Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/nBC4KmGFkUcA0DigvM-7jYDtc20.roa
File: nBC4KmGFkUcA0DigvM-7jYDtc20.roa (raw, json)
Hash identifier: vFL7PS2t986ubWWCmuuIn97zWq7fp/oPB9NajkXlDew=
Subject key identifier: 9C:10:B8:2A:61:85:91:47:00:D0:38:A0:BC:CF:BB:8D:80:ED:73:6D
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A00A7AFFB9957EC4BD118E277ECA4012B4
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/nBC4KmGFkUcA0DigvM-7jYDtc20.roa
Signing time: Sun 16 Aug 2026 12:10:28 +0000
ROA not before: Sun 16 Aug 2026 12:10:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 109.66.165.0/24 maxlen: 24
109.66.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Aug 2026 13:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:7a:ff:b9:95:7e:c4:bd:11:8e:27:7e:ca:40:12:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 16 12:10:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c10b82a6185914700d038a0bccfbb8d80ed736d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:14:e4:98:33:53:30:7a:d7:b2:6b:01:d9:
58:31:dc:8f:85:76:71:cc:b3:37:24:72:ab:23:73:
d1:ec:1a:fc:4a:ec:28:07:cf:c4:d5:af:35:87:1b:
70:28:06:f1:5f:e1:25:73:91:7c:48:de:c7:15:83:
81:54:77:27:22:33:b3:44:e4:5a:6c:b9:c6:28:1e:
65:d4:06:16:be:b1:cc:f1:37:bb:5a:31:83:0c:d6:
cd:a9:cf:aa:c5:d6:bf:85:82:50:37:ec:2d:f5:53:
57:93:13:26:b6:71:2d:28:bc:12:c1:b4:ce:2d:95:
45:e3:97:49:d1:21:6c:00:12:c4:9a:a2:72:92:d4:
7d:71:4b:52:e6:61:ac:b0:ae:0e:d4:19:de:38:83:
73:0f:00:55:1c:a7:64:ec:f8:20:23:49:66:fc:47:
7a:68:06:f8:1f:e5:ad:bd:f2:4b:be:34:15:1b:e4:
33:bb:b5:44:de:ad:0a:37:11:10:10:1a:1d:09:24:
e8:18:05:d7:67:64:30:db:22:ee:5d:f8:cd:c7:83:
53:d3:7c:44:00:45:89:0a:16:ce:ae:3d:5c:c0:7d:
c1:90:af:1a:e6:c2:e9:b2:ed:db:17:29:7f:b6:8d:
5f:ae:48:91:e9:a0:c1:4a:a2:c7:15:67:ca:00:c1:
dd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:10:B8:2A:61:85:91:47:00:D0:38:A0:BC:CF:BB:8D:80:ED:73:6D
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/nBC4KmGFkUcA0DigvM-7jYDtc20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.165.0/24
109.66.198.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e8:a9:5f:54:58:b9:10:fd:5b:33:0b:92:a6:33:06:c7:b2:
59:47:80:a7:cb:b0:4d:c7:14:5a:78:1e:03:78:8e:15:23:9b:
c0:4f:b7:51:f7:31:ed:ac:07:e2:00:18:df:b3:50:6e:f7:f3:
38:43:e4:dd:59:1f:7a:dc:6b:1b:9c:43:54:69:62:72:33:2f:
0f:0c:29:d1:db:16:ba:1b:5f:d8:6a:27:18:e1:bc:8b:d9:d2:
0a:cf:d4:4b:8e:07:00:19:e1:77:84:6b:ed:43:b4:e9:f8:38:
54:05:91:0d:ff:eb:bf:4f:b4:d2:d8:57:61:91:e8:a6:4a:38:
b9:8e:2c:be:cf:70:fc:02:03:fd:2e:28:42:41:29:9f:c8:15:
23:2c:16:85:08:66:3f:20:b5:12:69:88:4b:04:02:06:1a:e4:
9f:33:4a:50:01:cb:ae:26:9d:2d:f6:39:e1:e3:b3:36:bc:50:
d7:e4:c0:96:0d:c3:c8:68:e7:38:04:a2:f9:fa:1f:e8:55:de:
5e:38:10:ca:12:27:73:07:90:84:6e:e7:6b:59:a5:b6:90:2a:
ea:aa:47:9b:29:e4:f6:d3:55:17:6a:7b:2e:3b:03:e4:f1:32:
b2:f1:af:80:6e:aa:08:91:4e:86:01:38:27:ed:64:48:34:88:
cb:ee:50:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:34 2026 by rpki-client