Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/V1dkkzB64alFII5F19Ad5RleT2E.roa
File: V1dkkzB64alFII5F19Ad5RleT2E.roa (raw, json)
Hash identifier: kTucVoli+DdV+x4DxiQot4dVjlTuDlIHSr3EQdKRSAg=
Subject key identifier: 57:57:64:93:30:7A:E1:A9:45:20:8E:45:D7:D0:1D:E5:19:5E:4F:61
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019CEB20EE3E821DCB7923E8CC0E552C5548
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/V1dkkzB64alFII5F19Ad5RleT2E.roa
Signing time: Sat 14 Mar 2026 06:55:29 +0000
ROA not before: Sat 14 Mar 2026 06:55:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209697
IP address blocks: 89.33.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Mar 2026 08:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:20:ee:3e:82:1d:cb:79:23:e8:cc:0e:55:2c:55:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 14 06:55:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57576493307ae1a945208e45d7d01de5195e4f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:99:e6:b1:a7:53:33:53:4a:c4:48:99:ca:07:
88:30:a6:b8:37:44:d2:2b:8a:ab:13:a4:77:8b:9c:
68:1c:a9:94:77:89:a3:de:73:b4:35:84:08:a6:bf:
3a:89:72:a8:d2:e9:85:e8:52:8c:4e:b5:56:a9:b8:
53:79:e4:03:d8:cd:83:87:34:e0:82:f3:aa:69:c6:
5d:1f:92:bc:e3:01:4c:92:55:8d:2a:2d:87:b4:9d:
6d:f6:e8:ac:1c:4c:cf:29:fb:a0:de:fd:2f:1d:0a:
dd:28:18:a4:37:76:8c:fa:2d:94:ef:47:55:d2:b7:
24:84:0d:10:63:3c:d6:73:22:0e:fc:9a:d2:7c:c4:
67:69:4f:93:0b:24:52:e2:c2:32:05:c9:6c:a8:05:
b0:5f:43:f3:1b:4e:94:12:4a:52:76:fa:46:c9:d6:
48:14:bf:cc:79:e8:ec:79:d7:4c:fd:11:d4:ca:b7:
4d:c4:bf:d3:24:d4:78:a2:1b:83:20:16:10:d8:5b:
b2:84:6f:e3:81:a6:d4:e9:c5:4b:91:59:e0:bd:0f:
96:3e:08:2c:87:d5:2e:4d:67:67:6e:77:6b:67:b9:
09:e3:c8:f6:89:cc:b0:9b:44:9a:c6:44:f8:82:03:
84:bb:2f:24:06:a1:60:d7:c7:94:2d:7f:c8:70:18:
ad:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:57:64:93:30:7A:E1:A9:45:20:8E:45:D7:D0:1D:E5:19:5E:4F:61
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/V1dkkzB64alFII5F19Ad5RleT2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.193.0/24
Signature Algorithm: sha256WithRSAEncryption
50:4c:86:84:4f:87:fd:8f:eb:85:9a:37:b1:9a:6e:01:ce:86:
de:be:52:64:9e:da:da:80:77:9c:23:54:ba:d6:70:0f:e5:a3:
b8:ac:0c:9e:7f:38:94:03:99:28:76:1b:61:ef:bd:5c:2f:99:
3f:f9:4a:6b:2c:4b:ff:a8:03:4f:4b:ce:5f:c4:d8:e0:34:19:
dd:b5:41:2e:96:70:15:0d:74:ce:4c:cc:36:62:b2:4c:48:12:
f1:44:c6:0c:56:92:a1:0e:6f:fa:92:27:1b:83:47:66:34:24:
79:10:db:ec:4f:f8:63:0c:6e:ad:8a:8d:51:c9:f8:06:f2:f2:
bc:9b:9b:38:87:2f:29:11:f6:ea:a2:4a:11:9a:15:ba:de:c7:
09:fb:26:a8:f2:1c:cc:22:2c:24:34:33:68:7e:f2:d9:0e:f1:
39:22:6c:86:79:ba:8c:76:a6:cc:2a:6d:d7:ff:2a:5b:7a:3a:
04:c6:ce:59:73:84:6e:43:f2:5e:5e:f1:0e:6e:af:6f:5a:23:
f0:79:3b:3f:63:4e:9e:06:3b:b9:8e:90:10:c0:63:f3:bb:58:
16:8c:82:fc:0a:bd:e8:2a:dc:13:b4:76:96:52:9e:14:50:2c:
70:a0:73:e7:bd:0c:e3:68:08:2e:ae:aa:d3:96:cf:f1:d1:a6:
5f:86:85:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 05:13:06 2026 by rpki-client