Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/ki4B1XWlEvENgpZce_Odz1CjcZM.roa
File: ki4B1XWlEvENgpZce_Odz1CjcZM.roa (raw, json)
Hash identifier: W1cgxw2tQpKItjv5BXcv22qiOmCzqElTpgbImGpeiXQ=
Subject key identifier: 92:2E:01:D5:75:A5:12:F1:0D:82:96:5C:7B:F3:9D:CF:50:A3:71:93
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 01A1BFCF8C4E49877583EE81494EFE7BB02B
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/ki4B1XWlEvENgpZce_Odz1CjcZM.roa
Signing time: Mon 09 Nov 2026 10:16:52 +0000
ROA not before: Mon 09 Nov 2026 10:16:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16125
IP address blocks: 87.58.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Nov 2026 20:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:cf:8c:4e:49:87:75:83:ee:81:49:4e:fe:7b:b0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Nov 9 10:16:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=922e01d575a512f10d82965c7bf39dcf50a37193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:4d:a4:04:9e:9b:91:d5:f8:79:eb:48:cf:
48:a3:64:48:fe:00:43:74:5c:98:02:24:3e:bf:2a:
19:24:bd:c5:0b:0d:43:a4:28:d5:2c:02:25:32:48:
8f:0d:3c:43:62:6c:71:f0:75:c3:19:e2:dc:44:ff:
f0:7f:e6:04:57:7d:d7:44:0e:d4:e0:65:d5:bf:3d:
7c:95:cb:b1:43:81:98:20:a2:c5:36:ae:e9:20:50:
eb:75:5c:a4:20:0f:4d:ef:f6:44:94:e8:5e:4f:ee:
71:79:04:06:a7:87:65:2e:33:5e:8e:e0:8c:90:4d:
4f:98:e4:7e:66:7f:a5:56:76:8e:4a:7c:a5:25:52:
bd:cf:2f:62:e3:84:da:48:00:28:4c:0c:b1:d1:fe:
d0:ea:87:3c:79:b9:0d:08:a2:ed:21:9b:3a:a3:ae:
cf:18:5b:33:6b:61:6f:50:81:4f:b8:18:d4:05:f5:
b9:27:25:da:85:24:b4:b4:6d:a4:c3:fb:ee:b3:32:
75:94:7b:fd:08:37:45:54:68:aa:32:59:d5:fa:90:
d0:d7:c5:50:45:92:10:ce:20:a9:79:33:d8:21:8d:
45:38:10:34:50:69:e4:2a:ee:a2:23:84:49:08:0a:
d9:c9:f4:d6:90:17:86:54:f9:f7:ff:95:2d:89:3b:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2E:01:D5:75:A5:12:F1:0D:82:96:5C:7B:F3:9D:CF:50:A3:71:93
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/ki4B1XWlEvENgpZce_Odz1CjcZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.136.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:61:7a:f3:1c:79:f6:ab:01:35:cc:2f:b9:67:66:13:f2:90:
6d:f7:56:ba:e9:93:2f:3f:a3:c0:ae:f4:6d:91:90:b9:31:c6:
1f:0d:ec:d5:67:b0:c5:35:6f:2a:5b:c2:53:2a:5a:4a:05:21:
23:bb:f9:02:eb:82:fd:de:7c:b3:05:4d:e9:32:0d:65:47:04:
ea:45:e7:40:3e:81:9b:d5:f2:89:97:c0:da:60:b0:0f:0c:66:
48:e6:d9:ab:5e:dc:c5:a5:8d:64:67:84:b6:6c:6b:7b:6b:bb:
ef:f8:05:5c:82:b9:9a:8c:ca:70:e0:b5:78:f6:77:65:16:73:
5c:e0:dc:11:34:70:ef:3c:29:3e:06:f3:25:fd:7e:32:92:0a:
1a:26:22:ec:b6:c0:8d:9d:d0:7a:4d:47:af:05:8a:b2:0b:70:
0e:0f:da:92:af:de:1d:df:62:64:bd:c4:f8:c0:29:00:bd:24:
db:f2:8f:fb:28:68:fe:5a:87:8c:f2:62:c8:d4:a7:fe:e2:23:
4e:58:32:3e:ff:f1:40:69:09:7f:cc:84:58:b4:e3:a9:3a:0d:
79:84:79:ae:0c:16:f9:c7:98:2f:1c:5d:fb:ca:69:44:35:91:
d1:02:cc:61:c4:1b:49:34:47:2a:18:1e:ce:03:87:a3:b1:6a:
11:6e:03:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:06:29 2026 by rpki-client