Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/rawa8YzwukqYKJZMxJ3h4jkELaM.roa
File: rawa8YzwukqYKJZMxJ3h4jkELaM.roa (raw, json)
Hash identifier: ty0ePf6ZMSOb6t4B60ZpvI/7QC9zdH1wp6EOCSbbwEs=
Subject key identifier: AD:AC:1A:F1:8C:F0:BA:4A:98:28:96:4C:C4:9D:E1:E2:39:04:2D:A3
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019E986E5DAB5226D1BA91B4F57C59C7E192
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/rawa8YzwukqYKJZMxJ3h4jkELaM.roa
Signing time: Fri 05 Jun 2026 15:37:10 +0000
ROA not before: Fri 05 Jun 2026 15:37:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.246.211.0/24 maxlen: 24
77.246.221.0/24 maxlen: 24
88.80.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jun 2026 09:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:6e:5d:ab:52:26:d1:ba:91:b4:f5:7c:59:c7:e1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jun 5 15:37:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adac1af18cf0ba4a9828964cc49de1e239042da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:ec:c8:7b:7d:35:23:b8:f5:30:ba:1f:51:
55:29:2b:e4:83:10:c0:a0:54:72:5a:1e:a8:e9:8e:
30:88:19:2d:08:f4:71:79:29:02:15:05:33:f1:6f:
17:03:e5:14:cf:6f:96:30:5c:88:f8:0c:64:ad:bf:
fd:27:06:3e:63:a8:c1:f8:cb:9e:37:1d:a3:40:29:
d1:11:81:ec:c2:7d:78:84:fd:99:a3:66:03:40:a1:
66:64:73:f7:57:8e:5a:79:d9:b5:0c:a9:c2:28:7c:
23:b7:c7:2c:aa:33:5f:a2:35:1d:b7:41:8a:c5:30:
68:5b:b3:cd:fd:e4:6f:66:3b:46:9c:76:63:56:ce:
8c:12:ea:b9:85:db:52:d0:e7:07:47:fc:b5:0d:f5:
22:bf:36:76:23:aa:ed:c5:4d:a8:a4:4e:51:67:05:
58:ee:a6:e7:45:ee:03:12:34:b9:62:1e:37:ba:c9:
8d:55:c6:fa:7b:52:cd:84:2d:2a:26:38:3b:61:71:
39:36:46:c3:c9:c3:41:48:dc:1f:de:8d:b6:47:5f:
0d:41:52:c0:28:aa:cf:76:e3:12:52:26:54:78:1d:
f9:30:25:8b:fd:3c:eb:62:2f:20:34:a6:bc:53:60:
88:fa:25:44:63:0a:3a:7f:7e:27:4d:0d:32:c9:61:
5e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AC:1A:F1:8C:F0:BA:4A:98:28:96:4C:C4:9D:E1:E2:39:04:2D:A3
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/rawa8YzwukqYKJZMxJ3h4jkELaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.211.0/24
77.246.221.0/24
88.80.137.0/24
Signature Algorithm: sha256WithRSAEncryption
28:87:eb:66:75:d4:c4:c2:56:b7:57:49:ea:71:ed:d1:0c:eb:
8b:ed:8f:ca:9f:ba:5a:3d:a6:7a:c1:d1:73:c1:40:f7:59:79:
9c:d5:05:b9:8e:95:aa:ba:8d:b5:e3:86:64:0d:95:cb:e7:70:
c3:a2:26:99:2c:9c:53:1f:9f:21:2a:de:ff:23:ad:73:f2:34:
fd:79:42:2b:64:1b:1d:78:4f:69:43:8d:24:0b:10:d8:fc:57:
3a:32:27:48:85:0f:83:40:d6:3a:12:85:3d:dc:7c:ff:f5:53:
39:94:ce:8d:84:5b:23:2f:06:f9:fa:5f:0f:60:66:03:da:7e:
aa:18:2c:83:0f:17:07:ca:cb:85:74:4b:e2:8f:18:3d:09:2a:
36:d6:99:46:0f:9e:2b:2f:2b:b4:6b:2f:9d:ef:b0:7c:17:86:
ac:29:af:84:b8:d5:f4:be:f4:b1:fb:eb:b4:aa:a3:cd:79:aa:
93:54:24:2d:29:ff:6f:5c:68:46:a5:d3:ff:bc:c3:38:41:51:
38:2a:8b:6b:88:e8:53:bd:dd:13:3d:64:5a:38:22:77:ba:44:
da:5a:db:cb:a1:d2:38:00:7f:0a:68:b9:ee:8f:a0:76:be:c4:
6a:d9:19:a5:59:3b:41:b8:06:dc:22:ee:f7:19:cb:68:0e:10:
f4:74:97:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:06:19 2026 by rpki-client