Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lWKW_3I8iVGnKOxs8q6oWnOqVk0.roa
File: lWKW_3I8iVGnKOxs8q6oWnOqVk0.roa (raw, json)
Hash identifier: PwVfqQfggOZ3ebRpLcKnhwhtnepamq9MAlcVTZXI8Fc=
Subject key identifier: 95:62:96:FF:72:3C:89:51:A7:28:EC:6C:F2:AE:A8:5A:73:AA:56:4D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A1443EE44D6A72C82C694C59659492FDCA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lWKW_3I8iVGnKOxs8q6oWnOqVk0.roa
Signing time: Fri 16 Oct 2026 10:25:34 +0000
ROA not before: Fri 16 Oct 2026 10:25:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218721
IP address blocks: 193.124.91.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Oct 2026 11:38:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:3e:e4:4d:6a:72:c8:2c:69:4c:59:65:94:92:fd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 16 10:25:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=956296ff723c8951a728ec6cf2aea85a73aa564d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:80:89:82:b6:b1:90:f4:de:cf:9a:14:40:
c0:9d:03:47:fe:3c:ab:c7:46:d8:ad:5b:ca:aa:98:
77:8c:b6:22:92:3e:41:c5:3d:c9:e9:c8:b8:bf:58:
5a:78:a4:0d:59:1d:f6:5d:19:c3:f3:3f:f3:0e:14:
7e:e8:2f:10:7a:d0:a7:7a:89:c2:b8:30:e8:1c:54:
9a:97:10:a4:59:57:70:aa:b1:4c:0a:d3:05:3d:ea:
0f:98:a9:9b:e0:4e:d6:4b:4f:23:ac:7e:1e:b8:b3:
07:53:f7:da:4e:30:50:76:04:eb:e8:1e:aa:91:d3:
80:62:3c:de:59:f2:15:af:b6:7d:8d:c6:b9:8c:39:
68:a9:f0:fc:03:12:cd:16:7c:87:0a:2f:3b:7d:e1:
07:e5:c3:40:eb:57:c7:2e:b2:3c:7e:5d:87:68:ea:
e8:fe:d9:67:aa:3e:ab:4b:90:08:4d:a0:81:b1:b0:
88:87:0f:91:04:4a:31:53:a7:f3:44:81:20:11:93:
04:2c:bf:a1:c6:d6:7f:f8:c8:e7:b0:c2:f5:47:82:
e6:ea:d5:60:c9:ac:5a:e4:89:ef:ff:f1:0f:5e:8c:
cf:dd:fb:8a:f7:38:8e:c1:fe:3d:13:75:f4:3c:fc:
b8:ba:9d:1c:d7:44:e6:0b:a4:1c:94:36:ba:19:e7:
16:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:62:96:FF:72:3C:89:51:A7:28:EC:6C:F2:AE:A8:5A:73:AA:56:4D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lWKW_3I8iVGnKOxs8q6oWnOqVk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.91.0/24
212.193.0.0/24
Signature Algorithm: sha256WithRSAEncryption
70:78:a6:68:e9:d4:43:6b:e8:b0:34:00:4b:a7:9e:fc:be:49:
e9:69:74:d2:e9:83:8b:05:45:45:73:2a:39:7f:c8:53:b8:f3:
fb:cd:04:c7:32:80:24:bc:62:c8:3d:b9:67:f0:e8:b6:04:f5:
00:84:47:fb:81:5e:09:68:f8:11:ed:63:02:39:fa:cd:fb:11:
13:29:b8:33:ad:c1:9d:6d:b7:b6:c0:15:74:89:bb:f8:30:58:
fe:b6:46:c9:39:be:72:a6:ee:6b:46:36:42:f9:d6:4a:63:0a:
46:d8:f9:72:da:24:07:c9:dc:a7:fd:a3:6c:7b:91:24:50:61:
fc:65:a1:bc:8e:73:04:77:0b:ac:6e:01:4e:7c:0d:f4:4d:42:
25:22:7a:fb:08:6f:9a:0f:d2:cd:70:da:df:a6:79:a4:03:02:
24:b4:ad:06:76:86:9b:ce:8b:69:cd:d7:70:72:68:3c:89:23:
fb:bf:d6:ba:84:3f:6e:b9:93:69:8e:2e:3f:2b:df:de:32:31:
cd:fc:8e:7c:72:6f:78:5d:4e:b1:c3:e0:47:bd:a3:36:38:b5:
de:60:e7:ed:67:c6:7c:9b:3c:1e:11:43:f1:29:6b:5d:6f:58:
0e:0e:0a:53:43:b5:dc:df:59:60:db:53:c7:2c:4a:e1:51:4c:
45:d4:94:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:19:57 2026 by rpki-client