Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ux75s7i8Arh5yQji91cozy5wGJs.roa
File: ux75s7i8Arh5yQji91cozy5wGJs.roa (raw, json)
Hash identifier: 8Bw+WfN3Hk3pV4i3DdVQ7YwPXr8PFi0FgCxSx+RCDDs=
Subject key identifier: BB:1E:F9:B3:B8:BC:02:B8:79:C9:08:E2:F7:57:28:CF:2E:70:18:9B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A010ADA06ABC70C4438F94FAC26A16374F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ux75s7i8Arh5yQji91cozy5wGJs.roa
Signing time: Mon 17 Aug 2026 17:03:29 +0000
ROA not before: Mon 17 Aug 2026 17:03:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59447
IP address blocks: 217.60.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Aug 2026 06:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:ad:a0:6a:bc:70:c4:43:8f:94:fa:c2:6a:16:37:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 17 17:03:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb1ef9b3b8bc02b879c908e2f75728cf2e70189b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:2a:c8:08:45:ec:e9:31:34:35:e9:f4:45:
35:03:64:9f:99:bf:84:07:20:11:08:97:7b:75:5e:
d2:46:4d:82:21:41:15:12:b6:0a:f0:f3:86:aa:34:
98:7a:88:69:78:55:dc:d2:52:24:5b:df:cf:f9:69:
26:af:85:65:3b:42:c6:8f:18:43:f8:2e:6b:98:34:
ed:31:a4:5c:4b:2e:70:95:5e:cb:fd:6f:94:0c:f0:
34:4e:9b:56:63:24:84:39:03:67:6b:55:39:c7:9e:
ef:0e:11:41:b2:85:6e:d4:73:72:d3:4d:66:46:ff:
cf:40:10:b8:fa:ae:c0:c6:60:12:a9:b4:a9:79:30:
00:10:5e:67:a7:79:c3:ea:3b:e4:90:79:57:52:22:
d9:94:72:e8:82:91:c3:59:a6:27:fb:e1:d7:7b:4e:
68:cd:ad:13:56:b7:5b:d1:31:be:a4:75:28:e6:c5:
e9:16:e4:ce:87:12:71:04:84:08:45:4b:20:c5:c6:
2e:0f:bf:43:ac:e1:08:d2:c5:98:a7:e3:12:1e:69:
c7:54:95:56:93:11:40:4b:3b:33:8a:01:eb:28:49:
64:f4:54:c4:cf:2f:e1:19:39:ce:c3:0b:bc:7e:3d:
4a:5a:2b:67:42:16:96:84:c8:7d:4b:b3:67:7d:f3:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1E:F9:B3:B8:BC:02:B8:79:C9:08:E2:F7:57:28:CF:2E:70:18:9B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ux75s7i8Arh5yQji91cozy5wGJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:fc:58:bb:86:70:d0:ff:95:27:ab:80:fd:9a:64:88:fa:9a:
19:42:a0:33:e0:6c:76:b6:04:40:69:54:c8:38:c4:a4:70:c9:
e0:f9:29:56:62:d6:c4:c0:0e:a9:fb:25:d6:ea:4b:ec:5d:86:
08:32:68:93:aa:17:0f:23:c2:2d:8e:dc:bc:09:94:da:52:5e:
9b:5e:31:41:0f:d5:4c:77:86:88:bf:36:20:e6:18:7f:86:f6:
03:a3:ea:06:cd:a7:ca:22:9d:5a:be:46:df:85:b6:b1:30:44:
12:71:cc:cb:d7:60:f4:d3:50:68:68:44:07:d8:63:8a:5b:53:
c7:06:3d:20:68:38:65:bb:87:aa:0d:0b:a4:8b:a6:da:c5:b2:
d3:36:14:35:ed:c7:86:bd:ac:be:07:44:18:5f:b8:dc:06:0a:
4c:1f:d1:dc:eb:ba:fb:9a:53:6f:6a:df:84:bf:8e:d2:aa:56:
8e:f7:3e:fd:43:bb:1e:96:ab:1e:f1:47:a3:d0:eb:c4:83:d5:
89:d8:da:81:8f:9e:ee:6f:c6:a8:a7:69:c4:20:93:2b:55:97:
e0:69:4a:ba:58:e3:2d:75:68:5c:c3:b0:30:07:d8:ce:93:64:
0a:4f:09:78:43:14:6b:7b:49:15:64:b8:ae:43:ff:d8:09:a3:
f9:10:63:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:32 2026 by rpki-client