Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/IGoS-w4yfoc8dArcigoz2b3Gj8c.roa
File: IGoS-w4yfoc8dArcigoz2b3Gj8c.roa (raw, json)
Hash identifier: 52wBUg06BGohGNy+MBPX9ttrZfzyGsvl8g+WfDbklQw=
Subject key identifier: 20:6A:12:FB:0E:32:7E:87:3C:74:0A:DC:8A:0A:33:D9:BD:C6:8F:C7
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 01A0EEEACA8E5B92909B077B25DE84E1C3FD
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/IGoS-w4yfoc8dArcigoz2b3Gj8c.roa
Signing time: Tue 29 Sep 2026 20:45:59 +0000
ROA not before: Tue 29 Sep 2026 20:45:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212667
IP address blocks: 46.150.248.0/24 maxlen: 24
46.150.249.0/24 maxlen: 24
85.235.81.0/24 maxlen: 24
91.241.181.0/24 maxlen: 24
176.103.82.0/24 maxlen: 24
192.109.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Sep 2026 16:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:ea:ca:8e:5b:92:90:9b:07:7b:25:de:84:e1:c3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Sep 29 20:45:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=206a12fb0e327e873c740adc8a0a33d9bdc68fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:0a:d8:4a:cf:db:3b:74:2e:06:e7:26:47:
69:18:4d:6b:30:cd:cc:da:90:24:dd:58:fc:65:6a:
b1:7c:5f:2e:ca:4a:d2:d0:eb:69:c2:53:65:cb:51:
ae:f4:48:06:84:a3:28:1e:bb:e9:13:f7:46:9e:4a:
59:86:89:9b:1c:b2:49:34:e6:6f:f2:fd:47:7f:24:
9b:e4:5f:dc:90:a4:22:ce:4a:a1:70:85:3c:5a:88:
9b:bd:8d:c9:e9:87:ed:c1:59:a9:47:5f:d1:16:d1:
ed:a1:c2:7c:5a:f6:b0:70:29:ca:45:01:bc:52:97:
50:ac:12:3d:9b:c8:ae:a8:cc:76:8e:17:f5:58:16:
32:8c:e8:cc:9c:57:4f:0a:30:27:13:0f:74:75:7d:
a5:b1:a1:4d:d6:93:7c:35:d6:44:a6:e9:dc:e1:79:
cc:9c:e7:b6:df:8b:88:8b:a9:83:3d:3e:a0:9b:7b:
e9:62:ad:c2:20:f7:0b:72:e0:12:af:44:b7:c5:a9:
3d:3e:ba:3f:e9:e5:2e:e6:2d:2a:50:82:27:a8:28:
0c:d4:ad:78:61:d9:f8:a2:1b:fc:80:d7:5e:14:3e:
61:4b:70:85:21:77:ae:63:dc:60:c4:59:5b:c8:30:
c2:cc:e0:51:ac:e3:ad:e4:85:3c:d2:2f:03:82:35:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6A:12:FB:0E:32:7E:87:3C:74:0A:DC:8A:0A:33:D9:BD:C6:8F:C7
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/IGoS-w4yfoc8dArcigoz2b3Gj8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.248.0/23
85.235.81.0/24
91.241.181.0/24
176.103.82.0/24
192.109.97.0/24
Signature Algorithm: sha256WithRSAEncryption
27:44:07:97:22:d8:f7:d8:52:34:8f:a7:59:3b:06:16:46:ee:
09:48:cf:5d:d7:f7:6d:f8:71:36:a5:7a:f8:91:ae:75:8d:b6:
fb:ce:56:03:15:f5:1e:c3:b2:4b:f5:8f:2e:55:89:fc:63:4e:
0c:ec:91:57:72:16:ba:cf:4f:bf:e6:96:19:78:76:6a:9f:cb:
1c:e5:59:31:86:55:37:26:12:e6:e7:aa:69:0a:ef:c1:8c:02:
d5:de:de:86:b9:43:37:b8:f9:0c:f5:17:67:dd:76:46:d9:65:
15:97:51:dc:38:e9:b3:b1:96:eb:68:fb:cb:dc:e6:e2:dc:7f:
d0:ca:3b:f7:7a:42:01:18:1f:9b:27:fc:fa:04:b9:0c:97:a1:
3c:1f:06:ee:e4:17:87:03:55:23:2b:ef:c5:be:b6:97:89:74:
ab:45:02:49:27:34:66:9d:00:ad:6f:07:a9:31:2b:87:cb:64:
43:96:4c:21:2e:9b:5b:b1:89:20:44:68:a7:af:f4:cb:20:0e:
96:07:4f:f3:8c:00:03:ae:f8:78:ee:f3:56:2f:8a:2f:41:65:
47:49:f2:b3:32:09:1f:7e:52:09:9a:9b:b5:0d:45:c8:d7:cc:
43:13:72:42:11:fd:02:9f:09:82:25:b2:aa:68:98:73:11:62:
cb:b2:01:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:55:36 2026 by rpki-client