Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/7cneqWgUaaIhV-KOaSr_OQ468AQ.roa
File: 7cneqWgUaaIhV-KOaSr_OQ468AQ.roa (raw, json)
Hash identifier: QS03lb1SuoTt7VFgcH2lwMLPyNcUnsvKBy3Zeu/E9+U=
Subject key identifier: ED:C9:DE:A9:68:14:69:A2:21:57:E2:8E:69:2A:FF:39:0E:3A:F0:04
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A16D0105F3B7D100DE59F8BAACA12F5FAB
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/7cneqWgUaaIhV-KOaSr_OQ468AQ.roa
Signing time: Sat 24 Oct 2026 08:22:25 +0000
ROA not before: Sat 24 Oct 2026 08:22:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198475
IP address blocks: 92.50.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Oct 2026 06:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:01:05:f3:b7:d1:00:de:59:f8:ba:ac:a1:2f:5f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 24 08:22:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edc9dea9681469a22157e28e692aff390e3af004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:16:c5:f0:19:c7:e3:40:e6:a6:1a:15:c3:
c1:13:9a:01:50:77:26:c3:24:d0:ca:ca:85:7f:85:
2f:cc:3d:81:91:5b:17:b1:2d:53:64:a0:39:08:4a:
fd:87:5b:0a:ea:61:30:25:5c:fe:58:53:26:f8:bf:
21:fe:89:df:fe:57:09:ba:97:9d:0a:d7:06:bd:dc:
73:1d:c6:86:d4:07:17:e1:cf:b4:57:d0:e4:fa:05:
f8:aa:34:ff:03:fc:9d:0e:9b:67:2d:b7:d2:45:7d:
97:4a:6b:83:97:c6:43:d7:ab:b2:c9:8d:fe:6a:90:
d2:a3:87:7e:83:c6:73:62:27:75:72:99:d3:e6:c4:
89:b0:74:4b:f6:26:e6:d6:5b:9e:21:eb:0b:5c:a1:
30:97:eb:4d:73:3a:b8:84:16:13:d4:c7:0e:2f:c2:
d7:40:6d:94:a0:33:84:98:14:77:ad:83:be:03:2a:
54:64:70:1c:99:f9:80:73:8c:0a:1a:cb:ba:2b:16:
e8:8a:62:85:d1:c9:14:f7:b3:bc:95:9d:c4:a7:62:
27:be:88:e9:3d:91:cc:13:73:ed:6f:7e:41:b6:b0:
7d:68:cf:82:86:95:82:84:e8:23:38:7f:15:59:61:
4b:8b:82:18:1f:d5:c0:06:03:02:66:eb:71:43:52:
72:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C9:DE:A9:68:14:69:A2:21:57:E2:8E:69:2A:FF:39:0E:3A:F0:04
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/7cneqWgUaaIhV-KOaSr_OQ468AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.2.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:18:14:3b:4e:5b:69:f0:66:94:28:96:79:a4:28:f7:6a:39:
10:4b:47:69:06:ec:4d:3c:ab:3d:6a:69:8d:78:4d:c9:30:8d:
07:77:ad:94:51:f8:58:3d:f0:eb:73:79:e6:c0:41:5f:fc:e4:
81:cd:52:63:92:79:91:f3:99:24:8e:af:11:c2:a7:49:77:51:
25:6a:12:99:de:95:4b:c1:86:e3:eb:0b:07:f1:4a:c6:71:9c:
99:5a:f7:a0:bf:60:84:ec:1e:cf:87:50:43:15:f1:3a:aa:32:
d5:49:68:52:d3:71:b7:fb:cd:8f:7d:b2:69:b9:ea:9e:9b:00:
0f:99:8b:ea:cd:39:98:6f:b7:a5:36:45:9e:dd:f2:f1:3b:86:
71:5b:c7:3c:b4:ff:9d:d6:27:64:7d:d1:e0:01:a4:16:7c:1b:
2b:be:b6:27:a7:05:6e:cc:07:be:6b:fa:33:51:b7:75:7a:eb:
d1:a1:db:03:93:43:62:3a:5e:82:50:6d:90:ef:76:7e:c7:2a:
54:b0:e0:4b:14:27:44:72:17:fb:c5:ce:30:df:f2:1c:7a:2b:
b9:20:78:6a:06:43:ae:31:aa:c2:a5:63:15:13:bd:27:17:6d:
e4:c3:03:1e:95:7f:d6:d9:aa:11:00:d6:78:d4:26:bb:45:0a:
16:1e:e8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:46 2026 by rpki-client