Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aDQSpRuZC60aqHaik4j9bPgIZWw.roa
File: aDQSpRuZC60aqHaik4j9bPgIZWw.roa (raw, json)
Hash identifier: PoCKQV6hscKZpkvn7ZuRAzRlpmiMusC+QgqgqR6s5y4=
Subject key identifier: 68:34:12:A5:1B:99:0B:AD:1A:A8:76:A2:93:88:FD:6C:F8:08:65:6C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FE12FC2EC68704D7A1920D2C8421C49AB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aDQSpRuZC60aqHaik4j9bPgIZWw.roa
Signing time: Sat 08 Aug 2026 11:43:51 +0000
ROA not before: Sat 08 Aug 2026 11:43:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 104.143.196.0/22 maxlen: 22
104.143.196.0/24 maxlen: 24
104.143.212.0/22 maxlen: 22
104.143.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 20 Aug 2026 18:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:2f:c2:ec:68:70:4d:7a:19:20:d2:c8:42:1c:49:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 8 11:43:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=683412a51b990bad1aa876a29388fd6cf808656c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:52:fc:a7:21:ae:46:c8:ab:b3:8a:10:41:
89:14:ae:c7:87:61:4e:a1:a2:63:03:9b:0c:8a:c2:
5c:28:b6:35:1f:4b:3b:28:4f:7a:5f:52:4e:15:51:
8b:36:c2:2b:89:35:44:af:d6:a8:33:70:6c:59:2f:
d3:b8:1f:16:0a:ea:70:ac:07:77:50:bd:81:83:0f:
ba:6d:dc:b8:b3:e7:55:9e:ab:51:74:f2:35:af:a0:
d3:26:af:74:a2:0b:bf:3c:4f:d6:eb:a3:c8:79:d1:
1a:90:8f:1c:13:36:ac:15:b3:0c:3a:30:a8:17:12:
60:f0:99:d5:5f:e6:d0:46:40:77:16:ad:e3:24:21:
85:4c:64:97:65:8e:b3:56:f8:16:9d:a9:0a:75:b5:
7a:fe:5d:f4:40:c7:c8:3c:be:5b:87:e7:29:fd:cd:
d0:5b:17:3d:9c:b0:dd:8a:43:9c:38:ee:45:88:81:
c5:b3:f2:d6:cb:0b:6a:e4:2b:23:d8:10:3f:b5:97:
c3:0c:75:bb:25:88:40:33:00:04:39:c1:af:31:87:
ee:4a:65:02:25:89:6c:be:08:c5:35:1b:4b:56:2e:
51:6f:a9:ae:63:7f:4a:f8:76:bc:8f:80:17:f4:b7:
0f:f8:b8:d8:22:9c:5a:87:c5:87:09:8d:99:a4:00:
ab:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:34:12:A5:1B:99:0B:AD:1A:A8:76:A2:93:88:FD:6C:F8:08:65:6C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aDQSpRuZC60aqHaik4j9bPgIZWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.143.196.0/22
104.143.212.0/22
104.143.220.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:9b:81:bb:8e:b1:77:05:c6:37:60:f2:e4:0c:38:8b:ef:60:
d3:cd:2b:89:ac:29:84:d7:92:d4:de:79:a0:bb:fe:e2:e7:78:
90:55:ae:41:36:0b:b0:dc:ab:62:72:d2:0b:17:ba:20:4b:94:
23:0f:b9:c8:8b:7f:88:22:17:9a:3e:d8:09:28:8b:9a:1e:75:
42:3c:41:5d:50:98:23:c6:dd:5b:72:b8:c4:4a:2a:10:8f:50:
76:cc:4c:34:43:0a:93:1e:aa:c4:2c:0b:81:cb:f1:6d:c9:b2:
c8:65:a0:43:35:71:19:50:bc:bb:94:55:33:99:6e:e4:57:bd:
ec:ac:66:ad:59:4a:c0:c1:22:86:9a:89:10:91:49:15:cc:71:
34:e8:33:44:11:00:f8:85:57:99:ba:6e:3f:50:66:c3:80:34:
e5:58:a8:ac:e4:80:f2:5d:69:45:70:77:f5:36:df:cf:79:35:
92:63:a9:2d:1f:81:79:d0:25:3e:1b:a1:eb:0e:01:df:a3:ca:
03:aa:20:40:dd:33:11:c6:2e:99:0e:fa:3a:27:c1:d5:a6:e5:
14:a5:2e:97:65:6b:44:2b:64:39:6c:cb:e9:b8:a6:21:04:a2:
79:bc:4b:b8:21:1b:f2:20:39:95:86:57:77:b4:8e:7f:13:f4:
89:dd:fa:33
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ/hL8LsaHBNehkg0shCHEmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwODA4MTE0MzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODM0MTJhNTFiOTkwYmFkMWFhODc2YTI5Mzg4ZmQ2Y2Y4MDg2NTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNFS/KchrkbIq7OKEEGJFK7Hh2FO
oaJjA5sMisJcKLY1H0s7KE96X1JOFVGLNsIriTVEr9aoM3BsWS/TuB8WCupwrAd3
UL2Bgw+6bdy4s+dVnqtRdPI1r6DTJq90ogu/PE/W66PIedEakI8cEzasFbMMOjCo
FxJg8JnVX+bQRkB3Fq3jJCGFTGSXZY6zVvgWnakKdbV6/l30QMfIPL5bh+cp/c3Q
Wxc9nLDdikOcOO5FiIHFs/LWywtq5Csj2BA/tZfDDHW7JYhAMwAEOcGvMYfuSmUC
JYlsvgjFNRtLVi5Rb6muY39K+Ha8j4AX9LcP+LjYIpxah8WHCY2ZpACrYQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGg0EqUbmQutGqh2opOI/Wz4CGVsMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvYURRU3BSdVpDNjBhcUhhaWs0ajliUGdJWld3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCaI/EAwQC
aI/UAwQCaI/cMA0GCSqGSIb3DQEBCwUAA4IBAQBcm4G7jrF3BcY3YPLkDDiL72DT
zSuJrCmE15LU3nmgu/7i53iQVa5BNguw3KtictILF7ogS5QjD7nIi3+IIheaPtgJ
KIuaHnVCPEFdUJgjxt1bcrjESioQj1B2zEw0QwqTHqrELAuBy/FtybLIZaBDNXEZ
ULy7lFUzmW7kV73srGatWUrAwSKGmokQkUkVzHE06DNEEQD4hVeZum4/UGbDgDTl
WKis5IDyXWlFcHf1Nt/PeTWSY6ktH4F50CU+G6HrDgHfo8oDqiBA3TMRxi6ZDvo6
J8HVpuUUpS6XZWtEK2Q5bMvpuKYhBKJ5vEu4IRvyIDmVhld3tI5/E/SJ3foz
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:34 2026 by rpki-client