Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/_pFB7SDY-FI1OrYOm8GoyDrSJa4.roa
File: _pFB7SDY-FI1OrYOm8GoyDrSJa4.roa (raw, json)
Hash identifier: usi33JJdF8gVc80TOjRwFqGUUF+815xRnOLqabs02Mw=
Subject key identifier: FE:91:41:ED:20:D8:F8:52:35:3A:B6:0E:9B:C1:A8:C8:3A:D2:25:AE
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01A0AA42EAE9EA62069148A869A32D153519
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/_pFB7SDY-FI1OrYOm8GoyDrSJa4.roa
Signing time: Wed 16 Sep 2026 12:48:27 +0000
ROA not before: Wed 16 Sep 2026 12:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214996
IP address blocks: 62.83.48.0/24 maxlen: 24
159.195.12.0/22 maxlen: 22
159.195.16.0/22 maxlen: 22
159.195.91.0/24 maxlen: 24
159.195.92.0/22 maxlen: 22
159.195.107.0/24 maxlen: 24
159.195.232.0/22 maxlen: 22
159.195.236.0/22 maxlen: 22
2a0a:4cc0:101::/48 maxlen: 48
2a0a:4cc0:101::/52 maxlen: 52
2a0a:4cc0:120::/43 maxlen: 43
2a0a:4cc0:2000::/43 maxlen: 48
2a0a:4cc0:2000::/48 maxlen: 48
2a0a:4cc0:2000:4300::/56 maxlen: 56
Validation: Failed, certificate revoked on Wed 23 Sep 2026 12:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:42:ea:e9:ea:62:06:91:48:a8:69:a3:2d:15:35:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Sep 16 12:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe9141ed20d8f852353ab60e9bc1a8c83ad225ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:aa:52:64:aa:f0:e2:da:ac:34:54:44:f0:d1:
57:73:7d:46:89:f7:93:98:09:cf:30:a0:a0:22:33:
ec:fb:bd:ac:d3:d7:b4:0c:3d:6f:68:2b:1e:20:97:
40:96:95:83:45:9b:a1:fb:02:40:84:c3:23:db:2f:
87:84:f6:3d:1f:0b:a1:ff:dc:93:c8:f9:43:7a:96:
85:22:0a:bf:ea:57:f2:be:cd:c8:d4:1a:aa:68:37:
3f:65:c1:23:3b:10:7e:12:0e:05:79:5d:4f:b6:18:
74:53:79:51:ae:26:38:0e:ce:b3:0c:ec:7c:65:7c:
b9:79:1a:bf:2e:40:1e:4f:b1:7f:33:d4:e4:cb:fe:
07:8b:fe:2a:e4:0e:a7:c8:56:1b:4f:ae:df:3d:8c:
64:1d:96:41:2f:07:34:f7:dd:6f:60:3a:1f:1d:2f:
55:b5:9a:00:33:b3:ca:3c:c4:9a:35:8e:60:e8:b7:
21:2d:8a:5d:f2:0d:68:c5:f8:1f:32:49:0d:f8:b7:
90:71:f7:10:58:95:4c:d3:08:7b:3d:03:01:68:87:
ff:a3:21:4e:db:36:ab:8e:92:67:5c:9a:7e:5b:96:
a4:0a:81:0c:dd:ae:95:d8:9a:e9:e3:98:3e:c2:52:
29:34:e2:43:9c:c7:de:0e:d3:50:a0:5f:8d:75:fe:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:91:41:ED:20:D8:F8:52:35:3A:B6:0E:9B:C1:A8:C8:3A:D2:25:AE
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/_pFB7SDY-FI1OrYOm8GoyDrSJa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.83.48.0/24
159.195.12.0-159.195.19.255
159.195.91.0-159.195.95.255
159.195.107.0/24
159.195.232.0/21
IPv6:
2a0a:4cc0:101::/48
2a0a:4cc0:120::/43
2a0a:4cc0:2000::/43
Signature Algorithm: sha256WithRSAEncryption
36:78:c8:15:d4:cc:a4:0e:f4:0e:8b:59:28:ae:81:02:2e:50:
1e:a1:1b:5b:27:60:c1:4c:91:fa:f9:ed:04:ff:e7:b3:b8:ab:
5a:ff:bc:e1:2f:04:52:df:94:1c:54:cb:62:d8:90:2d:be:5b:
dd:bc:be:0f:10:a6:ce:e1:6d:c7:88:fb:8c:81:95:09:b0:ea:
12:2e:89:ad:e5:85:4a:04:d4:8b:72:ae:3d:e9:87:1d:aa:3b:
fe:f2:84:e1:61:22:2b:c1:8b:ac:7f:18:90:1e:2b:62:b8:c4:
d3:f5:0b:5a:6b:f0:e0:58:72:e3:fa:d1:b6:ad:5e:83:d1:8a:
09:9a:ed:4e:c8:93:b5:f2:da:81:f3:75:c8:fa:5c:a5:52:9f:
31:8e:2a:f6:09:4b:49:5e:96:9a:d1:70:fb:6a:41:12:af:1b:
44:06:67:c9:c1:a8:df:10:8f:b1:0a:ba:72:df:86:15:b7:c5:
e7:08:10:b6:5b:66:53:2f:93:26:b7:53:9c:32:f7:20:21:1d:
ef:a8:17:c6:20:2f:f3:f3:d1:6a:5f:b4:95:2e:6d:c7:53:7b:
38:c6:4e:3f:f7:7a:58:74:fb:2d:1b:c1:32:e5:35:64:01:a8:
c2:36:6e:90:03:d0:ff:d2:9f:40:9a:25:f3:49:af:eb:84:d7:
dd:67:43:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:53:39 2026 by rpki-client