Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lOiLT6Qygl18Fd9N9udkqyfXgO4.roa
File: lOiLT6Qygl18Fd9N9udkqyfXgO4.roa (raw, json)
Hash identifier: rFS2E8jthz+5iLmnsl8ZBGHMub1Ld1rSal2D5PX0XCw=
Subject key identifier: 94:E8:8B:4F:A4:32:82:5D:7C:15:DF:4D:F6:E7:64:AB:27:D7:80:EE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A16DC05F5C8C3579777A872208C7744835
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lOiLT6Qygl18Fd9N9udkqyfXgO4.roa
Signing time: Sat 24 Oct 2026 11:51:26 +0000
ROA not before: Sat 24 Oct 2026 11:51:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 9.247.44.0/24 maxlen: 24
9.247.48.0/24 maxlen: 24
9.247.179.0/24 maxlen: 24
78.17.26.0/24 maxlen: 24
78.17.69.0/24 maxlen: 24
78.17.108.0/24 maxlen: 24
89.125.170.0/24 maxlen: 24
206.245.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Oct 2026 09:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:c0:5f:5c:8c:35:79:77:7a:87:22:08:c7:74:48:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 24 11:51:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94e88b4fa432825d7c15df4df6e764ab27d780ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:78:76:b1:40:39:e5:d8:5e:49:64:a1:3a:
f6:b5:8b:bc:31:98:00:e3:1c:c0:24:9e:7f:91:f5:
4e:f4:f1:5a:81:ef:eb:4c:8e:00:28:48:c0:08:1f:
9c:1b:cd:2c:76:58:52:9a:19:da:51:e0:b4:7e:ad:
c9:fc:e9:02:b6:41:2e:3c:3c:5e:1b:6e:33:2d:84:
90:3a:52:c9:5d:24:6d:3a:2d:74:da:b6:6b:71:f7:
ca:f6:3f:14:e2:8f:05:c7:91:9b:aa:9a:30:92:53:
31:0c:1f:ab:86:6b:16:e0:6b:0d:b2:82:c1:69:47:
7a:d3:96:24:bc:b3:92:33:fb:68:3b:9c:6e:49:38:
75:be:db:d2:49:07:13:19:0e:41:5f:60:9b:8f:00:
94:cf:71:58:b3:1d:b9:15:43:fa:72:34:40:36:8a:
14:94:ec:91:2f:2e:ee:d9:d7:f8:37:97:05:25:5e:
9c:a0:a7:48:50:44:df:99:6f:8b:bd:63:e5:df:3f:
90:19:26:4c:11:3a:bc:bf:6d:c5:28:bc:92:e5:d7:
21:5a:ca:83:92:60:fa:e6:0f:05:9c:e6:bf:9b:8f:
9a:10:5b:b1:4a:07:1f:80:a8:97:96:cf:c0:8e:66:
99:27:d6:51:65:00:90:fb:0a:80:d0:4c:a9:9d:b7:
cf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E8:8B:4F:A4:32:82:5D:7C:15:DF:4D:F6:E7:64:AB:27:D7:80:EE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lOiLT6Qygl18Fd9N9udkqyfXgO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.44.0/24
9.247.48.0/24
9.247.179.0/24
78.17.26.0/24
78.17.69.0/24
78.17.108.0/24
89.125.170.0/24
206.245.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:7b:ab:e9:c2:aa:9b:7f:6d:e6:48:1f:a7:94:d4:03:43:bd:
ee:1c:5d:ff:de:b8:d0:10:7e:55:94:cb:36:46:4a:f2:39:a3:
1a:be:d4:9d:0f:df:a3:4d:bd:5e:79:c2:27:76:4f:12:3a:8c:
41:50:90:78:53:74:46:11:f4:67:ac:12:eb:b3:c0:0d:8a:29:
ec:9b:7b:1c:86:48:bf:77:45:c8:d9:62:c6:8f:c3:2e:bf:da:
23:33:be:7d:4c:52:e9:c6:a9:5c:55:5e:86:dd:34:cf:d0:79:
05:e4:1b:96:38:3c:89:c8:39:03:14:7e:5c:31:18:7e:5f:3b:
99:73:83:a0:7d:c0:73:42:9a:fc:1f:fc:37:6f:64:a5:44:b7:
86:b9:bb:40:4a:b9:d5:71:02:ec:ac:eb:ad:cd:45:9e:1e:cf:
c4:31:93:0a:88:8d:c1:84:32:b6:6c:d9:ae:52:8f:73:05:57:
43:38:c5:57:63:cb:ce:53:82:5a:8a:33:db:e3:7e:0b:cd:92:
f1:cd:ee:7a:ab:ab:c2:ea:cf:24:0a:29:cc:bd:56:13:79:28:
47:57:36:33:5b:9c:4f:eb:1f:0f:84:d1:25:c0:ac:ed:1e:02:
0f:7b:a5:ce:10:30:8c:3e:13:bb:a8:d8:52:d0:92:bc:e4:54:
4a:3f:1d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:09 2026 by rpki-client