Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/YwxHRgJIxHZSM3wurSqLH6cKPpY.roa
File: YwxHRgJIxHZSM3wurSqLH6cKPpY.roa (raw, json)
Hash identifier: WBV+7CjzQLbo96ZsV7NcAcgTAZgbzJ8xoEPuhiJRE74=
Subject key identifier: 63:0C:47:46:02:48:C4:76:52:33:7C:2E:AD:2A:8B:1F:A7:0A:3E:96
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019CFA914470A9F75377B707E2D155B7E575
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/YwxHRgJIxHZSM3wurSqLH6cKPpY.roa
Signing time: Tue 17 Mar 2026 06:52:30 +0000
ROA not before: Tue 17 Mar 2026 06:52:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.33.12.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
93.114.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Mar 2026 08:59:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:91:44:70:a9:f7:53:77:b7:07:e2:d1:55:b7:e5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 17 06:52:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=630c47460248c47652337c2ead2a8b1fa70a3e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6d:94:bf:d4:43:ee:83:bb:a8:9e:40:a8:ba:
b1:78:79:4a:02:53:fb:1a:81:86:88:8d:45:44:c8:
0a:25:c0:82:82:c4:1c:31:44:8c:f2:74:f9:24:17:
e7:64:88:2f:59:e3:ec:35:c3:67:9b:7c:8d:e4:88:
04:4a:a8:fb:0c:3c:0c:af:5d:a6:b8:2b:45:6d:99:
95:3c:18:d6:4c:1a:35:4d:2e:6c:1b:b3:fc:31:30:
5d:69:86:f5:35:ec:bd:a5:38:da:bf:7a:b5:d6:77:
f6:c8:ae:34:a4:71:9d:46:2f:86:65:95:95:05:72:
23:e5:1c:fe:a9:b8:4a:6f:83:29:a9:2b:63:b7:25:
3c:ca:69:6e:52:e5:ba:0e:fc:aa:ce:46:5b:26:fb:
8f:c6:80:5d:c7:ce:f6:11:bd:31:49:98:86:a1:98:
1c:c4:70:b3:3b:f0:a1:c0:45:ec:af:ba:06:9e:46:
c0:e7:8f:e5:86:3e:25:cf:ab:f7:45:d8:dd:72:db:
a5:f1:8f:45:49:34:c6:60:68:9d:35:1d:f7:20:b2:
89:48:96:8e:55:27:3d:3e:d0:27:c1:90:33:40:db:
e8:12:4e:18:3a:7e:06:05:00:91:7a:07:7c:2e:23:
95:ca:6f:a5:d1:5f:f7:d9:94:34:9c:40:32:26:3d:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0C:47:46:02:48:C4:76:52:33:7C:2E:AD:2A:8B:1F:A7:0A:3E:96
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/YwxHRgJIxHZSM3wurSqLH6cKPpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.12.0/24
89.42.82.0/23
93.114.72.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:88:ad:93:bd:b8:aa:b2:35:16:0d:42:54:90:f3:c6:59:c2:
11:40:13:a3:50:d2:d6:85:ac:53:9c:65:93:db:19:54:a2:90:
e1:89:e2:fd:d5:c1:0d:6c:30:ac:cc:86:b0:d9:e1:c5:16:a4:
6a:8b:cb:3a:51:be:9e:24:05:96:e6:cf:fd:f3:c3:b8:53:0e:
4e:37:86:59:62:63:9b:67:9c:ce:bd:e9:21:73:3a:1a:a9:1e:
7d:d4:26:ca:d2:e9:6e:04:df:b1:ad:f4:4a:7f:81:88:78:b6:
2b:1c:73:05:ce:38:55:41:1c:93:59:30:2e:cc:db:0e:66:5f:
e5:60:d4:36:2b:4e:f8:c6:d8:29:f7:46:ef:ec:78:db:d5:1f:
bf:da:f0:4b:3b:8f:44:0c:7a:7a:f1:32:67:6e:36:2e:3e:6b:
e8:d0:64:e5:da:12:d9:fa:19:92:47:2b:70:54:e7:fc:01:82:
53:7e:e6:68:07:22:74:0a:1a:d7:ff:a3:8f:97:f5:eb:84:18:
80:a5:b2:c6:31:74:5d:bd:f8:59:da:89:8d:13:d2:8e:17:7e:
20:8d:58:f5:47:12:37:31:17:8b:44:14:51:52:40:28:43:48:
c2:89:78:8b:18:9b:cd:c0:f5:5c:de:47:6c:1e:00:b7:a1:67:
85:33:4a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 05:14:30 2026 by rpki-client