Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/SKA7f6sL_LybMQl69121X_bpuXg.roa
File: SKA7f6sL_LybMQl69121X_bpuXg.roa (raw, json)
Hash identifier: cqDcEHhfstohGPaKNW7mGjbIV19gYrK/PnNxkge1Zvs=
Subject key identifier: 48:A0:3B:7F:AB:0B:FC:BC:9B:31:09:7A:F7:5D:B5:5F:F6:E9:B9:78
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 01A15BF2151225EEF7E25AB3658D4D4425F8
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/SKA7f6sL_LybMQl69121X_bpuXg.roa
Signing time: Wed 21 Oct 2026 00:52:34 +0000
ROA not before: Wed 21 Oct 2026 00:52:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151785
IP address blocks: 2a12:cb41:c00::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Oct 2026 05:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:f2:15:12:25:ee:f7:e2:5a:b3:65:8d:4d:44:25:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Oct 21 00:52:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48a03b7fab0bfcbc9b31097af75db55ff6e9b978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a1:92:fc:80:5a:24:f2:1d:1e:40:22:2c:cb:
c6:e5:ae:db:0c:2c:58:c2:13:32:86:a4:1f:89:ed:
33:5d:3b:c6:14:cb:17:6b:f9:79:ae:05:ec:51:eb:
50:df:ac:fb:b5:6e:d7:9b:82:f8:cf:79:45:57:76:
a3:37:c4:53:21:d6:cc:2a:b4:6b:fe:83:fe:04:e8:
b3:df:9e:c1:99:1a:72:e8:77:76:4f:f8:b4:a7:09:
34:07:e5:15:13:26:03:1b:0c:89:66:6e:9a:32:11:
ec:c2:fc:44:56:07:5d:cd:cf:84:42:17:ec:dd:50:
8b:be:e0:e7:89:67:97:14:84:72:c2:86:5e:c0:05:
aa:42:53:1c:05:2b:af:1d:18:39:80:fc:fe:b4:22:
21:d6:b7:b5:49:61:60:23:ee:4a:c0:15:16:c0:c3:
3f:ad:49:54:a7:8b:92:f6:a1:a2:bd:a5:32:b8:32:
87:f6:40:1f:53:24:14:f6:aa:11:f6:c2:5f:26:77:
30:3f:c0:f9:61:71:07:fd:1e:a2:97:7c:ec:cb:b9:
ff:df:f0:18:0d:dd:25:8d:fa:09:45:7e:ff:d5:c6:
c4:5a:31:bb:60:22:25:6f:e9:b8:bc:54:9d:73:b3:
52:d6:cd:62:6e:99:55:3c:44:eb:dd:c7:40:55:f3:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A0:3B:7F:AB:0B:FC:BC:9B:31:09:7A:F7:5D:B5:5F:F6:E9:B9:78
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/SKA7f6sL_LybMQl69121X_bpuXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:c00::/40
Signature Algorithm: sha256WithRSAEncryption
19:93:0e:a7:e7:3a:0e:3d:48:c2:65:5b:58:99:ba:ba:9d:97:
f5:93:23:c3:55:f8:28:78:27:21:0d:65:c1:7f:91:fc:61:5b:
1f:04:84:06:0c:6c:2d:44:2f:47:fc:59:00:3a:54:95:c1:70:
12:2d:e7:67:dd:40:2d:a1:a0:52:0a:1b:69:c5:87:4d:90:05:
b4:d6:e4:88:73:ac:2e:2c:d9:7a:46:89:6c:42:d0:9d:54:cd:
e4:7e:d5:91:01:70:05:f4:66:10:4c:20:e9:97:f6:df:5d:25:
d8:0f:25:db:7f:10:65:8b:25:40:27:5f:8a:c9:4a:6f:d8:32:
4b:ab:47:98:17:d0:60:fd:68:01:79:8f:6c:64:e7:4c:ba:0f:
bf:71:05:83:dc:bc:85:9a:14:fd:7a:9f:64:71:2b:50:97:e3:
a2:cf:43:58:29:e6:76:db:55:80:e1:72:7b:18:3c:8b:f2:97:
61:fa:07:24:89:dc:f2:83:92:46:a4:b1:7c:34:8c:37:aa:1d:
58:74:a3:e6:4f:3a:8e:e7:37:31:77:3f:a6:b6:c9:36:c9:b8:
58:e8:ea:20:4c:36:f1:6f:57:a2:2b:af:b9:5f:97:ea:83:e3:
bb:eb:06:c3:2a:ed:9b:cb:a9:87:9d:9e:2b:86:7b:d6:6e:bb:
63:42:e5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:32:50 2026 by rpki-client