Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/stvxhG8MIJ5en3CiqtXjF0rOVks.roa
File: stvxhG8MIJ5en3CiqtXjF0rOVks.roa (raw, json)
Hash identifier: iII0Fkjq2JUbi2ArmByb9hZXItufl3GHWdLvijYX5RY=
Subject key identifier: B2:DB:F1:84:6F:0C:20:9E:5E:9F:70:A2:AA:D5:E3:17:4A:CE:56:4B
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 01A0CAA021DBA30E3C59DF9F04A027D4186A
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/stvxhG8MIJ5en3CiqtXjF0rOVks.roa
Signing time: Tue 22 Sep 2026 19:38:07 +0000
ROA not before: Tue 22 Sep 2026 19:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 178.214.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 09:14:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:a0:21:db:a3:0e:3c:59:df:9f:04:a0:27:d4:18:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Sep 22 19:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2dbf1846f0c209e5e9f70a2aad5e3174ace564b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:28:8a:4d:ef:49:02:37:8a:c9:ed:a3:1b:
18:e0:f3:28:13:26:ef:8a:62:d2:95:c2:64:d2:b9:
cd:e4:0b:07:bb:91:79:2a:aa:04:c2:df:15:b2:60:
0e:4c:53:fa:5f:ee:76:08:d5:c3:79:29:81:69:08:
d7:1b:db:32:30:a7:6a:ec:b9:7a:1c:c4:44:e6:6e:
fb:65:90:83:92:39:f3:15:df:7d:fa:13:19:5a:c9:
60:28:d5:16:3f:ef:c9:9a:bc:59:9c:be:ea:13:04:
0d:e0:a0:fa:70:0d:e6:fb:ab:18:2f:5a:fb:94:cf:
96:e1:bb:c3:84:29:f6:7f:53:e4:d2:80:13:3e:74:
31:51:c1:92:c6:2d:01:5d:69:15:ea:ed:3f:ac:35:
82:d4:0d:4f:de:3d:29:47:65:85:da:d5:b9:66:af:
16:6f:b6:7c:fa:33:96:c4:e3:ba:47:5e:b9:0d:1d:
f3:95:c4:52:e6:16:44:8c:c7:67:ea:fb:79:32:9c:
bb:31:7f:16:3b:b7:38:82:56:a5:fb:b4:78:71:76:
88:b4:f8:e7:84:71:53:a3:04:88:2e:76:1d:53:d7:
87:eb:81:bf:56:42:ef:de:a5:35:af:3a:3b:f0:2a:
1a:77:b7:fc:6b:b9:ab:25:6a:a5:76:3c:59:c8:f1:
5f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DB:F1:84:6F:0C:20:9E:5E:9F:70:A2:AA:D5:E3:17:4A:CE:56:4B
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/stvxhG8MIJ5en3CiqtXjF0rOVks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:c8:fe:cc:81:2d:d9:49:f0:d2:b5:be:c4:d1:a6:22:29:65:
9b:61:0c:61:1a:78:ac:f8:f5:36:52:4d:29:b1:46:f0:f4:2b:
60:05:e4:f4:e2:bc:e3:7a:df:5a:c1:a5:05:7b:5d:aa:ef:1b:
be:58:8c:fa:bc:89:87:19:31:41:e3:12:c1:12:b4:ca:2e:ef:
bd:71:2e:4b:31:c1:de:17:b5:c8:05:fd:69:15:73:a1:8f:79:
e6:b4:d1:35:0e:06:27:cf:0f:c9:e0:15:8d:a1:37:5e:23:73:
c5:b8:e1:98:5a:d0:be:92:b1:2a:a9:2c:03:e6:ff:23:99:30:
d0:44:cc:1f:5a:5e:ea:d8:de:de:47:64:66:ac:af:d1:f4:79:
11:ce:44:2f:4d:ea:23:2e:a2:4c:73:16:a9:d7:0c:01:bd:3b:
a2:50:e9:5e:6d:b3:cb:a8:e3:da:36:43:9c:66:d8:af:b4:e9:
e5:0e:ea:2e:cb:ac:27:2e:15:01:90:d1:e3:26:4f:f8:a9:42:
4d:16:b1:b4:c3:dc:ea:49:7d:01:9d:94:74:ff:5e:09:ed:b6:
f2:70:b9:e3:89:f5:4f:c8:26:49:30:65:8d:4b:d3:f1:e0:88:
b9:9f:74:b0:38:aa:08:9b:c6:cb:85:e0:58:55:c5:65:c8:40:
6e:d8:5e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:17:57 2026 by rpki-client