Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/TLW9k9T34-_RgWmaq2xQ0BJlydI.roa
File: TLW9k9T34-_RgWmaq2xQ0BJlydI.roa (raw, json)
Hash identifier: qIukeVq8MJnKIJU/PD49pU5dFDxLI+IKxGI++5V6jiM=
Subject key identifier: 4C:B5:BD:93:D4:F7:E3:EF:D1:81:69:9A:AB:6C:50:D0:12:65:C9:D2
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019E2FFBE172FB2F9F33AD875761D8FF8336
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/TLW9k9T34-_RgWmaq2xQ0BJlydI.roa
Signing time: Sat 16 May 2026 08:51:36 +0000
ROA not before: Sat 16 May 2026 08:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 5.178.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jun 2026 16:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:fb:e1:72:fb:2f:9f:33:ad:87:57:61:d8:ff:83:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: May 16 08:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cb5bd93d4f7e3efd181699aab6c50d01265c9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:f3:40:8a:16:31:a4:0c:4f:db:fc:87:89:
82:91:e2:04:57:dd:43:c4:3a:6a:d1:2b:12:1e:49:
95:33:d7:75:6b:3a:b5:26:72:9d:0e:ff:a3:b2:20:
43:c3:d0:ae:93:a3:80:8a:2b:8f:d2:71:e5:e8:41:
1c:98:8f:4a:6e:81:0d:36:05:95:db:72:18:80:e5:
73:9b:92:9f:10:58:0f:d5:95:62:4b:e0:21:f2:fa:
c2:fd:ff:72:3c:9d:48:a8:d3:1f:9a:5c:2a:50:0f:
0d:05:48:7a:04:47:1b:7f:de:66:9c:4f:15:55:11:
69:41:81:0e:d6:8f:da:f8:78:0e:8f:b3:cd:22:e9:
e6:bd:20:f9:ed:c8:c7:fd:41:6c:ec:5a:43:bb:b7:
00:06:c7:ee:62:d9:1a:34:6e:8e:14:f8:3b:af:4d:
3e:9d:fd:13:6b:bc:fe:b2:32:8f:5d:69:cb:17:59:
38:40:02:c4:02:59:2c:ee:b2:7e:d4:df:9e:1a:a2:
4a:7b:b7:36:9a:cc:8a:11:02:99:11:4c:55:d6:fc:
5a:ce:e5:5b:d1:e0:a6:1e:2b:b8:8c:b7:b7:9d:ed:
e1:1d:ab:bb:f9:f9:2c:3b:ee:97:42:05:ab:5a:d6:
2d:87:f7:03:2b:85:bd:ee:3f:5c:6a:a4:39:39:a3:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B5:BD:93:D4:F7:E3:EF:D1:81:69:9A:AB:6C:50:D0:12:65:C9:D2
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/TLW9k9T34-_RgWmaq2xQ0BJlydI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.108.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b3:52:9f:89:54:64:93:e4:d1:10:a0:23:8e:bf:6c:6f:ec:
1a:31:bb:b3:c7:96:00:a2:93:ae:f8:12:91:51:fb:a4:48:1e:
08:47:fd:37:77:93:dd:7d:ee:46:86:b7:4b:db:c6:5b:81:f8:
9f:b1:3c:35:9b:b9:09:ce:ba:3d:6e:21:e9:3f:77:52:0f:cf:
78:d9:95:f1:91:12:df:27:1e:18:54:49:5e:70:f3:0d:ed:2e:
67:a2:ff:f3:83:85:c1:63:a1:cb:67:4e:2e:c0:aa:54:f6:ce:
ad:62:0e:a2:db:6a:c1:77:da:c7:0e:3a:14:20:da:0f:6d:33:
1e:d0:a5:52:39:f2:f3:01:5d:12:c9:e5:54:64:b7:db:8d:73:
24:c6:58:9b:3a:de:6c:b8:d6:4f:5d:58:1e:b3:38:df:c4:a5:
86:c4:78:1c:3d:37:e4:3f:94:28:c6:72:c0:b1:3f:d8:49:1a:
57:6a:61:8c:46:ce:41:bc:8e:24:09:14:be:cf:86:aa:8a:0a:
5a:c5:13:46:43:d0:f6:f4:79:bb:b3:1b:3a:59:1d:87:93:3b:
9d:87:e0:29:9a:58:e6:fc:eb:76:5e:9b:21:b2:bd:ce:c8:c6:
d2:67:cd:2f:7d:da:af:8b:25:47:b1:42:26:d0:fc:6b:40:6a:
ca:ab:9c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 06:15:27 2026 by rpki-client