Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zgITalLnjWhJyCWtRXQUkTnxJa4.roa
File: zgITalLnjWhJyCWtRXQUkTnxJa4.roa (raw, json)
Hash identifier: 4hS7vpVP9+dvHN2anf3+cC5oldpuwxXpj3CWSPj2bYg=
Subject key identifier: CE:02:13:6A:52:E7:8D:68:49:C8:25:AD:45:74:14:91:39:F1:25:AE
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 019FAE8B55DF0289C180EDC4AF2B58AD6243
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zgITalLnjWhJyCWtRXQUkTnxJa4.roa
Signing time: Wed 29 Jul 2026 15:43:14 +0000
ROA not before: Wed 29 Jul 2026 15:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214383
IP address blocks: 45.81.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Aug 2026 09:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:8b:55:df:02:89:c1:80:ed:c4:af:2b:58:ad:62:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jul 29 15:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce02136a52e78d6849c825ad4574149139f125ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:1f:2b:18:0e:4a:d8:37:13:36:bc:2e:b9:
e7:d9:65:1a:95:70:50:9f:63:67:3c:b4:07:45:e6:
1d:a5:6a:f7:17:cc:79:04:ab:ec:15:56:f5:e0:5a:
2e:34:4e:12:de:94:33:de:7d:ce:e7:50:52:e5:e2:
b7:d7:79:5d:43:6b:1d:bb:08:c4:38:d7:61:bf:bd:
f5:ae:b8:9a:7d:60:24:54:7d:f7:06:8b:22:6a:70:
3a:ca:a0:64:2e:ef:d3:4e:dd:d0:42:ef:da:37:6e:
b4:0b:99:ba:dd:9f:4a:cb:16:20:ff:9c:c7:d5:bd:
64:49:31:db:c8:59:fd:fa:c8:1a:2d:4a:04:67:a8:
ac:96:b6:18:a7:15:4a:24:62:90:e4:b0:ef:bd:d8:
fe:28:43:6e:d8:07:ac:82:85:31:7f:ae:f7:52:24:
ee:5d:d7:44:da:ed:e1:00:72:22:4f:49:37:6a:82:
97:4c:f5:cc:71:31:83:b3:94:ce:ae:45:ef:a5:f5:
18:ec:9e:6a:51:e5:76:0a:3c:a4:bb:32:66:6d:b5:
8f:50:22:4c:74:7e:6c:06:f8:38:90:37:de:5e:74:
da:38:07:3b:76:b6:93:5d:ff:6b:c2:7f:0c:34:6c:
64:fe:11:ed:57:8c:0e:cd:11:ae:d7:73:19:19:09:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:02:13:6A:52:E7:8D:68:49:C8:25:AD:45:74:14:91:39:F1:25:AE
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zgITalLnjWhJyCWtRXQUkTnxJa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.20.0/24
Signature Algorithm: sha256WithRSAEncryption
69:71:83:91:e9:08:11:7a:30:0d:36:1f:07:1f:94:cc:4a:a7:
92:d6:0b:2b:a1:b2:41:3e:db:4e:48:ca:f3:ab:12:91:a3:b8:
a7:c9:29:3b:f1:a2:9b:63:ca:ba:a9:7b:71:7c:7c:b5:67:a5:
77:d6:e3:54:62:7c:48:18:5c:ef:01:76:5f:8a:3d:e6:d7:51:
8a:dd:7b:30:da:6c:82:83:bc:32:da:e0:e5:f5:cf:95:f8:e3:
f9:a5:5c:e1:dd:72:50:4c:49:4c:b7:4e:3c:87:7f:0d:8d:c2:
9c:42:3c:4d:10:d4:f4:7c:cc:2b:52:18:20:7d:e2:2b:2f:25:
56:20:02:eb:ce:d6:34:28:ab:f7:b8:c4:d7:b3:f1:14:24:5b:
da:f9:31:c8:73:09:8a:99:e9:46:6f:54:f9:03:9f:e7:f6:14:
a5:44:30:d1:b3:d5:f1:88:46:f5:ce:ec:d8:8a:a4:e3:68:ef:
3a:52:a1:58:c9:00:a6:e2:86:32:86:fe:a6:83:9e:3a:05:b2:
48:38:e9:b7:64:a3:b5:2d:0c:dd:63:32:20:92:41:0a:5d:ae:
8c:31:8f:6b:76:f1:f0:5b:a9:5c:4d:63:a2:30:31:da:92:9d:
60:db:42:71:e3:69:fb:c2:a6:15:fc:15:9a:89:24:76:e3:40:
9d:2a:7f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:39:13 2026 by rpki-client