ec:f5:e3:44:a1:5a:44:8b:82:59:
ca:45:9f:a9:30:33:22:a8:3d:d6:b7:2f:16:4c:4d:c7:18:69:
58:9d:bf:92:57:b0:0e:07:88:3c:29:ca:a1:18:bb:52:8e:ec:
fe:67:76:ce:f7:a5:dd:44:d0:ae:b0:b4:e9:ff:c8:a6:e6:04:
bf:86:51:4b:bd:b7:f6:98:07:87:88:bd:e8:4d:b9:94:0e:d1:
8a:fb:22:57:c6:03:c6:21:6c:4b:5a:f2:28:19:f6:cb:0c:fb:
f4:ae:f4:de:14:8d:28:23:f9:00:c6:66:0e:95:58:4a:1d:76:
2a:00:33:b7:57:35:a2:ed:2f:d5:5f:3d:77:1e:9a:68:67:4c:
95:f7:1b:a7:91:fe:21:ef:1f:ce:3b:e1:01:72:00:64:ae:e5:
3b:31:5f:b1:ae:0c:ed:55:ea:0a:35:ae:af:93:eb:b7:f3:a6:
dc:98:9b:32:62:4c:39:0a:f2:2e:fa:d1:51:c6:a6:2a:51:80:
72:57:c1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:11:08 2026 by rpki-client