Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/AgK1WhuzIPmdgcDgVo6iWBvD0B4.roa
File: AgK1WhuzIPmdgcDgVo6iWBvD0B4.roa (raw, json)
Hash identifier: howGNr0EIZQ4shQIEVNpBmI3B9pUlNSJAPaIKYvh7uE=
Subject key identifier: 02:02:B5:5A:1B:B3:20:F9:9D:81:C0:E0:56:8E:A2:58:1B:C3:D0:1E
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A17919EF12DD141B83B4BF1891CCC68F95
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/AgK1WhuzIPmdgcDgVo6iWBvD0B4.roa
Signing time: Mon 26 Oct 2026 16:45:05 +0000
ROA not before: Mon 26 Oct 2026 16:45:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 45.149.26.0/24 maxlen: 24
89.21.87.0/24 maxlen: 24
89.251.24.0/24 maxlen: 24
91.200.223.0/24 maxlen: 24
109.122.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Oct 2026 10:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:19:ef:12:dd:14:1b:83:b4:bf:18:91:cc:c6:8f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 26 16:45:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0202b55a1bb320f99d81c0e0568ea2581bc3d01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:c2:14:1f:23:5f:06:cb:dc:bb:ac:bf:0e:
bc:e5:f5:e3:45:1a:e3:2e:b8:30:6b:5c:ff:61:15:
44:94:95:c9:46:da:14:d4:3d:60:e7:da:06:1e:d5:
20:9d:bf:35:cd:12:12:93:88:5e:d6:70:56:ac:1e:
66:52:c8:99:a6:48:37:50:51:74:8d:07:35:ca:83:
fe:7b:c7:8c:87:4b:8f:55:6b:65:d3:0d:20:6c:af:
b4:59:4c:bf:e7:b2:83:f5:98:f0:14:1e:e8:31:19:
36:6b:de:46:29:10:82:39:09:93:d7:aa:70:c6:8f:
22:05:74:dc:6a:5b:6c:50:c1:ab:64:e9:c5:e0:15:
72:76:d6:d8:85:31:e9:08:ab:07:1f:df:fb:02:1d:
b8:6e:2e:5f:f0:40:f8:da:6f:3c:6d:c3:cb:83:d5:
45:41:ce:01:b3:9a:03:4c:d0:93:26:4f:51:6e:7e:
4b:86:97:1c:f3:5d:3b:cf:55:93:f8:3e:68:ae:5b:
31:3d:32:9e:27:b4:a7:d0:36:53:4b:8a:3e:53:79:
85:5f:ff:7d:0b:e6:30:00:3d:40:9b:15:f0:f7:c4:
d5:05:49:51:06:36:6b:0a:a7:b4:34:40:d2:75:82:
3e:3d:63:b8:92:e8:06:1b:4a:8a:fe:1a:a2:01:4a:
e6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:02:B5:5A:1B:B3:20:F9:9D:81:C0:E0:56:8E:A2:58:1B:C3:D0:1E
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/AgK1WhuzIPmdgcDgVo6iWBvD0B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.26.0/24
89.21.87.0/24
89.251.24.0/24
91.200.223.0/24
109.122.40.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6e:5c:73:78:4e:e0:df:bd:85:e3:8e:5c:e5:5a:7a:2a:19:
af:7a:5f:27:51:63:e1:8c:49:c1:35:d8:11:2a:4f:6c:9d:a0:
1f:3e:7d:a8:5e:b1:00:5f:35:72:14:ed:41:96:e1:bc:40:7f:
a7:c8:a3:0d:c4:af:9f:b5:5a:71:ce:c2:7d:5c:ab:b2:98:8b:
b4:25:df:c7:90:fe:f5:39:42:16:0d:a0:bb:89:f0:62:36:61:
98:8e:0b:50:ed:5e:44:5d:1b:cc:eb:b4:9e:f8:9b:11:e4:68:
40:17:4c:25:d3:b5:78:a0:23:5a:b7:01:7c:05:36:b1:0f:f7:
c7:03:26:92:ad:cc:cd:da:af:38:13:21:ce:26:69:d4:d0:3a:
cf:f7:f2:d6:53:2d:5c:0c:10:13:99:0c:30:41:16:12:e2:ef:
13:63:ea:31:b2:c2:00:79:fd:d8:9d:9a:4a:41:e0:fe:cc:0b:
52:0b:4c:a6:7c:7b:e3:e9:d6:57:f4:71:95:7e:46:4d:80:11:
31:e0:79:a6:a2:4a:6e:bb:36:55:f6:21:84:34:1b:cb:87:fe:
68:d4:ce:67:08:c9:1c:e5:41:a8:c2:ec:5a:84:b7:06:db:63:
4f:09:84:72:50:f8:c5:ec:5a:67:82:33:4f:7f:c3:ed:3e:72:
ec:73:f0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:15:56 2026 by rpki-client