Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/ijSK3UiM2yHgTRyPkKvAj5IjBgo.roa
File: ijSK3UiM2yHgTRyPkKvAj5IjBgo.roa (raw, json)
Hash identifier: cIp5Yk9BQFmnySR87SQfkcqxb2ieclJq7mfArKR3Exg=
Subject key identifier: 8A:34:8A:DD:48:8C:DB:21:E0:4D:1C:8F:90:AB:C0:8F:92:23:06:0A
Certificate issuer: /CN=e09ee1b2c1b8df163867a242a30fdea54f01de34
Certificate serial: 01A17794D682F81D24EC9E5B80C38BC9AEC2
Authority key identifier: E0:9E:E1:B2:C1:B8:DF:16:38:67:A2:42:A3:0F:DE:A5:4F:01:DE:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4J7hssG43xY4Z6JCow_epU8B3jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/ijSK3UiM2yHgTRyPkKvAj5IjBgo.roa
Signing time: Mon 26 Oct 2026 09:40:05 +0000
ROA not before: Mon 26 Oct 2026 09:40:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 158.156.172.0/24 maxlen: 24
158.156.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Oct 2026 09:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:94:d6:82:f8:1d:24:ec:9e:5b:80:c3:8b:c9:ae:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e09ee1b2c1b8df163867a242a30fdea54f01de34
Validity
Not Before: Oct 26 09:40:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a348add488cdb21e04d1c8f90abc08f9223060a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:84:6d:05:4b:7c:ee:e3:97:5e:65:c8:98:
bd:6e:cd:71:08:e8:86:24:9b:fe:1e:f9:fe:5a:e1:
40:d0:3d:47:34:46:2e:72:fd:57:a5:2b:23:42:42:
0a:ba:ce:33:31:b0:6c:8e:a9:5c:92:d0:d3:99:4a:
b9:ec:48:8d:a9:c6:a2:07:b9:a2:24:41:31:0f:7f:
48:cf:9b:d6:58:b9:1b:af:8f:21:27:b3:eb:31:37:
c4:9c:5b:7d:e8:7c:b8:f7:e2:ab:83:7d:72:35:c0:
d4:57:6f:d2:b1:1a:ad:9a:e3:ce:9c:42:7f:c3:fd:
78:b8:3d:d5:d2:4c:14:67:89:59:48:77:f7:2f:3e:
91:97:85:3a:31:82:44:ad:7f:04:39:5a:5e:97:7b:
51:ab:ce:16:d1:55:de:fa:79:e2:86:3c:f7:f6:88:
36:fd:53:bb:e6:5e:dd:52:01:09:d4:b0:12:3b:a3:
c2:1b:82:5e:ae:67:4c:32:e2:26:4c:3b:7a:a1:48:
48:4f:54:a8:28:d7:ba:3b:b0:66:72:88:36:b4:53:
8a:0a:91:2c:79:e4:05:2d:c9:d9:20:4b:b7:00:82:
cb:38:5a:3e:28:f7:4a:02:c5:fe:9b:5b:c7:cd:ef:
dd:90:e0:99:41:97:e7:ea:81:d9:49:42:54:28:35:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:34:8A:DD:48:8C:DB:21:E0:4D:1C:8F:90:AB:C0:8F:92:23:06:0A
X509v3 Authority Key Identifier:
keyid:E0:9E:E1:B2:C1:B8:DF:16:38:67:A2:42:A3:0F:DE:A5:4F:01:DE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4J7hssG43xY4Z6JCow_epU8B3jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/ijSK3UiM2yHgTRyPkKvAj5IjBgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a49ec7-9f19-452a-8c77-19fe512ffb46/1/4J7hssG43xY4Z6JCow_epU8B3jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.156.172.0/24
158.156.193.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:92:2b:b7:1c:32:66:d5:c6:fa:fd:ea:24:c0:24:72:11:2c:
61:f2:73:2a:fb:40:64:d9:b5:07:6f:c2:58:b5:52:69:84:71:
92:5d:6a:51:47:43:25:98:6c:71:6a:40:b2:94:34:da:16:12:
91:77:49:f5:c7:1e:dd:fb:c5:21:71:d3:2a:81:a0:21:59:cf:
0a:d1:ec:ce:92:34:f6:a3:5d:c8:f3:a4:8c:3a:ff:9b:25:77:
94:94:e1:99:86:a2:2f:b3:8b:2b:99:75:f2:62:59:c2:be:27:
e1:80:ca:a2:74:6a:a5:16:0b:e9:05:a7:ee:9d:67:14:0a:8c:
67:9e:bf:22:de:f3:15:f5:bf:01:75:e0:c5:25:da:5d:fa:61:
1e:71:4d:6e:14:3f:7d:9e:21:46:e7:47:14:6f:27:99:32:26:
79:c3:c8:eb:76:ac:d9:3d:b3:67:d9:64:9c:1c:e2:f4:a5:c8:
0f:da:12:09:3b:f7:52:ab:82:27:5c:77:a7:63:88:4b:ca:18:
c2:3c:ba:61:5b:ed:83:5c:86:77:27:13:d7:26:fc:bd:a3:98:
3b:5d:d8:f4:6b:91:8f:dd:f1:17:1e:50:3c:ca:8f:8f:b5:aa:
67:f8:2b:94:b0:45:aa:3d:c9:aa:e6:82:d8:10:97:98:30:cd:
02:0a:75:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:16:08 2026 by rpki-client