Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/N7TSGz5yt4__dDJpYl2C3hx1uMk.roa
File: N7TSGz5yt4__dDJpYl2C3hx1uMk.roa (raw, json)
Hash identifier: 85ckZ5s7WJgkGXKwa5D9RhvP1c+bn9R3ca0WVjJP3qc=
Subject key identifier: 37:B4:D2:1B:3E:72:B7:8F:FF:74:32:69:62:5D:82:DE:1C:75:B8:C9
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 01A0F8F76B9E78F858077178368ADA60038E
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/N7TSGz5yt4__dDJpYl2C3hx1uMk.roa
Signing time: Thu 01 Oct 2026 19:35:59 +0000
ROA not before: Thu 01 Oct 2026 19:35:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208673
IP address blocks: 178.214.97.0/24 maxlen: 24
178.214.99.0/24 maxlen: 24
178.214.100.0/24 maxlen: 24
178.214.101.0/24 maxlen: 24
178.214.102.0/24 maxlen: 24
178.214.103.0/24 maxlen: 24
178.214.104.0/24 maxlen: 24
178.214.107.0/24 maxlen: 24
178.214.110.0/24 maxlen: 24
178.214.111.0/24 maxlen: 24
178.214.112.0/24 maxlen: 24
178.214.113.0/24 maxlen: 24
178.214.114.0/24 maxlen: 24
178.214.116.0/24 maxlen: 24
185.53.88.0/24 maxlen: 24
185.53.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Oct 2026 18:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:f7:6b:9e:78:f8:58:07:71:78:36:8a:da:60:03:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Oct 1 19:35:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37b4d21b3e72b78fff743269625d82de1c75b8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:a8:8b:da:12:9d:ca:e7:99:af:44:74:9e:
e1:6b:57:57:55:ff:bd:43:92:0c:e7:8d:b9:2f:6d:
aa:b8:c8:0e:63:09:83:91:35:a0:58:47:c5:b6:72:
a7:f5:a5:b8:3a:dd:5d:fb:eb:1b:8d:e4:cd:36:dc:
d5:35:3c:b7:af:fc:12:6a:a2:ca:32:49:66:5b:cc:
32:a0:66:2c:5f:8e:9e:9f:16:0a:b5:6c:6d:aa:3f:
3c:8b:54:34:21:3e:b0:13:84:87:2e:f1:d5:fd:ed:
43:c1:e1:37:05:43:84:fd:13:3d:26:3e:cf:ca:89:
65:92:c3:63:ad:6e:c5:2c:fb:ed:26:28:44:ae:03:
2e:8c:fb:56:4e:fc:e3:b4:49:e8:42:bf:d6:91:d6:
d6:37:0b:86:2b:e5:04:f6:53:d1:bd:2d:e7:3e:95:
ff:56:23:a0:3e:c7:f5:32:32:df:61:93:48:b2:90:
50:8e:6b:77:45:80:3d:8b:b6:fd:01:af:5d:44:60:
70:6f:6a:63:8b:1a:3f:53:93:65:fe:f1:b1:6b:51:
27:44:5c:26:18:bf:99:52:11:f7:e5:de:36:b4:2b:
18:db:6b:8d:dd:a3:73:a0:e7:29:0f:38:fd:12:50:
74:bb:60:c4:df:ec:0a:f4:6e:7e:93:a9:43:cc:52:
cb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B4:D2:1B:3E:72:B7:8F:FF:74:32:69:62:5D:82:DE:1C:75:B8:C9
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/N7TSGz5yt4__dDJpYl2C3hx1uMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.97.0/24
178.214.99.0-178.214.104.255
178.214.107.0/24
178.214.110.0-178.214.114.255
178.214.116.0/24
185.53.88.0/23
Signature Algorithm: sha256WithRSAEncryption
93:83:a3:00:aa:14:08:c8:c0:cd:a1:16:9d:a7:e5:31:0c:b4:
54:ed:62:ca:9e:4a:e3:b9:b6:ad:33:c8:08:66:48:a5:6b:d1:
fb:f0:75:c7:bb:c8:1a:de:f6:18:5e:bb:19:44:5e:3a:d2:7e:
a1:65:d6:5d:7c:f2:ea:93:fa:42:21:62:82:35:85:44:3f:d9:
02:c3:0b:18:5d:cb:8d:34:dc:21:cc:34:3f:85:27:f9:8d:d3:
b4:0c:3a:0c:a6:e6:46:d1:0d:0c:9b:9b:f4:e0:cd:4b:d5:11:
52:d7:23:68:1b:4d:c9:7c:2e:2b:9f:df:fb:75:73:f0:95:02:
5d:b2:26:82:1a:33:f2:54:92:ff:3c:93:56:5f:cf:f3:68:71:
7a:3e:af:c0:00:4e:1b:60:cf:9a:ed:cf:d3:86:a6:f2:f0:07:
09:d1:0a:11:28:48:a0:3f:42:a4:de:e4:dd:de:82:e1:5d:19:
18:5f:14:2f:80:0a:c4:d1:66:59:d1:bb:45:42:9a:29:d7:1f:
1c:31:ed:e0:e5:11:8e:16:e9:d1:7f:11:ef:db:4d:f3:71:63:
44:de:f5:bf:79:df:dc:15:a2:51:88:09:ab:54:52:fb:eb:e0:
cc:79:f5:50:27:91:34:4f:62:66:6f:09:41:ac:4c:b7:6d:a8:
5d:db:8d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:22:33 2026 by rpki-client