Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/5ooeaCm2GVXR9XvefHU3KcHGzAg.roa
File: 5ooeaCm2GVXR9XvefHU3KcHGzAg.roa (raw, json)
Hash identifier: z+fcRSGZZhusERHDemZwyeqvYCjCNJ3sScP4ATvOp0M=
Subject key identifier: E6:8A:1E:68:29:B6:19:55:D1:F5:7B:DE:7C:75:37:29:C1:C6:CC:08
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01A15B3A0FCF550B643F43D2BB8C9C135E95
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/5ooeaCm2GVXR9XvefHU3KcHGzAg.roa
Signing time: Tue 20 Oct 2026 21:31:34 +0000
ROA not before: Tue 20 Oct 2026 21:31:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 188.66.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Oct 2026 13:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:3a:0f:cf:55:0b:64:3f:43:d2:bb:8c:9c:13:5e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Oct 20 21:31:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e68a1e6829b61955d1f57bde7c753729c1c6cc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:06:cf:36:a4:70:00:a3:50:aa:d1:ce:41:
34:1d:2d:61:79:03:c1:96:b8:0c:d7:1a:e3:de:90:
9c:9a:09:fd:fe:c7:e1:db:f2:29:7d:b9:f6:46:54:
52:2d:4f:15:80:6b:b4:7c:4d:3a:6c:a1:1d:62:96:
27:58:f9:d1:a8:d6:89:fb:60:47:b2:9c:76:18:d3:
31:36:1c:7d:ab:e3:6c:a2:17:87:91:fc:a2:65:ab:
d1:d6:11:37:06:5e:13:6d:5b:76:7a:fd:fa:a6:07:
97:ba:17:47:b4:c9:94:89:bc:24:e7:0a:8f:b6:8a:
0c:d4:c1:c5:9b:23:09:c4:6e:27:6f:13:89:08:a4:
d6:80:88:91:a9:4b:09:cc:eb:ef:0e:04:f6:b8:db:
ee:ed:28:d6:60:f1:b5:33:ce:e8:fe:b4:19:73:31:
cf:29:22:79:3d:a8:a9:0a:8f:e0:f1:86:43:01:30:
0d:88:63:c7:93:87:be:0d:ca:85:f7:34:cc:a1:46:
18:84:d0:cf:bc:14:0d:30:e9:5a:9f:7d:b8:7a:80:
14:53:37:2a:a1:de:d5:a3:ad:c6:01:04:87:5f:ba:
ce:19:be:bf:c2:0a:cc:aa:00:38:a3:a6:dd:cd:6b:
b4:ea:26:80:30:0a:4e:1e:33:07:d2:84:b2:1f:a6:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8A:1E:68:29:B6:19:55:D1:F5:7B:DE:7C:75:37:29:C1:C6:CC:08
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/5ooeaCm2GVXR9XvefHU3KcHGzAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.24.0/24
Signature Algorithm: sha256WithRSAEncryption
19:72:f4:ab:50:9d:3b:06:77:fd:43:32:8c:79:ff:cb:bf:63:
43:08:6a:9f:04:ea:16:8b:5f:15:db:06:12:9f:cc:1e:db:5a:
ec:50:28:99:18:01:2e:a2:a0:38:5f:b2:92:07:3e:79:32:4c:
99:a3:5f:2a:21:0e:fd:14:4c:0d:17:61:06:43:e2:4b:7a:42:
99:0d:78:b9:e5:0f:db:d0:7c:d7:7f:5b:23:2d:fb:1a:dd:86:
82:8f:56:26:a8:a3:c4:61:da:b8:e3:c5:24:30:24:4a:86:81:
a0:bd:c0:0c:86:e3:ea:e3:bd:c0:8d:fd:f1:0a:c9:05:32:6e:
8f:e0:53:0e:7d:d5:0d:ac:2a:6b:c5:10:e3:e2:35:3a:69:42:
1f:ea:36:8a:57:af:0a:4c:64:8a:94:54:9b:e7:e3:4d:b5:95:
46:0e:1f:ce:9c:15:df:32:3b:12:ca:56:61:a8:18:75:89:4a:
6e:40:81:7f:b5:53:2b:01:d4:84:19:25:42:1c:46:b2:df:3f:
9c:f5:3c:a2:af:00:79:b6:f1:15:b6:69:b3:68:8a:2e:d9:d4:
a2:c1:ea:18:26:e5:80:66:08:e7:b7:4f:df:96:c4:ad:0b:25:
33:4e:51:59:b1:48:a6:cf:cc:61:6c:52:44:e3:fc:ae:92:08:
17:93:07:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:56:49 2026 by rpki-client