Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/j47Vjf5sSDSGSboVM_1Ch_NIn2Q.roa
File: j47Vjf5sSDSGSboVM_1Ch_NIn2Q.roa (raw, json)
Hash identifier: J2+qMiQX1Y6/PyrNqeQubxUKBkBjP4r/oKxOc6b+odc=
Subject key identifier: 8F:8E:D5:8D:FE:6C:48:34:86:49:BA:15:33:FD:42:87:F3:48:9F:64
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FCC0A73DF9265262480D14C59A64B9E47
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/j47Vjf5sSDSGSboVM_1Ch_NIn2Q.roa
Signing time: Tue 04 Aug 2026 09:11:04 +0000
ROA not before: Tue 04 Aug 2026 09:11:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219117
IP address blocks: 140.225.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Aug 2026 14:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:0a:73:df:92:65:26:24:80:d1:4c:59:a6:4b:9e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 4 09:11:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f8ed58dfe6c48348649ba1533fd4287f3489f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:35:62:2e:98:48:4c:57:3a:96:c0:5f:39:
15:17:d6:bb:f1:8c:86:ff:c5:0b:3b:68:8f:14:f7:
26:1f:97:83:26:a0:a2:09:86:f2:1b:1d:72:49:24:
05:66:7b:3d:b3:7c:9e:e7:59:f4:de:ca:ad:f3:2d:
e5:b6:0b:9c:44:b0:41:0b:cd:2c:3e:58:8b:ac:5a:
23:df:35:26:5e:c9:1f:ef:eb:ac:1f:e7:f1:97:53:
e1:f3:6a:8e:ec:44:19:ac:d8:c9:af:ac:a6:e2:46:
15:8e:83:67:53:27:d6:e6:6d:e5:19:30:44:2d:9c:
bc:1a:40:8a:e2:dc:9c:31:0d:fc:8b:3b:3a:79:33:
6e:5c:1a:cc:20:cd:3f:67:46:00:6d:22:6e:c9:09:
0f:e6:f6:ad:ac:96:1d:7c:ed:02:6e:4a:02:5b:4c:
b7:41:32:95:af:1f:b9:07:4c:47:fb:54:dc:a3:12:
63:6b:0c:25:96:66:c5:5c:ec:d5:f4:68:6a:72:bc:
17:38:49:59:cb:15:c4:03:19:94:06:c4:5f:db:a9:
4d:fb:dd:77:5b:1d:7d:7f:5a:41:f9:e7:8a:78:be:
9c:71:1b:d3:20:43:9f:8b:32:3e:3b:c8:e7:d8:d6:
23:12:69:d6:d7:4d:92:4e:a9:0c:e4:96:d2:ca:c5:
04:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8E:D5:8D:FE:6C:48:34:86:49:BA:15:33:FD:42:87:F3:48:9F:64
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/j47Vjf5sSDSGSboVM_1Ch_NIn2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.225.197.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b0:94:d9:9b:39:e3:0d:1b:53:fd:4b:c0:da:ed:8d:54:f7:
16:a7:90:2c:b3:5b:9d:38:38:d5:7d:28:61:ac:96:33:ab:e2:
40:96:32:b7:11:a3:8b:4b:af:4e:d3:cd:13:5d:6c:dd:3c:26:
2b:8d:42:eb:cd:6c:11:30:3e:f7:08:07:d1:71:d1:43:6e:91:
22:29:88:f7:87:09:ef:b6:39:20:b2:29:1b:0d:e9:79:f6:a6:
4a:59:9d:66:b3:e7:e9:ef:4e:5e:8a:5d:f4:63:75:75:a4:85:
e8:bd:16:fe:c0:4d:a0:1b:13:9c:1e:52:03:bd:31:26:d5:73:
1e:32:a3:92:f2:7b:bc:07:bf:ab:95:59:42:5b:a2:82:03:12:
22:b7:26:7a:18:43:72:6d:8b:3a:07:c9:ca:06:31:4e:b7:d0:
7b:d7:1b:d8:eb:77:c3:47:ca:53:b4:57:81:87:ef:97:52:de:
47:ec:50:f9:27:3f:06:f3:1f:4f:ac:55:1f:74:58:09:b9:a5:
02:a0:0a:a0:d3:ff:8f:9d:1b:ad:ce:6a:77:90:33:7d:69:f7:
9c:98:bb:9b:94:65:8c:f8:f7:d8:fd:23:09:57:2f:b1:cf:9f:
75:e2:8e:f7:82:f6:22:61:9c:03:d2:ba:d9:a7:4e:c3:bc:45:
d8:df:9c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:52 2026 by rpki-client