Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/7l_WRWnERaFnRHP59dbVTB39o-Q.roa
File: 7l_WRWnERaFnRHP59dbVTB39o-Q.roa (raw, json)
Hash identifier: 3DS7SuBEI0WRXDkHuPM33BRIGweYA0tZ5+CrkqVoESw=
Subject key identifier: EE:5F:D6:45:69:C4:45:A1:67:44:73:F9:F5:D6:D5:4C:1D:FD:A3:E4
Certificate issuer: /CN=e09ee1b2c1b8df163867a242a30fdea54f01de34
Certificate serial: 01A1778AC49446008507C747FBE0A47CB74E
Authority key identifier: E0:9E:E1:B2:C1:B8:DF:16:38:67:A2:42:A3:0F:DE:A5:4F:01:DE:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4J7hssG43xY4Z6JCow_epU8B3jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/7l_WRWnERaFnRHP59dbVTB39o-Q.roa
Signing time: Mon 26 Oct 2026 09:29:05 +0000
ROA not before: Mon 26 Oct 2026 09:29:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15404
IP address blocks: 158.156.172.0/24 maxlen: 24
158.156.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Oct 2026 09:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:8a:c4:94:46:00:85:07:c7:47:fb:e0:a4:7c:b7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e09ee1b2c1b8df163867a242a30fdea54f01de34
Validity
Not Before: Oct 26 09:29:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee5fd64569c445a1674473f9f5d6d54c1dfda3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:20:cf:4b:ca:21:bc:fa:3b:70:8e:94:78:
59:c4:1b:fc:9b:0e:75:00:14:22:76:5d:e1:20:1d:
64:dc:25:a8:35:b1:ee:39:65:b4:98:67:3d:8a:53:
ad:4a:6e:ed:91:af:6a:c8:53:b3:68:94:ea:3e:a7:
f4:a2:1b:46:e6:05:cc:4e:ca:53:c9:25:bf:e1:99:
c7:d1:65:9e:77:8c:e8:fa:94:59:52:ed:96:a2:54:
22:05:14:ba:8a:a7:2c:ff:dc:45:98:83:f0:f4:67:
1b:2f:d7:84:1b:e9:4e:d8:51:1e:86:72:55:b1:d7:
aa:bc:0d:98:46:1b:1d:e8:01:35:5b:07:a8:e1:5a:
91:2b:19:a8:e8:83:ac:b5:47:3f:59:74:0a:07:47:
aa:7d:4b:82:91:68:4b:01:56:ba:49:89:ab:f7:60:
d5:5a:95:2a:11:ef:c4:b5:76:34:4e:5a:13:a7:1c:
e4:7e:f8:0d:a0:43:fb:1a:b2:56:49:3c:1e:03:dd:
c2:4a:41:c4:ba:1f:53:51:06:49:6c:c7:ef:1d:d3:
c8:b4:e8:b2:3a:7c:0d:88:b2:65:6c:df:7f:6a:db:
be:08:50:24:01:4f:59:97:09:4c:28:5b:5b:d0:96:
a8:56:04:ab:22:16:b7:56:c3:ad:47:90:06:a9:5b:
bc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5F:D6:45:69:C4:45:A1:67:44:73:F9:F5:D6:D5:4C:1D:FD:A3:E4
X509v3 Authority Key Identifier:
keyid:E0:9E:E1:B2:C1:B8:DF:16:38:67:A2:42:A3:0F:DE:A5:4F:01:DE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4J7hssG43xY4Z6JCow_epU8B3jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/7l_WRWnERaFnRHP59dbVTB39o-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/4J7hssG43xY4Z6JCow_epU8B3jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.156.172.0/24
158.156.193.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c7:a3:b2:49:00:2d:4d:65:9f:02:a8:38:e9:9f:38:22:be:
64:fd:68:a6:a9:91:a1:9f:52:21:e6:bf:2b:71:f6:76:4d:32:
fa:d2:59:af:d1:7d:9b:95:2b:49:a9:a6:b2:94:70:54:7a:c0:
3a:f3:3b:e8:de:5e:a5:99:5c:89:f5:2b:f5:16:a5:cb:7c:7f:
40:d0:15:ee:da:54:ca:50:e7:d7:fd:2e:b8:33:60:7b:77:5a:
8c:9e:e3:7d:72:be:77:bb:6e:79:0e:70:83:57:b0:21:cc:fb:
b2:28:92:be:a5:c9:d1:a0:d5:1c:8e:1c:eb:20:c8:2f:f0:a9:
6c:4d:fc:eb:3e:8a:f1:01:92:ce:62:43:87:39:e4:65:f5:85:
5a:a9:04:e2:63:c1:e7:ca:14:eb:5f:e7:99:f2:75:cd:d0:6f:
24:e9:61:82:f9:bb:a9:14:51:73:15:08:a8:58:ea:1f:a9:e7:
3a:03:d3:92:0c:62:4c:c8:04:ed:c2:d9:15:2b:76:28:7f:31:
9f:78:71:48:1f:1a:8a:76:67:33:c2:9f:22:08:c6:25:9a:c8:
80:bd:d8:49:5f:14:ce:c0:25:be:c3:48:60:a3:2f:60:36:fc:
9e:48:02:38:c2:5c:f0:20:8c:16:06:00:ee:61:11:95:0a:01:
ad:72:64:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:13 2026 by rpki-client