Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ow4matkHm2y8rca104LjSEHdKRg.roa
File: Ow4matkHm2y8rca104LjSEHdKRg.roa (raw, json)
Hash identifier: zJyjQtcHw/w+Rj8NOS/ZjGhiJwTwojtL+pPA3LulJS4=
Subject key identifier: 3B:0E:26:6A:D9:07:9B:6C:BC:AD:C6:B5:D3:82:E3:48:41:DD:29:18
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0D330A2AD4DC2A4744B9A0DE8E6557AC5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ow4matkHm2y8rca104LjSEHdKRg.roa
Signing time: Thu 24 Sep 2026 11:32:54 +0000
ROA not before: Thu 24 Sep 2026 11:32:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3223
IP address blocks: 9.247.22.0/24 maxlen: 24
9.247.35.0/24 maxlen: 24
9.247.44.0/24 maxlen: 24
9.247.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 04:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:30:a2:ad:4d:c2:a4:74:4b:9a:0d:e8:e6:55:7a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 24 11:32:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b0e266ad9079b6cbcadc6b5d382e34841dd2918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:d5:78:30:64:d2:ee:e5:f6:33:d2:73:a5:
02:20:88:80:35:aa:27:e5:57:8b:e2:ad:db:30:c2:
89:13:60:c0:3d:50:ec:71:bf:20:d2:02:9d:58:62:
7c:31:2b:11:80:f7:72:12:40:68:b1:f7:b6:a4:cf:
aa:ac:84:8b:51:62:32:f2:ee:e5:64:1c:67:01:b8:
d5:65:dc:69:34:73:89:ae:bc:c0:c9:b7:92:4c:ab:
38:46:c0:84:52:93:0e:89:3c:52:58:f3:8b:16:c2:
5e:c5:1a:aa:20:88:9c:52:07:bb:99:2e:3a:b0:83:
3a:44:44:ef:91:2a:e7:fc:b6:c5:26:f3:5c:3e:39:
d9:1d:b4:4a:3a:2d:9e:ca:3d:c7:48:83:2c:cc:5c:
84:8b:5b:57:bc:de:ad:9e:41:f0:c1:d0:9a:7a:15:
14:17:23:56:42:d0:66:18:4c:9c:d2:06:21:ff:03:
ff:6e:93:f7:88:67:7d:b7:e5:7c:01:5f:7e:71:89:
09:8d:8a:f4:53:99:58:16:ae:5f:8a:25:89:59:6d:
e4:cf:13:56:0e:e8:a3:e8:05:fc:e7:22:30:d5:d7:
15:f4:9b:b5:1b:d6:97:7e:08:e9:c3:52:f3:61:5d:
0f:cd:55:8d:ef:3c:8c:d5:3a:32:22:c1:c4:87:3a:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0E:26:6A:D9:07:9B:6C:BC:AD:C6:B5:D3:82:E3:48:41:DD:29:18
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ow4matkHm2y8rca104LjSEHdKRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.22.0/24
9.247.35.0/24
9.247.44.0/24
9.247.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:fa:5d:cd:ee:c1:d4:14:f1:24:08:78:f3:e5:bb:0d:79:d3:
13:a5:1c:aa:5f:1b:f6:80:67:3a:31:bd:dd:4e:d6:aa:e3:5a:
71:1d:f7:6b:2d:c6:fa:98:92:3d:14:77:82:2a:a7:b8:c3:2c:
38:3a:91:e7:b3:8d:f2:b2:dc:63:01:bf:54:aa:31:21:fa:fa:
4a:b8:67:7e:65:73:e4:bb:9d:b8:67:37:a0:36:ac:bf:d3:c6:
f6:76:1d:1e:d5:ed:a0:87:fe:0f:f9:b1:43:3b:06:48:fa:2d:
bf:53:b3:7e:4c:75:3e:20:c1:c8:a3:92:b4:2f:a4:de:64:6b:
70:87:84:42:10:a3:80:e3:55:d3:15:2b:8e:9a:f1:af:ca:97:
63:e9:30:15:6c:ad:9c:42:47:63:0a:16:5d:ab:fd:c8:1e:56:
4a:11:db:ef:e3:de:60:07:e1:99:86:57:95:b9:2a:8d:bb:58:
18:4e:f7:b9:7f:0d:d1:c5:ef:8d:dc:96:6b:76:48:76:5f:bf:
77:f1:3d:5b:db:6a:db:61:ec:1d:d5:1c:00:f7:e3:99:23:f0:
ad:62:2c:53:58:1a:f2:aa:fe:47:58:2f:db:83:dd:30:60:d1:
85:55:3c:de:28:17:ae:d8:54:fa:51:c7:7b:ef:96:a8:58:ce:
de:45:23:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:24:55 2026 by rpki-client