Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/K6nGuQ7sTdl4N1f8uzaEzRkpAWQ.roa
File: K6nGuQ7sTdl4N1f8uzaEzRkpAWQ.roa (raw, json)
Hash identifier: uqsNiEmxN4U82zFPYJJasjBeXrwMMmWVeIPyTF+XcPI=
Subject key identifier: 2B:A9:C6:B9:0E:EC:4D:D9:78:37:57:FC:BB:36:84:CD:19:29:01:64
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F1E56F9972BA45B69B46AF00F10E8E0A6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/K6nGuQ7sTdl4N1f8uzaEzRkpAWQ.roa
Signing time: Wed 01 Jul 2026 15:40:44 +0000
ROA not before: Wed 01 Jul 2026 15:40:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 89.125.40.0/21 maxlen: 21
89.125.141.0/24 maxlen: 24
89.125.164.0/24 maxlen: 24
89.125.184.0/24 maxlen: 24
208.123.184.0/24 maxlen: 24
208.123.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jul 2026 04:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:56:f9:97:2b:a4:5b:69:b4:6a:f0:0f:10:e8:e0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 1 15:40:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ba9c6b90eec4dd9783757fcbb3684cd19290164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:ea:78:ec:51:c5:07:bd:1f:30:60:c6:cf:
62:4b:fe:f0:92:cd:f7:33:bd:ef:ee:52:3f:81:39:
09:ca:0e:28:eb:4a:a9:de:49:d1:85:37:1d:4d:13:
dc:b1:f5:d3:17:24:e1:d2:ac:8d:e7:70:c2:20:d5:
8e:15:55:50:85:24:f2:2c:65:e5:a0:70:eb:b3:0e:
ac:be:6a:6e:36:58:a5:56:18:e9:08:8b:ca:06:77:
3c:54:30:8f:10:56:cb:7a:f9:70:89:b0:4e:59:b2:
7f:f7:ab:de:68:43:eb:1d:3f:39:40:cb:c2:9a:17:
1c:b9:79:d0:2b:57:e2:54:dd:eb:eb:71:28:f7:43:
da:f0:c4:f5:79:7c:3f:e8:b2:8e:13:d2:cc:30:0f:
dc:99:e2:e8:9a:86:ef:cf:0f:8a:88:f3:94:e8:ea:
5b:fb:f4:b4:ae:53:1d:b4:cf:9b:51:5a:24:df:e4:
3d:62:6b:77:28:2b:b0:3e:22:01:f5:dd:d6:63:0a:
60:3b:cc:3b:3a:40:e0:e0:50:1c:0e:87:13:20:e8:
ab:90:01:70:d1:a6:17:ce:37:ae:f1:a3:74:33:c1:
58:43:e1:ad:8d:6a:74:2d:13:eb:43:1a:79:c9:e9:
b5:8e:f3:97:e4:82:87:8c:e5:0b:52:01:b7:86:07:
ba:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A9:C6:B9:0E:EC:4D:D9:78:37:57:FC:BB:36:84:CD:19:29:01:64
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/K6nGuQ7sTdl4N1f8uzaEzRkpAWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.40.0/21
89.125.141.0/24
89.125.164.0/24
89.125.184.0/24
208.123.184.0/24
208.123.186.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:64:71:4b:ce:32:8b:3c:c0:98:29:b2:64:23:0d:08:37:64:
1b:d2:ff:68:14:17:9f:66:ea:41:d8:47:9b:3a:90:ed:3f:b3:
e3:b0:7a:6c:28:90:d0:03:3e:a5:b1:78:33:d4:4e:7c:a1:3b:
13:7c:08:42:89:51:4b:e7:27:12:da:a8:0a:db:10:23:61:d9:
76:ad:c5:93:69:d0:70:94:51:a7:68:58:3b:cf:13:e7:94:66:
3e:30:95:6a:d9:9a:68:44:4e:5d:cb:ba:c1:a2:d6:33:53:0f:
6f:85:c2:37:21:43:af:86:aa:30:57:a4:52:da:3e:36:75:3b:
e1:07:9b:39:90:f6:1c:bf:c8:fe:86:85:a9:2b:93:ca:41:be:
59:5a:6a:39:01:7e:20:1f:23:c3:4d:48:40:5c:2b:fe:24:08:
34:d4:39:97:2d:e8:24:da:6c:b8:39:4f:c3:7b:da:5f:87:c3:
1d:f6:63:e3:c6:aa:e5:db:e1:1f:cc:47:8f:08:e3:25:60:a8:
cc:07:e7:a7:4c:49:ef:dd:ea:a5:17:e6:b9:7e:d2:b0:44:5d:
43:95:6e:00:2b:96:53:27:cc:5e:52:0e:75:64:93:f3:47:a7:
d3:60:da:e7:58:1b:2e:00:6f:29:42:fc:c4:40:1f:af:95:4f:
d5:30:50:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:49 2026 by rpki-client