Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/Z5H7RPHPaCR69xGcQJAuepJJzQI.roa
File: Z5H7RPHPaCR69xGcQJAuepJJzQI.roa (raw, json)
Hash identifier: AJDydSYbvozMDKwv8G9gafrkYNppVRUFRi4QiKbzz2c=
Subject key identifier: 67:91:FB:44:F1:CF:68:24:7A:F7:11:9C:40:90:2E:7A:92:49:CD:02
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 01A0FC56A0478291965232E3826E7277A3C4
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/Z5H7RPHPaCR69xGcQJAuepJJzQI.roa
Signing time: Fri 02 Oct 2026 11:18:50 +0000
ROA not before: Fri 02 Oct 2026 11:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47447
IP address blocks: 94.131.49.0/24 maxlen: 24
185.230.44.0/24 maxlen: 24
2a06:fcc0:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Oct 2026 21:18:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:56:a0:47:82:91:96:52:32:e3:82:6e:72:77:a3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Oct 2 11:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6791fb44f1cf68247af7119c40902e7a9249cd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:05:de:35:38:f6:a7:59:d6:50:cf:9c:77:
5f:9c:d9:fb:52:fa:59:91:9c:3b:aa:82:87:8e:bb:
84:9d:b1:d0:e0:09:d3:99:ae:31:e7:b9:8c:a9:51:
72:fe:e9:d5:f4:26:5a:be:cc:8e:24:3f:68:41:95:
ca:f0:18:d4:80:77:8d:26:cf:53:27:d9:f7:b9:ed:
d4:3e:0d:d5:79:ee:80:5b:04:0e:7b:16:05:3f:d0:
ab:59:15:65:ba:7e:ba:c9:d2:8b:dc:55:c8:28:e3:
be:ff:6b:ae:3e:43:3e:58:e0:49:93:01:ef:5c:87:
94:20:d7:5b:15:44:03:97:9f:97:b7:af:b4:35:12:
71:15:3e:50:b8:22:1d:eb:52:bb:81:07:aa:e1:da:
5a:af:fc:fc:82:25:57:82:33:4d:ea:d4:cc:7b:9d:
78:a8:ee:65:50:d6:19:41:d3:35:db:24:fd:16:46:
5a:30:a6:c1:17:ef:f2:cc:a1:9b:b5:89:fb:c0:b3:
11:dd:b1:83:2a:8c:b7:22:86:5d:78:89:91:64:55:
2c:29:58:98:14:78:54:a8:ba:cd:c6:36:8c:86:c4:
9b:db:35:a4:80:38:15:8a:a3:12:d5:29:8b:90:45:
b1:54:31:85:fa:0a:85:8c:e0:5b:ea:c2:f7:27:50:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:91:FB:44:F1:CF:68:24:7A:F7:11:9C:40:90:2E:7A:92:49:CD:02
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/Z5H7RPHPaCR69xGcQJAuepJJzQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.49.0/24
185.230.44.0/24
IPv6:
2a06:fcc0:a::/48
Signature Algorithm: sha256WithRSAEncryption
1b:97:a9:c0:53:2d:d2:72:c4:63:28:92:54:0b:79:44:9d:2a:
23:d7:0c:d8:8d:aa:3e:f7:4d:c4:bf:5b:26:52:4c:ee:09:bf:
e8:ab:97:e9:2f:7e:8c:69:9d:2b:13:de:4f:45:b0:17:8d:21:
a5:a3:e8:e3:24:c5:c9:50:ee:34:c8:28:38:c1:80:53:ba:ff:
5e:d9:73:fc:e6:69:dc:10:76:e2:ef:2a:2b:1f:10:eb:6c:ae:
8a:71:d4:b3:12:3f:ce:53:14:c6:2a:a4:71:9f:1f:9e:aa:8d:
cc:c6:1a:02:3b:42:c9:f8:f9:f2:0c:a2:89:0f:da:12:13:ab:
9b:ce:75:85:8c:8f:44:da:06:fd:1d:f6:43:82:aa:4a:36:af:
da:b4:02:c6:f8:db:af:1e:8f:c8:60:f0:dc:a9:20:27:1c:19:
a4:da:bb:44:f4:49:ae:ca:a4:0d:a7:ac:86:d5:96:97:c2:cd:
4b:6d:e7:53:02:28:58:49:30:9c:a5:ba:98:64:30:fc:3e:ca:
e2:83:1b:6b:36:6b:a4:49:ab:e1:5e:16:b8:3f:df:e4:23:91:
49:f9:c1:a4:de:7a:bc:1f:2e:c6:d9:98:1c:42:5c:b1:3b:c4:
e3:b4:54:57:47:a3:17:00:ba:8c:96:23:b4:a6:4f:77:78:ee:
65:3c:54:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:32:51 2026 by rpki-client