Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5nOgfZabBblFi6veiqSNfz293As.roa
File: 5nOgfZabBblFi6veiqSNfz293As.roa (raw, json)
Hash identifier: jry6gxUGn4HZJIHfJWYUcmm2FBzSK4g8IBizThrPiZ8=
Subject key identifier: E6:73:A0:7D:96:9B:05:B9:45:8B:AB:DE:8A:A4:8D:7F:3D:BD:DC:0B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FF5E4AAABE320A6154C3119126B7E7609
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5nOgfZabBblFi6veiqSNfz293As.roa
Signing time: Wed 12 Aug 2026 12:13:51 +0000
ROA not before: Wed 12 Aug 2026 12:13:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219153
IP address blocks: 78.17.218.0/23 maxlen: 23
78.17.238.0/23 maxlen: 23
78.17.248.0/23 maxlen: 23
78.17.250.0/23 maxlen: 23
89.125.190.0/23 maxlen: 23
89.125.230.0/23 maxlen: 23
162.35.232.0/23 maxlen: 23
162.35.234.0/23 maxlen: 23
162.35.236.0/23 maxlen: 23
162.35.238.0/23 maxlen: 23
162.35.240.0/23 maxlen: 23
162.35.250.0/23 maxlen: 23
162.35.254.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 22 Aug 2026 09:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:e4:aa:ab:e3:20:a6:15:4c:31:19:12:6b:7e:76:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 12 12:13:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e673a07d969b05b9458babde8aa48d7f3dbddc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:ed:d5:3d:11:d3:7a:8f:62:ac:cd:95:ea:
55:9d:c9:9c:8c:9d:e7:31:de:60:05:2a:fa:7b:52:
dc:9a:c6:ae:22:38:9e:b3:f1:53:0a:23:72:6b:3c:
3b:4f:c1:c7:c4:b6:3d:a5:a7:4f:9d:70:22:50:2d:
13:a6:fe:f2:ac:28:cd:b2:7c:4d:e3:33:45:4a:df:
86:e6:02:c1:02:c9:a0:c3:0b:8f:c1:a9:45:7e:a1:
5e:f4:7c:2e:57:4a:92:f0:c8:2b:28:fd:a9:98:9c:
32:5a:c7:d0:42:c6:60:33:61:bf:ad:6a:42:a9:9c:
e6:8d:cc:60:5f:69:e5:3b:1e:3f:2c:61:48:de:21:
9b:0f:43:c0:7b:ab:48:62:05:fc:28:6b:81:50:a4:
e5:db:75:70:56:3d:9d:ef:ee:49:a3:e8:ef:6c:4e:
f5:4f:a5:5b:a7:b8:39:5c:0e:02:4f:15:19:d9:d9:
41:ec:14:b3:0d:1c:b2:5b:74:d4:f1:7e:ef:ad:37:
d6:93:c4:06:28:0e:16:6a:53:ca:e4:05:15:48:a2:
b9:56:54:f0:2b:6c:17:26:fc:b0:a7:d7:3e:90:6f:
7a:c2:b9:2c:2e:90:2a:1b:1d:53:10:1f:30:80:26:
62:f3:e8:a0:e1:f4:40:1e:4a:0c:c4:22:b8:8e:47:
9c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:73:A0:7D:96:9B:05:B9:45:8B:AB:DE:8A:A4:8D:7F:3D:BD:DC:0B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5nOgfZabBblFi6veiqSNfz293As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.218.0/23
78.17.238.0/23
78.17.248.0/22
89.125.190.0/23
89.125.230.0/23
162.35.232.0-162.35.241.255
162.35.250.0/23
162.35.254.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:cc:e3:9f:17:6c:68:ae:74:e8:ed:e7:d5:1d:72:30:10:e2:
eb:57:4b:37:c9:23:32:3e:0a:70:2f:a6:df:23:97:a4:61:2a:
ed:84:50:4e:e6:56:08:31:2c:fb:b5:c6:86:df:e3:94:f3:46:
64:af:6c:48:17:38:e2:53:43:e9:ad:31:f9:3d:22:43:f3:df:
04:07:f0:7a:4b:b0:d3:8c:7f:cc:7c:72:9c:ea:59:2c:99:87:
6d:6c:a6:49:21:6b:95:b3:b5:40:2e:a1:a1:32:4e:60:78:09:
00:36:51:75:e6:e3:67:85:bf:fb:21:50:33:8c:ee:c5:f3:53:
2a:b9:40:49:77:db:c3:54:62:97:a5:e3:e1:a7:e8:91:37:e2:
e0:4a:55:bb:54:9b:ce:17:7a:78:75:4a:ac:be:9f:ac:55:20:
b6:29:cf:1d:0e:eb:11:f5:35:0e:0f:98:e2:23:a9:58:6c:0a:
e5:96:08:c5:18:05:23:36:77:cd:eb:2d:04:43:37:b9:1b:2a:
5b:62:14:06:53:5c:55:ff:a3:50:b3:82:22:a2:38:f7:72:b4:
b3:84:2b:0b:e4:d4:ce:83:6f:76:a1:82:bb:72:fd:32:c2:27:
c2:e5:b7:f9:76:a5:20:49:a8:ec:5c:56:a5:ec:ed:d8:41:52:
3c:03:7d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:12 2026 by rpki-client