Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/BrZTUyi-tGkVW3frHFqGPTrclg4.roa
File: BrZTUyi-tGkVW3frHFqGPTrclg4.roa (raw, json)
Hash identifier: u31qYKqfCskmP0+1HNhZCidcMXGPS+++9rNIo0+tEFc=
Subject key identifier: 06:B6:53:53:28:BE:B4:69:15:5B:77:EB:1C:5A:86:3D:3A:DC:96:0E
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 01A0D42C6689F6E49CA13BA9007022AA65BC
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/BrZTUyi-tGkVW3frHFqGPTrclg4.roa
Signing time: Thu 24 Sep 2026 16:07:54 +0000
ROA not before: Thu 24 Sep 2026 16:07:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205007
IP address blocks: 91.189.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 13:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:2c:66:89:f6:e4:9c:a1:3b:a9:00:70:22:aa:65:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Sep 24 16:07:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06b6535328beb469155b77eb1c5a863d3adc960e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:69:34:12:3f:8a:45:00:c4:14:2f:de:f5:
ca:6f:27:ee:64:2f:8b:0d:76:c6:98:bf:98:cb:79:
66:20:03:07:b0:8e:7d:aa:80:a1:e9:15:9c:a6:11:
65:b0:07:c5:5d:ce:07:ed:8a:ff:78:7f:80:7b:00:
ef:13:59:f4:a8:01:be:d1:3f:39:2d:cc:19:28:60:
93:81:83:9f:e0:7a:ca:dd:10:6e:25:75:87:4e:94:
1f:88:27:15:f9:74:78:8a:0f:e1:37:c3:8c:a8:22:
7d:f1:88:c4:b4:4c:4a:6d:88:fc:d7:21:4a:12:4f:
35:69:3a:05:a9:90:17:f7:c3:a6:08:0e:aa:41:0e:
78:41:73:91:51:0b:bb:44:f3:ae:a3:34:26:89:38:
5e:bc:d8:51:3f:2f:8f:d3:bc:5a:e6:02:b1:e8:95:
a2:c2:19:fb:bf:b7:27:1f:47:10:0b:a0:ae:dd:7b:
72:5a:c1:32:92:88:9e:13:da:93:d3:22:f4:d1:19:
70:bf:50:28:02:5b:08:41:e4:b4:db:8f:44:36:46:
b3:48:15:c0:f8:bd:f8:3f:4a:08:02:cf:79:75:8c:
29:a9:fd:8e:b7:e8:d9:d2:ce:26:f1:77:f2:ab:7e:
50:81:1d:5e:30:b5:90:94:b5:e1:c2:d9:45:69:78:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B6:53:53:28:BE:B4:69:15:5B:77:EB:1C:5A:86:3D:3A:DC:96:0E
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/BrZTUyi-tGkVW3frHFqGPTrclg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.83.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ff:ce:7b:0d:3f:fb:4d:c0:3e:d6:c6:d6:00:a8:ce:3c:60:
01:7b:29:85:8b:81:db:7f:a8:11:30:7f:d3:0f:24:93:86:dd:
58:2e:d4:a7:46:18:c8:61:4a:27:ad:31:2c:41:06:e5:12:3e:
ac:13:71:56:7c:22:86:e6:aa:b3:e2:ba:67:bd:71:a1:89:b8:
a2:e2:d6:cd:56:ae:1f:e2:5b:ee:df:90:43:df:b2:bd:dd:b0:
af:ec:5a:71:e0:08:aa:24:22:bd:53:da:32:83:c8:57:0f:38:
54:f6:b5:87:49:db:36:be:a8:ab:c0:05:78:42:66:04:69:76:
18:6b:ee:66:fe:b5:51:fb:72:fc:26:95:3b:06:9a:f1:e2:d2:
0c:06:db:e2:34:51:1a:2d:62:89:10:2b:99:ee:b1:ce:8f:3c:
fb:80:b9:1a:b1:4f:c3:fb:fe:eb:68:8d:69:4c:3d:4f:19:81:
8b:dc:b3:b7:bc:a2:f9:71:b4:a3:ff:f0:9a:f1:e3:c0:64:4f:
27:27:fd:39:ab:1d:30:06:16:a5:07:2e:ba:55:dd:e3:4d:76:
f8:de:7c:cf:c8:aa:f5:ee:a2:ec:b9:ac:93:7c:79:8f:fe:f0:
7f:aa:4e:b6:e1:48:fc:fb:f6:bd:b0:fa:a4:45:0e:cc:7b:f9:
27:8f:1c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:55:22 2026 by rpki-client