Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/3rdO0jeQd-TrOBif786riDudu4E.roa
File: 3rdO0jeQd-TrOBif786riDudu4E.roa (raw, json)
Hash identifier: nUGQIHfE85nF1rV1OrO5BXD+KLPfAMqksvtPu/rULfE=
Subject key identifier: DE:B7:4E:D2:37:90:77:E4:EB:38:18:9F:EF:CE:AB:88:3B:9D:BB:81
Certificate issuer: /CN=4ba1b3e9db4ee5263d0ab1ba7aeffe7c5f5d6aec
Certificate serial: 01A13DF33C072E1A28EDA6CB11DCFF65DA16
Authority key identifier: 4B:A1:B3:E9:DB:4E:E5:26:3D:0A:B1:BA:7A:EF:FE:7C:5F:5D:6A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/3rdO0jeQd-TrOBif786riDudu4E.roa
Signing time: Thu 15 Oct 2026 05:05:13 +0000
ROA not before: Thu 15 Oct 2026 05:05:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 136.176.200.0/24 maxlen: 24
136.176.215.0/24 maxlen: 24
136.176.218.0/24 maxlen: 24
136.176.219.0/24 maxlen: 24
136.176.220.0/24 maxlen: 24
136.176.221.0/24 maxlen: 24
136.176.222.0/24 maxlen: 24
136.176.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Oct 2026 07:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:f3:3c:07:2e:1a:28:ed:a6:cb:11:dc:ff:65:da:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba1b3e9db4ee5263d0ab1ba7aeffe7c5f5d6aec
Validity
Not Before: Oct 15 05:05:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=deb74ed2379077e4eb38189fefceab883b9dbb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:6f:18:ae:d8:a9:63:76:bc:30:44:78:ae:
c5:6e:df:6a:a9:a2:87:0d:3b:25:dc:eb:3f:9e:a5:
6a:c0:19:fd:56:b8:28:e9:be:3b:4d:20:f8:68:c8:
0d:5d:b8:d6:8a:48:88:5f:70:9b:8f:49:30:73:b6:
90:d2:77:97:10:85:af:71:e7:ec:5d:19:13:af:12:
71:29:0f:4a:76:f9:6e:df:22:13:ad:86:8a:e7:86:
89:12:83:7a:cb:2d:61:7b:9f:78:03:88:63:a9:68:
d4:52:47:b9:bb:ff:9e:2a:29:2b:8a:5b:cc:f4:aa:
d7:13:b5:bf:7a:9e:be:b7:6f:ee:88:b7:bd:07:f2:
e3:98:bc:5e:e5:a2:63:d8:fc:c9:9f:06:c0:b3:73:
9b:ef:11:1a:04:c4:69:bf:75:d6:cc:b5:06:63:cd:
4b:ce:a2:d9:73:8a:aa:95:c4:40:fe:df:f2:c0:10:
73:db:7c:51:0e:a2:7d:b7:13:c3:11:5e:66:98:43:
79:02:02:cc:fb:34:a4:f6:8a:d1:92:71:da:29:bb:
8c:bd:b6:3c:59:89:6d:ea:e7:84:21:80:28:61:e4:
91:b7:8d:41:6f:d3:0e:6d:08:04:e2:13:01:8b:fb:
cb:f2:3a:3a:2e:2c:e9:50:b2:0a:d5:86:80:5e:4f:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B7:4E:D2:37:90:77:E4:EB:38:18:9F:EF:CE:AB:88:3B:9D:BB:81
X509v3 Authority Key Identifier:
keyid:4B:A1:B3:E9:DB:4E:E5:26:3D:0A:B1:BA:7A:EF:FE:7C:5F:5D:6A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/3rdO0jeQd-TrOBif786riDudu4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.200.0/24
136.176.215.0/24
136.176.218.0-136.176.223.255
Signature Algorithm: sha256WithRSAEncryption
1a:38:b5:c7:54:d6:0e:62:6b:77:2b:34:b1:a4:aa:e3:59:d7:
be:42:fc:75:4b:ba:2e:fc:a2:06:e9:75:d5:b9:9b:4b:74:6d:
41:34:5d:9c:c8:5d:5b:6b:25:f7:cd:58:88:53:dc:d4:95:b1:
c2:01:43:b5:d5:d1:85:7f:07:2e:6d:b6:02:07:c5:bb:3d:e2:
07:9a:82:04:56:77:de:31:6d:86:89:91:4f:00:7b:51:4e:ae:
cd:d3:66:7b:b2:94:16:77:db:3c:23:96:6f:2c:cf:c4:8f:d4:
55:5d:f5:b3:33:46:87:f3:51:f8:24:65:df:08:e2:a5:e7:95:
d6:c7:9f:7f:0b:60:51:db:dd:f7:9b:78:cc:cc:79:03:83:a2:
5f:fc:c5:ea:9b:fe:75:88:71:d5:c4:ba:89:07:b1:99:6e:83:
24:d5:a9:c6:22:8e:08:0b:b1:10:d0:f8:43:30:e2:1d:9d:6f:
3e:be:e3:21:0d:c3:7b:68:98:d9:39:76:8d:0f:dd:8e:85:0a:
0e:30:20:a0:45:88:d4:d1:e0:9b:50:80:fc:d2:b1:f1:52:34:
91:7e:8d:3a:24:ca:a0:6e:ea:7d:33:8b:5c:bb:66:8f:c2:3d:
37:9e:04:1f:9a:49:32:29:75:79:6d:96:f6:41:c8:1a:d5:29:
54:5a:15:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:40:09 2026 by rpki-client