Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/AsNuOYMTwGSlixQkjkWQYWwZDh4.roa
File: AsNuOYMTwGSlixQkjkWQYWwZDh4.roa (raw, json)
Hash identifier: oWcIWc/+4wuvHeMVL+kDFEjfwJRDK4LbIsHsKHKVmc4=
Subject key identifier: 02:C3:6E:39:83:13:C0:64:A5:8B:14:24:8E:45:90:61:6C:19:0E:1E
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019CF1631BD5E8403687E3F2C98EDC003C19
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/AsNuOYMTwGSlixQkjkWQYWwZDh4.roa
Signing time: Sun 15 Mar 2026 12:05:30 +0000
ROA not before: Sun 15 Mar 2026 12:05:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 92.62.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Mar 2026 13:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f1:63:1b:d5:e8:40:36:87:e3:f2:c9:8e:dc:00:3c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Mar 15 12:05:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02c36e398313c064a58b14248e4590616c190e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:c8:1d:30:f2:71:7f:87:51:71:17:d4:04:
db:f8:7e:44:b6:67:58:54:1e:ea:46:16:84:cd:da:
55:97:92:e9:7c:5e:48:c5:92:93:5b:71:b0:9b:38:
b0:26:8a:07:42:5a:b4:64:a6:39:3b:ef:6a:b0:c1:
16:9b:f2:1f:c6:15:de:35:b2:c0:cd:83:6c:4a:73:
34:9a:91:df:c9:14:51:10:94:ec:fa:31:fc:95:62:
32:d3:63:f9:99:9d:09:7a:16:2b:7e:9c:ee:89:7b:
dd:77:f5:19:7b:a0:b1:83:61:7d:4b:dc:39:93:bd:
b1:42:70:58:6d:b7:b5:e7:10:6d:69:15:46:ec:32:
75:2a:5a:18:54:0c:fa:40:38:5d:e9:c0:9b:b5:0d:
09:7c:f9:1e:6d:ec:9c:00:77:67:8e:46:85:a0:d3:
6e:a3:ba:42:ed:6c:5f:b3:f9:56:59:11:e7:aa:b8:
b0:00:a6:cf:85:a2:57:95:3e:cc:97:f6:32:9b:51:
90:5c:6d:a9:04:5e:7d:d2:5a:c9:f0:32:92:98:3e:
46:e4:10:66:1c:b9:fa:47:86:0d:85:09:ce:e8:62:
4b:1a:63:17:1b:e8:7d:75:7b:62:1c:4c:42:68:dd:
0e:5f:ea:95:8f:49:91:4a:24:e3:7a:ec:7d:2e:2e:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C3:6E:39:83:13:C0:64:A5:8B:14:24:8E:45:90:61:6C:19:0E:1E
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/AsNuOYMTwGSlixQkjkWQYWwZDh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.249.0/24
Signature Algorithm: sha256WithRSAEncryption
24:92:34:18:96:f9:30:09:f3:b6:31:96:6d:75:ba:49:9a:8d:
39:50:55:15:ee:67:3f:8b:57:58:24:39:91:db:a1:cf:0a:ee:
4a:c4:44:52:9e:d8:81:e1:79:0b:23:cb:6d:83:99:c9:09:79:
79:04:52:c1:7f:e2:54:c9:76:9a:f7:02:df:af:9f:5a:61:45:
6f:97:31:48:be:17:2b:e4:cc:d4:2b:e2:c6:36:18:8b:86:ea:
68:96:b1:4e:6b:47:62:f3:14:05:02:fc:35:51:da:0e:db:67:
63:cd:2c:b0:6c:35:8e:4c:a1:c5:99:37:0b:62:65:d7:44:c2:
0a:42:25:a9:97:9a:69:c2:6b:d8:e1:44:44:ab:12:35:2d:7d:
11:2a:1f:fa:93:05:e1:ae:01:85:ee:22:ff:b6:3f:5c:f5:80:
0b:73:8d:1a:be:d7:36:ee:78:4b:75:e7:63:9b:ac:68:b9:12:
e8:0c:e1:39:8a:e8:76:f7:cd:fe:b4:38:5f:3a:d2:c3:1f:60:
45:5f:e5:13:c1:99:43:64:f0:2d:88:ba:bc:db:e6:6f:31:3f:
7c:f9:bd:ce:66:09:ac:59:3b:c1:8e:d5:c6:30:bd:17:6b:c8:
ff:2a:21:19:02:77:74:14:5a:88:39:71:9e:bb:25:1d:9d:f8:
c9:8c:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 12:13:46 2026 by rpki-client