Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/74d575-102b-4582-8b73-b7a263d681de/1/AQLeCoCpSDIDUmjEc24n1wUZL5I.roa
File: AQLeCoCpSDIDUmjEc24n1wUZL5I.roa (raw, json)
Hash identifier: VNcoV0wDSwcLZ49zAY80zdsb0NI5Tm4ALvcQDCRq/+I=
Subject key identifier: 01:02:DE:0A:80:A9:48:32:03:52:68:C4:73:6E:27:D7:05:19:2F:92
Certificate issuer: /CN=4825f2aafb591b6f412f95c89f0143d4632d4d9d
Certificate serial: 01A163CAF2316609CB11AFD2051AC1E837C4
Authority key identifier: 48:25:F2:AA:FB:59:1B:6F:41:2F:95:C8:9F:01:43:D4:63:2D:4D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SCXyqvtZG29BL5XInwFD1GMtTZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/74d575-102b-4582-8b73-b7a263d681de/1/AQLeCoCpSDIDUmjEc24n1wUZL5I.roa
Signing time: Thu 22 Oct 2026 13:26:47 +0000
ROA not before: Thu 22 Oct 2026 13:26:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35614
IP address blocks: 89.19.98.0/24 maxlen: 24
89.19.99.0/24 maxlen: 24
89.19.112.0/24 maxlen: 24
89.19.113.0/24 maxlen: 24
89.19.115.0/24 maxlen: 24
89.19.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Oct 2026 10:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:ca:f2:31:66:09:cb:11:af:d2:05:1a:c1:e8:37:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4825f2aafb591b6f412f95c89f0143d4632d4d9d
Validity
Not Before: Oct 22 13:26:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0102de0a80a94832035268c4736e27d705192f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:7b:b5:d5:a8:40:81:91:51:fa:cf:b2:12:
58:ac:13:22:29:da:5f:b3:e8:e1:ed:5a:d3:8b:b4:
b7:29:15:36:66:6e:0e:9d:ba:0a:43:13:90:9f:e7:
02:38:77:9e:06:42:0c:cc:54:0c:7d:9c:c7:c6:3b:
d4:83:8a:f4:9e:a2:3e:fa:75:04:34:4e:ce:4a:54:
de:94:ed:88:38:97:ca:b6:60:f8:84:20:26:06:c5:
2c:a5:fd:6a:db:64:17:06:79:40:82:6b:d6:5a:21:
78:2a:8c:7f:03:aa:56:56:41:2a:6f:d1:51:92:5f:
8c:54:70:d1:a5:d7:6c:8a:bd:c5:23:2c:3d:cd:6e:
51:3b:4a:0a:78:43:fd:a6:ac:06:d6:9f:cf:bf:ba:
14:36:db:72:dc:af:f6:18:d0:80:8e:4d:30:0c:51:
3a:b8:ba:0a:3e:80:d5:91:2a:9b:70:5d:cb:07:ec:
55:c6:11:e6:e0:2e:fe:99:cb:f5:f8:47:fc:98:3d:
53:bc:15:23:00:0c:9e:9e:ac:c7:6c:d5:a0:dd:65:
2c:16:dd:b5:08:dc:18:0f:0b:3b:8d:a5:db:a4:dc:
79:6c:14:af:28:06:89:04:d8:e6:1f:02:f7:76:1a:
aa:c9:dc:01:72:01:1f:1e:fb:44:ad:53:d4:20:12:
9f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:DE:0A:80:A9:48:32:03:52:68:C4:73:6E:27:D7:05:19:2F:92
X509v3 Authority Key Identifier:
keyid:48:25:F2:AA:FB:59:1B:6F:41:2F:95:C8:9F:01:43:D4:63:2D:4D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCXyqvtZG29BL5XInwFD1GMtTZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/74d575-102b-4582-8b73-b7a263d681de/1/AQLeCoCpSDIDUmjEc24n1wUZL5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/74d575-102b-4582-8b73-b7a263d681de/1/SCXyqvtZG29BL5XInwFD1GMtTZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.98.0/23
89.19.112.0/23
89.19.115.0-89.19.116.255
Signature Algorithm: sha256WithRSAEncryption
0a:7a:80:a3:15:de:aa:60:52:48:05:c7:eb:ec:42:d7:20:d5:
7b:ed:06:73:04:a8:1b:f4:f2:8c:a5:37:61:fa:ea:60:21:5f:
40:e2:1a:b1:45:03:56:bf:e1:5b:42:db:70:3e:78:43:e5:6b:
d0:0f:9b:02:97:79:8a:10:d4:8c:94:95:74:d2:3d:84:1d:dd:
73:c6:4b:8f:20:75:db:e8:37:51:d4:dd:7a:43:8a:24:64:dd:
91:aa:64:ff:2f:f4:c2:5d:0a:68:84:81:51:9e:5c:73:c1:81:
89:69:1f:f5:cf:0d:5b:a0:7d:b2:c8:0a:40:bc:7c:e8:40:bd:
c9:57:a6:63:6f:c9:19:c6:f0:4e:ca:2d:85:42:14:e6:63:65:
6c:b3:3d:b7:be:51:f9:7b:a1:8f:55:6b:e7:3b:f9:3d:f9:c5:
99:04:5e:f5:87:73:b7:e0:1d:b4:30:75:34:6f:5b:42:cb:eb:
2b:91:f8:11:f2:e7:db:88:4e:98:68:9f:c8:e8:38:8f:71:2d:
b2:22:1b:81:46:04:09:d9:c2:ea:59:cb:61:28:4a:98:16:27:
87:e7:eb:e1:c5:59:7b:c6:09:d6:5d:34:55:63:c0:b8:87:76:
44:87:cd:a3:2a:ae:b8:fa:a2:90:9c:ab:f7:55:d5:58:93:8e:
ad:c0:03:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:49:37 2026 by rpki-client