Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/8InaKOvKB2lrLy41hMCgsdMWqpc.roa
File: 8InaKOvKB2lrLy41hMCgsdMWqpc.roa (raw, json)
Hash identifier: yHDzDrM6rhafBraYwjkltCmzOOFatOS7jRwEBmhDX8I=
Subject key identifier: F0:89:DA:28:EB:CA:07:69:6B:2F:2E:35:84:C0:A0:B1:D3:16:AA:97
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019E925DA0FABD65B5E8B9BDD75A795EBBD4
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/8InaKOvKB2lrLy41hMCgsdMWqpc.roa
Signing time: Thu 04 Jun 2026 11:21:10 +0000
ROA not before: Thu 04 Jun 2026 11:21:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 146.255.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jun 2026 19:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:5d:a0:fa:bd:65:b5:e8:b9:bd:d7:5a:79:5e:bb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 4 11:21:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f089da28ebca07696b2f2e3584c0a0b1d316aa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:c7:ac:12:23:11:f5:04:7a:82:27:c6:53:
f9:1f:61:43:46:74:30:9b:cb:1e:06:ed:64:f1:d6:
6f:81:52:be:3a:7b:b9:8f:0c:b8:0b:c8:6a:50:49:
8e:a9:92:fe:ed:d8:3e:8d:2d:a4:68:e2:dc:11:d4:
e4:e2:f2:43:84:ba:bf:90:f7:85:b9:23:1d:bc:26:
42:79:59:fb:b7:24:3e:f8:8e:8c:80:d9:65:ac:21:
c3:91:bd:07:69:38:16:36:bf:4a:a1:22:74:96:73:
e4:c0:bb:fc:76:b7:83:02:7c:45:53:cd:8b:52:e1:
ee:9b:69:b0:04:82:6e:9e:95:17:ef:a5:c4:b1:a4:
e6:7a:87:7a:25:89:5f:45:7d:8f:8c:69:f3:a5:fd:
8b:a6:b9:ce:d3:06:6f:8e:8f:6c:d4:cd:1e:7c:f5:
3c:5f:37:2f:d2:20:cd:9e:fe:41:50:eb:7b:d9:36:
3a:fa:50:5a:e1:e5:84:30:25:82:67:ef:4b:11:3b:
cc:41:95:50:9a:19:13:1a:5f:18:45:6c:c9:ac:25:
9e:50:e0:d3:aa:03:d7:fb:b1:43:24:46:e6:aa:2d:
1d:d4:86:83:3b:3b:c2:be:b9:1e:f3:28:c0:97:fc:
50:51:5c:db:f1:3d:91:0e:6e:28:21:4d:98:4b:f2:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:89:DA:28:EB:CA:07:69:6B:2F:2E:35:84:C0:A0:B1:D3:16:AA:97
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/8InaKOvKB2lrLy41hMCgsdMWqpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.189.0/24
Signature Algorithm: sha256WithRSAEncryption
78:30:97:62:54:9e:54:da:07:fa:d9:d3:0a:18:c1:0c:2c:fd:
9d:ad:99:18:0b:2b:78:eb:05:bd:93:10:90:02:0c:26:dd:e4:
3f:d7:70:58:f4:7d:20:f6:fa:05:bd:cb:b9:73:b5:72:7b:b1:
5d:b1:8f:63:dd:d1:4c:b1:2b:de:26:81:9d:ee:a3:6f:17:d2:
48:da:0b:0d:e4:f7:aa:c2:b0:67:70:53:86:47:69:ea:b3:16:
8d:77:76:61:15:f5:f3:b0:70:28:05:43:17:33:d6:79:03:21:
b0:9e:fd:6f:1f:52:31:bb:72:ad:c2:d4:38:dc:c0:9d:89:89:
f1:7f:fd:b1:30:2a:51:3f:6e:cc:c5:69:a6:04:2a:cd:b8:24:
a3:fa:ce:8d:6f:93:e7:a2:96:f3:d5:75:f2:1e:1a:46:3e:33:
20:58:dc:97:90:d0:65:6b:47:27:f0:0a:2a:f1:64:08:c2:79:
6c:83:a5:19:c2:ad:76:dd:42:c5:6f:46:5b:a2:fb:bd:05:be:
b7:45:a9:2b:4b:9c:3c:d1:37:10:1f:19:dd:14:77:9e:f5:b1:
d8:e6:1c:8a:45:35:cc:f5:d6:a9:6f:66:aa:f6:13:76:71:69:
cf:94:4b:da:7d:c8:3b:b3:bd:f5:d2:d1:aa:3b:9f:f2:0e:4a:
37:e2:27:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:04:30 2026 by rpki-client