Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/I7SukZbR7eZ3uhc7eBJeucWPFk8.roa
File: I7SukZbR7eZ3uhc7eBJeucWPFk8.roa (raw, json)
Hash identifier: WAp+Pnl9h2gvGf5v1W2POQc8++wZ+yN6Z0kgqKnF5YY=
Subject key identifier: 23:B4:AE:91:96:D1:ED:E6:77:BA:17:3B:78:12:5E:B9:C5:8F:16:4F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FB1D10A52A5204D3D4F8AD82E2C74C931
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/I7SukZbR7eZ3uhc7eBJeucWPFk8.roa
Signing time: Thu 30 Jul 2026 06:58:14 +0000
ROA not before: Thu 30 Jul 2026 06:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 153.76.196.0/24 maxlen: 24
153.76.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Aug 2026 08:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:d1:0a:52:a5:20:4d:3d:4f:8a:d8:2e:2c:74:c9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 30 06:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23b4ae9196d1ede677ba173b78125eb9c58f164f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:3d:9a:1c:48:6d:42:ad:58:36:55:e0:40:
32:b2:4f:ca:89:81:23:61:2d:21:ae:bc:18:51:d2:
eb:d5:ad:de:12:da:f6:e2:2b:1c:42:1d:69:47:3b:
a8:4f:41:9d:15:6c:f5:21:eb:89:d3:74:fa:3e:1f:
c5:a8:b6:bc:84:15:ae:23:6e:20:ea:03:6e:7a:0f:
35:6a:09:a2:ae:7e:9b:00:71:12:aa:cb:c7:94:12:
8e:f0:be:ec:5f:4a:3b:c2:7e:2c:71:65:43:b5:2a:
3e:f3:eb:1a:2e:23:be:d9:72:39:a8:cf:9e:3d:c1:
71:66:c5:7c:92:48:3e:2b:f3:60:8d:80:ec:ff:9c:
4f:17:5f:76:91:1f:5b:51:45:c3:65:59:fc:3f:68:
21:ca:bf:a5:af:c7:d9:92:87:4d:e1:ea:2f:2a:9a:
59:9f:43:83:e3:2a:3c:f4:f7:dd:e8:52:46:86:5a:
8b:ed:44:e9:11:19:5c:57:50:9c:97:50:e8:ce:7d:
77:b9:76:73:ed:d6:15:17:88:db:91:52:34:09:f3:
1c:83:09:50:1c:80:42:1d:ab:5a:af:1d:09:f7:6a:
d5:bb:02:5d:f1:1d:86:32:32:cf:75:26:2e:68:cb:
ce:7c:2a:b1:e8:cd:df:2b:22:50:f3:6c:b6:82:74:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B4:AE:91:96:D1:ED:E6:77:BA:17:3B:78:12:5E:B9:C5:8F:16:4F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/I7SukZbR7eZ3uhc7eBJeucWPFk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.196.0/24
153.76.211.0/24
Signature Algorithm: sha256WithRSAEncryption
84:fd:28:00:f1:8e:15:d4:b2:62:a8:8f:91:54:9f:4d:bc:33:
92:0a:7e:50:4b:c3:1f:f5:1e:99:1f:26:0b:54:7b:6c:a4:71:
55:ee:6e:24:55:b2:db:46:e1:6f:c0:f6:9e:4f:d3:58:d5:dc:
68:18:68:4b:e6:da:24:0c:8b:c3:7b:57:ed:d1:77:e1:4f:0d:
46:ff:4b:36:06:6e:d9:5c:32:6e:25:24:b3:eb:9a:3b:74:ff:
39:70:1f:ca:38:85:b3:2a:f6:23:c9:38:e2:8a:ab:05:9b:3b:
b2:e0:d8:8f:8c:a1:07:92:3a:f7:75:3d:1b:45:cf:40:b2:06:
34:cf:e6:81:49:ca:ea:fb:41:3b:f3:6c:6c:fc:f9:78:cf:51:
37:5d:a1:be:41:a1:87:05:d5:1e:5a:8f:c1:1f:cc:42:e7:a7:
77:c5:78:6c:94:98:9e:ac:ed:cc:5b:1f:d9:4e:3c:6c:4f:07:
2b:21:59:83:78:b5:b0:59:b4:bd:28:99:9a:89:55:22:ff:63:
24:4e:da:41:63:76:73:05:52:b8:71:76:89:09:e2:f0:eb:44:
2a:cf:9b:41:4c:93:ab:24:09:29:ac:bd:f3:96:9c:76:2e:46:
8e:47:e6:4a:8a:61:88:e2:e1:26:1e:1a:6d:6c:9f:dd:94:13:
fe:7a:73:0f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+x0QpSpSBNPU+K2C4sdMkxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwNzMwMDY1ODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2I0YWU5MTk2ZDFlZGU2NzdiYTE3M2I3ODEyNWViOWM1OGYxNjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsU9mhxIbUKtWDZV4EAysk/KiYEj
YS0hrrwYUdLr1a3eEtr24iscQh1pRzuoT0GdFWz1IeuJ03T6Ph/FqLa8hBWuI24g
6gNueg81agmirn6bAHESqsvHlBKO8L7sX0o7wn4scWVDtSo+8+saLiO+2XI5qM+e
PcFxZsV8kkg+K/NgjYDs/5xPF192kR9bUUXDZVn8P2ghyr+lr8fZkodN4eovKppZ
n0OD4yo89Pfd6FJGhlqL7UTpERlcV1Ccl1Dozn13uXZz7dYVF4jbkVI0CfMcgwlQ
HIBCHatarx0J92rVuwJd8R2GMjLPdSYuaMvOfCqx6M3fKyJQ82y2gnRKSwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCO0rpGW0e3md7oXO3gSXrnFjxZPMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvSTdTdWtaYlI3ZVozdWhjN2VCSmV1Y1dQRms4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmUzEAwQA
mUzTMA0GCSqGSIb3DQEBCwUAA4IBAQCE/SgA8Y4V1LJiqI+RVJ9NvDOSCn5QS8Mf
9R6ZHyYLVHtspHFV7m4kVbLbRuFvwPaeT9NY1dxoGGhL5tokDIvDe1ft0XfhTw1G
/0s2Bm7ZXDJuJSSz65o7dP85cB/KOIWzKvYjyTjiiqsFmzuy4NiPjKEHkjr3dT0b
Rc9AsgY0z+aBScrq+0E782xs/Pl4z1E3XaG+QaGHBdUeWo/BH8xC56d3xXhslJie
rO3MWx/ZTjxsTwcrIVmDeLWwWbS9KJmaiVUi/2MkTtpBY3ZzBVK4cXaJCeLw60Qq
z5tBTJOrJAkprL3zlpx2LkaOR+ZKimGI4uEmHhptbJ/dlBP+enMP
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:48 2026 by rpki-client