Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/Vwz8GNsLdgL2tLK57w4xcolgQg8.roa
File: Vwz8GNsLdgL2tLK57w4xcolgQg8.roa (raw, json)
Hash identifier: RCC6VYRFrOCWeh5UzaVN70lIifqtOUJZDyLZNSSuG0I=
Subject key identifier: 57:0C:FC:18:DB:0B:76:02:F6:B4:B2:B9:EF:0E:31:72:89:60:42:0F
Certificate issuer: /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial: 01A0C3555EBB14761D9CCA3920E43A2DC70E
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/Vwz8GNsLdgL2tLK57w4xcolgQg8.roa
Signing time: Mon 21 Sep 2026 09:39:07 +0000
ROA not before: Mon 21 Sep 2026 09:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210872
IP address blocks: 193.168.8.0/23 maxlen: 23
193.168.8.0/24 maxlen: 24
193.168.9.0/24 maxlen: 24
193.168.12.0/23 maxlen: 23
2a14:e480::/48 maxlen: 48
2a14:e480:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Sep 2026 13:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:55:5e:bb:14:76:1d:9c:ca:39:20:e4:3a:2d:c7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Validity
Not Before: Sep 21 09:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=570cfc18db0b7602f6b4b2b9ef0e31728960420f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:fb:32:11:03:d6:ee:0a:73:32:b4:b7:8d:
2c:79:28:4b:a2:54:ae:fe:6a:59:71:f4:58:ee:98:
f3:0d:83:03:24:80:2a:cf:6b:56:0e:6e:1a:2a:15:
d7:65:50:53:e9:f4:95:01:89:41:55:e0:9a:0c:ca:
bb:6f:09:3e:86:39:92:9d:dc:74:a8:b0:52:2e:6a:
9d:ae:b1:7c:26:03:ae:e6:36:61:b4:eb:24:4f:a0:
67:72:25:61:4a:23:40:d1:68:2b:20:89:61:fd:26:
fc:ac:49:e3:91:f1:78:e2:44:72:71:93:30:fa:c4:
15:3d:a7:b5:fc:24:9a:11:ee:c4:14:63:de:de:a6:
39:89:ca:22:d3:bf:ac:c6:43:e8:95:55:34:34:f2:
b9:b4:c8:3e:cb:f4:3c:32:d6:3e:6b:42:cb:9b:4b:
3c:00:65:08:44:51:eb:d0:27:3d:82:8b:7d:b5:ad:
be:4f:3c:a5:d6:60:8a:d1:ab:32:6d:f4:56:1d:f8:
9c:da:7e:27:09:bc:e9:74:91:5b:27:c3:06:e5:df:
14:89:e8:62:e1:41:7a:78:10:bd:c6:12:20:b6:cc:
8e:02:a1:bd:88:d3:45:5f:59:af:0e:0d:46:68:da:
40:30:cc:23:49:13:5f:f5:c9:ba:ed:aa:d5:2a:d6:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0C:FC:18:DB:0B:76:02:F6:B4:B2:B9:EF:0E:31:72:89:60:42:0F
X509v3 Authority Key Identifier:
keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/Vwz8GNsLdgL2tLK57w4xcolgQg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.8.0/23
193.168.12.0/23
IPv6:
2a14:e480::/47
Signature Algorithm: sha256WithRSAEncryption
c7:1c:8a:bd:a9:a0:41:a6:f0:6a:9f:50:6d:b4:da:e1:b4:42:
9c:c0:ff:4d:6a:28:97:40:25:28:5e:c4:5a:e9:c7:41:7b:3d:
66:10:cd:df:36:ad:04:93:97:8e:77:ec:2f:96:7c:9b:6e:5f:
bd:98:32:75:28:38:ff:8c:6c:ac:71:a6:b3:6d:f9:71:cd:10:
7f:85:08:04:5b:cf:83:97:06:bd:6d:d3:de:1d:b8:4e:c3:e1:
d1:4c:37:9e:4e:82:f2:43:23:07:b1:be:1b:63:39:6a:81:00:
f0:a3:8f:ac:b8:ad:1a:71:49:a4:dc:31:9e:b0:9f:13:b8:4d:
a6:96:4f:b4:b7:f5:f5:6f:3b:a3:60:e5:f9:54:d7:da:f2:58:
91:8f:d5:6d:58:17:bb:ad:00:37:98:66:e6:6c:e1:94:5c:87:
cf:07:70:ed:ee:ad:fa:1c:71:b5:f1:33:26:a4:a4:01:8f:41:
89:ad:af:97:5d:14:eb:82:04:5f:29:8c:73:41:c1:2a:16:df:
89:86:68:6b:46:cb:c7:00:fe:cc:ef:bd:cf:35:e4:5f:b6:63:
b2:71:ce:04:d3:cc:cd:0c:7c:0d:8b:eb:e3:87:f2:1a:39:4e:
cf:10:fb:6c:17:6e:ad:c6:e0:ba:69:55:bc:bb:58:34:f6:79:
1d:63:34:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:17:08 2026 by rpki-client