Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/l1p5iDaUEp3dXhSXDW2caao8fXM.roa
File: l1p5iDaUEp3dXhSXDW2caao8fXM.roa (raw, json)
Hash identifier: 1QRMDfHAfIv8nVJZm/KEzkcBizCF3Kut40SW99+mCwM=
Subject key identifier: 97:5A:79:88:36:94:12:9D:DD:5E:14:97:0D:6D:9C:69:AA:3C:7D:73
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A1643B8ECCD5CE8A4C54D858B289233589
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/l1p5iDaUEp3dXhSXDW2caao8fXM.roa
Signing time: Thu 22 Oct 2026 15:29:47 +0000
ROA not before: Thu 22 Oct 2026 15:29:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219202
IP address blocks: 37.235.249.0/24 maxlen: 32
37.235.250.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 23 Oct 2026 14:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:3b:8e:cc:d5:ce:8a:4c:54:d8:58:b2:89:23:35:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Oct 22 15:29:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=975a79883694129ddd5e14970d6d9c69aa3c7d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:03:b8:66:8e:d6:3d:06:ae:1f:81:00:9c:7a:
55:42:74:1c:ae:61:73:fa:19:3d:90:97:97:68:0d:
6d:f1:eb:c0:af:89:2d:21:3a:55:31:b5:65:8d:9d:
8f:0d:c9:8a:32:19:72:65:75:3d:89:1c:ef:10:c1:
08:c3:71:71:e2:a3:82:e8:f3:c8:8f:46:45:a9:9d:
f2:0f:ed:30:21:95:9f:49:dc:45:d1:72:66:42:3e:
84:9c:77:87:31:f2:15:ef:1e:d6:03:c1:f0:d5:29:
68:64:51:57:5f:ca:44:9c:a9:de:a8:5a:25:06:1d:
6f:68:da:c6:96:37:97:ca:a3:72:06:4b:d2:af:04:
43:11:f6:2e:79:be:ef:25:de:8f:46:7b:b7:68:13:
63:8d:5c:ac:00:4d:19:5f:b2:d8:37:2c:4c:d5:3c:
2f:29:9f:40:f6:db:79:bf:92:27:4c:98:cf:6c:d0:
a6:e7:f3:71:c1:81:23:ed:db:41:71:95:25:dc:97:
19:57:cb:7c:35:ae:a9:04:f3:fa:bb:8a:44:3b:6c:
f7:5c:50:3f:99:03:2a:fd:da:94:d1:d5:50:ac:a6:
f3:b0:35:4d:92:c7:57:2d:24:26:b6:12:43:6d:b4:
e9:78:f1:bf:ec:c9:47:0d:b7:92:8b:9e:f4:fb:cc:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5A:79:88:36:94:12:9D:DD:5E:14:97:0D:6D:9C:69:AA:3C:7D:73
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/l1p5iDaUEp3dXhSXDW2caao8fXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.249.0-37.235.250.255
Signature Algorithm: sha256WithRSAEncryption
37:6f:86:97:9b:45:53:e2:44:b9:50:84:8d:a9:fb:cb:2a:6c:
63:63:c7:67:ca:5d:5d:ea:6e:8b:21:77:7f:f1:c4:42:94:77:
12:e0:e1:7f:0b:1e:d0:b2:91:84:8c:17:4a:dc:95:5b:83:69:
36:b9:b1:f0:c5:d8:7a:0b:61:6d:ec:4d:65:b8:c0:f5:bc:2a:
dd:35:8b:9a:59:5a:7e:fa:2c:52:e5:53:bd:02:b0:66:af:9d:
fc:28:07:3c:ba:1d:cf:43:24:62:87:9b:c1:ab:68:07:22:ea:
6b:4c:87:03:0a:66:f3:55:62:38:c4:c0:e3:72:cb:b8:ba:21:
bc:9a:a6:c5:79:0c:74:c3:0f:5b:91:ce:6f:50:0f:51:15:8e:
19:ba:23:ea:7e:27:b8:e9:4c:48:cc:d1:c5:0e:9b:1f:0f:79:
2f:dd:b2:a3:e8:6e:c0:7c:fc:5c:d8:b9:1e:5e:b9:18:d3:d2:
41:1a:28:95:b9:ee:fe:84:4d:65:5c:ae:a4:2f:d4:82:be:25:
52:cf:76:71:85:4e:35:8a:40:f3:1a:6b:32:21:bd:57:ad:1a:
bd:a4:d1:83:70:98:2f:72:8e:c0:5c:c4:b2:e1:71:38:39:46:
c6:15:27:6f:52:0b:42:b3:58:05:5d:f1:2e:b6:36:c5:3a:8d:
92:dd:ea:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:19:42 2026 by rpki-client