Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cwicTuLirqWUhaClrrRfMJ68U9c.roa
File: cwicTuLirqWUhaClrrRfMJ68U9c.roa (raw, json)
Hash identifier: xkcrEZWhun3zUtFyuiMq9KrG3rCgPNxsQApHryXCTXM=
Subject key identifier: 73:08:9C:4E:E2:E2:AE:A5:94:85:A0:A5:AE:B4:5F:30:9E:BC:53:D7
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC770F4A2A07DCC2CD9513807191B462E
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cwicTuLirqWUhaClrrRfMJ68U9c.roa
Signing time: Mon 03 Aug 2026 11:44:56 +0000
ROA not before: Mon 03 Aug 2026 11:44:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199186
IP address blocks: 82.152.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Aug 2026 07:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:70:f4:a2:a0:7d:cc:2c:d9:51:38:07:19:1b:46:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 11:44:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73089c4ee2e2aea59485a0a5aeb45f309ebc53d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:dd:c2:42:c1:e1:68:cb:0d:5c:5f:8d:b8:
d5:e8:77:23:54:9f:36:21:94:0c:d7:d7:dd:6e:89:
5e:a0:14:ff:7e:9d:1a:50:76:09:83:e2:ef:5d:8e:
4f:06:63:e5:1c:31:62:54:ad:9c:d6:7e:a3:98:c2:
cc:a2:34:cd:b3:39:be:aa:a1:52:87:9b:27:e4:e2:
52:dd:78:3c:36:5b:2f:c5:ec:49:b1:71:cf:e3:48:
8f:be:08:ee:06:2f:4e:1c:03:da:7e:f1:f4:cd:54:
7a:df:8f:bb:de:e1:f2:d1:8f:f7:e5:cd:a5:d3:3f:
b5:b0:69:90:a4:87:a1:f6:26:38:09:32:23:ae:7c:
9e:53:49:ee:da:f1:aa:95:79:43:d4:56:65:29:c7:
f7:00:5e:70:c0:2d:49:af:fc:b8:88:fb:d2:58:93:
a0:30:3d:2a:a0:4c:5c:7a:43:0b:e7:7f:6e:3a:e7:
f6:a8:59:22:e9:32:26:18:af:30:d7:18:23:2e:26:
c7:47:c3:e9:19:91:84:47:7d:08:f0:33:b1:53:e8:
02:28:5a:48:aa:5d:45:7a:02:32:bf:c3:64:27:1b:
38:e1:e1:9f:7f:b4:2d:45:1f:c6:a8:bd:c1:51:c6:
6f:70:30:f5:be:51:90:ba:0f:c4:3a:a9:de:1a:56:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:08:9C:4E:E2:E2:AE:A5:94:85:A0:A5:AE:B4:5F:30:9E:BC:53:D7
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cwicTuLirqWUhaClrrRfMJ68U9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:5c:8e:42:7a:f4:5e:04:92:dc:ea:d9:ed:22:9f:de:e9:bf:
d8:5b:a6:6a:21:f0:5c:db:26:da:de:c4:77:c0:31:11:89:b2:
73:89:8b:9b:03:d1:4f:d9:d5:97:24:fb:aa:cd:38:d3:a4:1d:
27:a4:8e:3f:43:84:6d:02:c8:ea:ec:08:08:5a:20:7b:2a:b3:
d4:26:9a:d0:a8:23:98:d6:a4:17:2a:d9:f1:de:82:63:eb:db:
9b:72:61:9f:51:84:a5:39:fe:9d:2c:ce:b6:23:c2:f6:af:fa:
ec:f1:5c:cf:9b:2e:15:a9:f2:e4:cf:3c:4b:53:86:de:8c:f9:
15:30:10:2e:1b:ba:8c:63:46:0f:6c:af:2a:44:c3:d6:db:22:
63:e4:26:09:8d:66:58:2b:9b:ca:b2:b0:e3:7d:91:2f:28:ed:
89:f7:55:1c:a2:9b:8f:8f:96:bd:d8:e0:ce:3f:86:04:31:8d:
d5:77:97:cf:1a:9e:ac:ab:54:27:7e:c9:2e:2c:64:68:8a:c2:
35:ed:6c:64:81:9c:ab:f8:f1:f2:67:f4:be:e2:d3:e1:66:e9:
e0:76:0a:68:b1:0d:5a:ad:93:99:86:fe:69:4b:f3:cc:9b:2c:
2f:c2:d9:51:9c:e5:ab:78:5c:b2:2c:98:dc:63:88:fe:58:9c:
d6:52:52:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 19:24:01 2026 by rpki-client