Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/yKCwLoLYr4to8y_tjFrrqdWwVsQ.roa
File: yKCwLoLYr4to8y_tjFrrqdWwVsQ.roa (raw, json)
Hash identifier: wl1a5WN26eiUPfwL0yoU1hXDc4NKdb5+Xq7z2fG84WA=
Subject key identifier: C8:A0:B0:2E:82:D8:AF:8B:68:F3:2F:ED:8C:5A:EB:A9:D5:B0:56:C4
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 01A1590F4033F44E70EAEE2E6A4406E882E8
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/yKCwLoLYr4to8y_tjFrrqdWwVsQ.roa
Signing time: Tue 20 Oct 2026 11:25:34 +0000
ROA not before: Tue 20 Oct 2026 11:25:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196651
IP address blocks: 2a07:291c::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 30 Oct 2026 12:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:0f:40:33:f4:4e:70:ea:ee:2e:6a:44:06:e8:82:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Oct 20 11:25:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8a0b02e82d8af8b68f32fed8c5aeba9d5b056c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:f7:84:3f:1c:09:f8:d0:a5:51:e0:4a:7f:
74:bd:59:3f:ed:c5:9d:25:21:2e:7b:19:18:40:aa:
19:fa:b8:c9:bc:b0:b5:81:13:69:0d:a1:fa:6a:29:
ec:77:e6:0e:d5:84:03:a3:b8:26:45:a7:e9:07:31:
3b:47:af:4d:15:c0:6d:fc:6e:29:cc:66:46:f4:86:
7a:6c:17:04:aa:50:31:6a:be:e4:f5:1a:18:9f:0f:
47:9e:29:06:ec:cc:af:d4:98:d9:47:2a:21:83:7c:
d7:d5:fd:02:d6:63:d7:3e:6e:10:c7:c3:bc:08:02:
ce:3f:16:41:a3:00:9b:e5:ef:50:92:9c:fd:5a:24:
b9:d5:c6:1d:b8:4f:f2:7d:6d:34:4b:78:3f:2a:a1:
a0:30:72:b0:81:37:3f:c0:2d:9f:0c:5f:70:60:36:
94:b1:81:92:e9:81:45:85:58:1f:d4:55:03:f5:9b:
de:4a:a1:79:3e:3f:de:9e:b1:21:6c:14:0c:d6:9b:
4e:0b:61:03:b5:f5:e0:5e:db:74:a1:f1:e2:de:3f:
29:be:77:2d:30:27:41:35:65:06:6b:ae:44:67:aa:
ab:db:9b:e4:39:51:a0:2f:ff:ca:2a:21:ea:0a:71:
38:c7:a0:a3:b1:c1:b1:d6:62:44:29:25:8d:37:11:
98:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A0:B0:2E:82:D8:AF:8B:68:F3:2F:ED:8C:5A:EB:A9:D5:B0:56:C4
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/yKCwLoLYr4to8y_tjFrrqdWwVsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:291c::/32
Signature Algorithm: sha256WithRSAEncryption
4c:68:96:06:d7:5b:00:e9:56:10:bc:be:2b:06:2b:2c:90:e6:
69:f1:ce:28:bf:90:7f:9a:a7:90:44:ce:ee:58:0d:44:44:f3:
dd:be:51:0e:e9:76:c2:29:d0:d4:36:c5:a9:00:28:8f:a8:c9:
1d:04:c8:8a:0f:82:3c:51:37:d0:e2:1e:1c:b2:2e:e6:bd:cb:
da:dd:b3:47:1d:e4:e7:4c:71:b4:a6:d7:c1:62:37:07:4e:68:
33:48:71:53:a6:ec:09:9f:96:55:f5:b9:40:99:61:e1:de:ec:
f5:c3:c4:ef:f6:e8:36:82:c4:26:76:01:6c:bf:ae:b5:16:3b:
4f:79:89:01:df:1c:63:7d:7c:f7:ff:46:67:e4:54:b8:93:b8:
ec:98:58:79:60:e3:10:40:e1:89:ce:7b:46:aa:e1:75:d7:2a:
d1:a8:81:66:4a:1d:07:92:b1:af:ed:f8:88:a6:d9:9e:91:de:
29:4d:9b:f0:31:b2:1d:58:b6:33:ff:ec:24:05:2b:5f:9c:b7:
2c:4b:e8:82:64:01:3b:e3:3a:3b:24:74:02:79:b4:c9:33:73:
a8:ed:b0:16:e0:61:de:13:b0:d2:7d:12:3b:7e:10:fa:ad:dd:
a9:67:5b:5e:09:be:c3:b5:29:06:1e:55:80:0f:56:f9:9a:80:
90:b0:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:41:29 2026 by rpki-client