Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/kxgtEuPeUxBJLa-PdPFQ6nQfxfk.roa
File: kxgtEuPeUxBJLa-PdPFQ6nQfxfk.roa (raw, json)
Hash identifier: R/3O4MOrlRi+nFJ93OmcP5A5+7ikmNN0tEKYRhHYYC8=
Subject key identifier: 93:18:2D:12:E3:DE:53:10:49:2D:AF:8F:74:F1:50:EA:74:1F:C5:F9
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019F7E15EE21C016D99676C9CC9D20A66EB2
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/kxgtEuPeUxBJLa-PdPFQ6nQfxfk.roa
Signing time: Mon 20 Jul 2026 05:53:14 +0000
ROA not before: Mon 20 Jul 2026 05:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 212.66.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jul 2026 12:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:15:ee:21:c0:16:d9:96:76:c9:cc:9d:20:a6:6e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Jul 20 05:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93182d12e3de5310492daf8f74f150ea741fc5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c7:bb:35:5a:d7:6b:63:72:35:89:7c:b8:06:
d5:c8:2d:e2:90:26:f3:cb:aa:93:62:64:c8:84:cd:
53:50:3e:db:ad:4b:7c:74:90:30:95:e2:a3:b1:e7:
7d:98:e3:ba:b5:3a:1d:df:67:fe:5e:67:21:04:5b:
89:9b:e5:ec:e4:b1:ac:32:30:c2:58:d5:75:c1:b1:
d8:1f:f4:6e:eb:99:c3:d1:7f:3e:88:21:da:38:ad:
db:8b:92:fe:71:2c:d5:c5:d3:6e:d1:2a:66:23:ec:
d7:92:fa:ed:15:29:c3:08:24:96:86:ff:d2:4b:c2:
44:ad:26:9e:5c:d9:c5:d4:42:36:2f:0e:d0:34:bc:
8d:80:ef:25:68:5f:6c:2f:d9:62:c5:e6:b2:ea:7e:
8c:3c:cf:20:46:24:45:07:7a:77:3e:75:83:6c:45:
52:0f:d0:73:09:bf:67:6e:c6:7e:f8:50:0d:92:7a:
d0:26:ee:7d:fc:71:a2:e5:33:04:ea:fa:e9:c3:c3:
7a:7f:af:42:b1:55:43:d4:c7:42:3f:be:f5:ae:04:
d4:fb:4d:cc:88:f0:81:ba:61:43:72:9e:a7:bd:b3:
d6:76:f9:82:e9:df:6e:f1:c5:f5:cb:de:96:fd:58:
91:64:a5:27:84:a1:5f:01:0f:e6:b9:63:43:38:f8:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:18:2D:12:E3:DE:53:10:49:2D:AF:8F:74:F1:50:EA:74:1F:C5:F9
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/kxgtEuPeUxBJLa-PdPFQ6nQfxfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.50.0/24
Signature Algorithm: sha256WithRSAEncryption
84:54:90:6e:3e:e3:f4:98:fb:43:5d:1d:ef:42:b4:c1:18:1b:
85:5e:87:44:6c:0d:95:f0:c9:3f:8c:e8:88:29:cb:3d:91:56:
27:0f:f6:c8:a5:95:44:6c:20:b7:7a:f1:51:d8:ce:35:38:ff:
d1:6d:04:f9:37:8a:76:52:02:c5:89:e3:50:1b:ad:39:01:96:
0d:df:98:a9:e7:59:29:e4:9f:bd:f9:67:75:0a:1c:ab:33:1d:
ef:9e:d1:8b:b2:a3:e6:a3:a2:e9:a3:99:85:e8:00:ad:cd:a3:
de:1f:8f:05:c1:39:d9:50:a6:5a:f7:9e:21:15:54:87:72:b9:
f9:d4:a7:3b:20:26:83:31:e9:c3:bc:36:f2:c5:61:e7:27:54:
24:f8:a0:1e:87:df:d4:fa:83:95:69:09:bd:a5:22:b9:53:ff:
57:4a:7e:ec:26:90:3a:f7:a1:16:cd:28:25:17:e5:7d:a0:21:
4a:e2:b6:7f:24:28:0c:f8:79:26:ef:f6:af:3e:e2:d1:fd:0d:
2a:89:bf:ec:fa:b5:92:ef:d8:57:71:3f:5a:da:99:90:f4:84:
f7:3a:42:95:fc:02:66:b1:e4:75:70:1d:14:71:10:84:66:ef:
bf:f1:7c:8f:75:a3:00:f9:b5:32:08:26:51:25:5b:2c:fe:7b:
a6:d5:b2:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9+Fe4hwBbZlnbJzJ0gpm6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy
YzgxZDUwHhcNMjYwNzIwMDU1MzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzE4MmQxMmUzZGU1MzEwNDkyZGFmOGY3NGYxNTBlYTc0MWZjNWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88e7NVrXa2NyNYl8uAbVyC3ikCbz
y6qTYmTIhM1TUD7brUt8dJAwleKjsed9mOO6tTod32f+XmchBFuJm+Xs5LGsMjDC
WNV1wbHYH/Ru65nD0X8+iCHaOK3bi5L+cSzVxdNu0SpmI+zXkvrtFSnDCCSWhv/S
S8JErSaeXNnF1EI2Lw7QNLyNgO8laF9sL9lixeay6n6MPM8gRiRFB3p3PnWDbEVS
D9BzCb9nbsZ++FANknrQJu59/HGi5TME6vrpw8N6f69CsVVD1MdCP771rgTU+03M
iPCBumFDcp6nvbPWdvmC6d9u8cX1y96W/ViRZKUnhKFfAQ/muWNDOPgYlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJMYLRLj3lMQSS2vj3TxUOp0H8X5MB8GA1UdIwQY
MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt
OWZlYmY4YzNlMzNmLzEva3hndEV1UGVVeEJKTGEtUGRQRlE2blFmeGZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm
LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EIyMA0G
CSqGSIb3DQEBCwUAA4IBAQCEVJBuPuP0mPtDXR3vQrTBGBuFXodEbA2V8Mk/jOiI
Kcs9kVYnD/bIpZVEbCC3evFR2M41OP/RbQT5N4p2UgLFieNQG605AZYN35ip51kp
5J+9+Wd1ChyrMx3vntGLsqPmo6Lpo5mF6ACtzaPeH48FwTnZUKZa954hFVSHcrn5
1Kc7ICaDMenDvDbyxWHnJ1Qk+KAeh9/U+oOVaQm9pSK5U/9XSn7sJpA696EWzSgl
F+V9oCFK4rZ/JCgM+Hkm7/avPuLR/Q0qib/s+rWS79hXcT9a2pmQ9IT3OkKV/AJm
seR1cB0UcRCEZu+/8XyPdaMA+bUyCCZRJVss/num1bI7
-----END CERTIFICATE-----
Generated at Tue Jul 21 03:24:40 2026 by rpki-client