Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fUGCLHp-HvlVSmFY-JSeW3ft5ik.roa
File: fUGCLHp-HvlVSmFY-JSeW3ft5ik.roa (raw, json)
Hash identifier: oRnzYs26mATKpw5Jgzild20L61pMCsUCGhN3eKOy694=
Subject key identifier: 7D:41:82:2C:7A:7E:1E:F9:55:4A:61:58:F8:94:9E:5B:77:ED:E6:29
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A00F8E2EF84C78A15DF62E655EBC04EDF0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fUGCLHp-HvlVSmFY-JSeW3ft5ik.roa
Signing time: Mon 17 Aug 2026 11:49:31 +0000
ROA not before: Mon 17 Aug 2026 11:49:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48538
IP address blocks: 217.60.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Aug 2026 06:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:8e:2e:f8:4c:78:a1:5d:f6:2e:65:5e:bc:04:ed:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 17 11:49:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d41822c7a7e1ef9554a6158f8949e5b77ede629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:76:e8:71:39:f5:78:16:fe:52:75:8d:10:
66:6c:ba:35:e5:a0:c9:f5:83:fb:53:34:59:09:04:
e6:2c:63:fa:d2:e5:2e:c0:ed:2d:39:49:7e:44:bc:
aa:72:79:29:01:44:d6:3d:c9:72:f7:85:c6:be:0b:
74:4c:88:3f:e8:7e:63:74:27:51:b2:5c:d5:e6:74:
b2:6b:a9:35:c6:2f:60:a5:39:69:35:f7:c5:7d:36:
43:33:62:01:be:6a:9d:17:f8:04:2e:2c:01:1b:8f:
83:fc:71:78:c3:d6:bc:07:5f:7c:22:67:68:09:b9:
d6:4e:19:3f:06:3f:a3:0e:41:94:80:79:68:bd:78:
e1:45:7d:eb:18:7d:5f:37:7e:e3:33:8b:b9:4b:66:
da:82:65:cf:93:0c:3c:c5:8d:91:db:ac:8f:78:3a:
3a:47:de:1c:83:db:86:98:13:a7:36:a4:46:f6:24:
a4:48:3b:45:cc:01:62:71:e9:62:53:c7:e3:dc:8c:
95:bc:db:b4:7e:33:d9:c2:7a:a2:1f:f2:dc:87:54:
86:48:b2:66:c1:a6:15:0b:aa:b2:a0:3b:cd:97:45:
7f:5d:d5:25:51:dd:1a:65:e1:0d:ad:fa:36:eb:7a:
da:b9:ee:c5:9d:c5:46:bd:84:f8:d0:94:2a:66:ea:
99:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:41:82:2C:7A:7E:1E:F9:55:4A:61:58:F8:94:9E:5B:77:ED:E6:29
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fUGCLHp-HvlVSmFY-JSeW3ft5ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:fd:47:b0:75:25:87:3f:9d:ee:7f:71:b6:e9:9c:81:d3:7a:
ff:27:e4:7c:17:47:e9:82:9c:4b:4f:8d:bd:e4:89:2b:64:c1:
a4:da:1c:a1:b3:15:a5:f8:c6:47:90:40:b0:b8:07:6e:61:b7:
23:bb:2f:7d:51:fc:c1:e6:78:d2:80:9c:a7:16:9a:53:68:2f:
63:4e:51:42:de:eb:10:f3:76:af:83:ab:ee:e1:f7:1b:e0:5a:
80:da:da:50:ba:ee:89:9b:01:40:a4:2b:9b:13:db:78:81:56:
32:e9:82:f3:87:66:95:83:97:8b:44:c5:56:13:c6:e0:59:91:
d3:b5:7b:9c:d0:66:0d:38:19:65:cc:1b:4d:d6:53:0b:ea:a2:
8a:d3:63:4f:40:fa:09:65:05:e4:ea:15:1b:3d:32:72:ac:32:
fb:85:00:b1:dd:2a:30:20:0a:0f:49:dc:b7:59:00:b2:a1:25:
6e:33:1e:49:44:00:e5:eb:2e:61:b3:a2:36:59:3d:70:19:3e:
27:3e:b0:26:8e:7a:df:1b:1b:ed:01:65:1a:73:51:1e:2e:21:
13:7a:8d:03:d7:d8:63:6d:f0:c1:f8:fc:73:dc:42:98:50:22:
10:25:e2:14:47:7c:52:6a:59:07:73:5d:b7:38:a2:46:32:fe:
e5:ff:cf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:12:37 2026 by rpki-client