Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HJyP4MEYpViJy_vBz6_Af3BLDyI.roa
File: HJyP4MEYpViJy_vBz6_Af3BLDyI.roa (raw, json)
Hash identifier: Q4QogDckqYpvfski15a/Ri6QDvkFavAVvVdU15I8gyU=
Subject key identifier: 1C:9C:8F:E0:C1:18:A5:58:89:CB:FB:C1:CF:AF:C0:7F:70:4B:0F:22
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A141C78EB50DED141D162252CB076C718F
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HJyP4MEYpViJy_vBz6_Af3BLDyI.roa
Signing time: Thu 15 Oct 2026 22:55:59 +0000
ROA not before: Thu 15 Oct 2026 22:55:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 91.212.229.0/24 maxlen: 24
146.19.188.0/24 maxlen: 24
194.61.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Oct 2026 12:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:c7:8e:b5:0d:ed:14:1d:16:22:52:cb:07:6c:71:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 15 22:55:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c9c8fe0c118a55889cbfbc1cfafc07f704b0f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:d7:f1:d1:90:7b:85:90:de:72:60:93:05:
cb:17:6d:74:7d:ac:d4:5d:a5:31:6f:08:c3:0d:36:
4c:a2:dc:69:b5:dd:31:4a:50:7f:b9:72:19:4f:a9:
49:a0:fc:d5:21:79:b6:bc:34:a5:67:7b:6a:52:a1:
16:5b:39:69:e9:65:96:46:13:9a:49:1f:17:e5:c6:
7d:98:68:0f:33:0a:0b:70:30:45:29:ee:5b:ce:30:
38:18:8f:14:c0:a5:1f:f1:d6:46:b4:73:6c:69:5d:
b4:a4:1d:8c:8a:fb:9b:56:f0:4f:7a:cd:20:21:ef:
3a:92:c0:a4:d6:9f:5a:75:7b:a7:a3:c2:6a:fd:dc:
c9:03:3c:39:19:2a:66:12:8b:4e:3f:72:83:e5:12:
50:e7:1a:7d:82:a8:bf:8c:3f:45:08:cd:ab:c9:95:
5e:fa:17:96:9e:7e:9d:ad:95:e1:73:46:27:b6:b8:
ab:1f:0f:76:e9:48:db:fd:62:6a:20:a2:f7:c0:06:
de:7b:5e:ff:a6:44:e7:4b:22:37:57:c4:9f:9e:af:
da:52:ed:6d:5b:41:8c:cd:4f:01:f9:58:ec:34:5d:
10:1f:12:c3:ab:d8:fb:6f:f8:4c:2f:be:02:d1:49:
b9:68:e4:89:a2:ef:b9:4d:b4:de:62:2c:65:a7:42:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9C:8F:E0:C1:18:A5:58:89:CB:FB:C1:CF:AF:C0:7F:70:4B:0F:22
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HJyP4MEYpViJy_vBz6_Af3BLDyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.229.0/24
146.19.188.0/24
194.61.9.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ad:96:ce:dd:72:c4:a2:2a:cf:e4:7b:29:c5:00:b1:ba:11:
47:64:f9:99:75:66:f5:f3:97:8d:16:20:00:cb:27:0f:46:2f:
f4:8a:e5:ec:6d:a8:41:67:ca:c4:f0:88:8a:43:a3:4a:cb:d1:
1e:ed:71:51:30:1d:bf:8a:0d:85:6e:08:02:7c:9b:6c:51:c2:
c0:5a:78:d1:58:70:0f:26:74:3a:ef:b6:c0:45:47:39:0a:00:
2a:2e:bc:7c:56:11:07:64:36:48:1e:32:32:2b:ee:eb:c7:08:
d7:79:9a:ea:4a:01:e1:d7:5a:85:7d:3f:ed:c6:2f:aa:d8:da:
08:bd:2c:87:6b:72:c6:11:e2:dd:89:af:ff:d3:c1:20:51:bd:
df:01:a7:84:4c:23:a3:57:59:4d:98:5a:b1:9a:38:a5:ab:98:
43:e1:13:66:df:ef:20:70:59:d3:83:75:07:e5:87:a1:44:19:
ab:86:46:19:53:68:32:f0:c8:9c:ea:10:e5:63:be:5d:29:71:
09:55:07:cb:d2:55:5a:74:ba:65:d6:61:82:64:12:2b:22:c3:
29:4e:4c:cd:04:1c:bf:89:30:16:f8:75:3e:cb:06:0c:4a:32:
1c:58:35:28:2c:c8:c8:84:a2:c1:cc:1b:68:05:02:b7:2e:32:
f3:23:de:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:02:19 2026 by rpki-client