Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/A6LfDgEy1-CIq_wKeSafF7owxGw.roa
File: A6LfDgEy1-CIq_wKeSafF7owxGw.roa (raw, json)
Hash identifier: 2eSRz1uTsX5V8ge1JFn7YOgJsteUxb9SFLJxq6LxphY=
Subject key identifier: 03:A2:DF:0E:01:32:D7:E0:88:AB:FC:0A:79:26:9F:17:BA:30:C4:6C
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0E8EB5EE6C0FC693CD8A5C31B00F34554
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/A6LfDgEy1-CIq_wKeSafF7owxGw.roa
Signing time: Mon 28 Sep 2026 16:48:54 +0000
ROA not before: Mon 28 Sep 2026 16:48:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218641
IP address blocks: 2.58.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Sep 2026 20:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:eb:5e:e6:c0:fc:69:3c:d8:a5:c3:1b:00:f3:45:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 28 16:48:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03a2df0e0132d7e088abfc0a79269f17ba30c46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:72:e2:34:67:73:cb:5e:82:b8:64:0d:bb:
24:60:71:90:f6:b0:55:5e:02:bc:56:67:db:72:91:
95:77:9c:c3:12:e4:98:fb:aa:9d:43:a4:05:72:af:
23:85:9f:41:4a:25:a4:27:32:25:16:6b:83:4f:4c:
ab:f8:08:62:6e:03:6e:60:16:9f:da:cd:cf:74:16:
d7:4a:89:3b:b7:78:5a:bc:9f:9f:9f:49:ba:ec:ba:
ab:6c:4b:4a:21:9e:b6:da:24:14:47:f4:ac:ff:ed:
5e:2c:79:14:e1:8c:9c:bd:3a:8a:63:a2:58:a9:1c:
69:9c:a7:d0:31:0a:23:b3:8e:af:dc:66:ae:ab:f4:
24:23:92:d7:a6:92:07:29:87:7a:d8:60:2a:50:a9:
fb:ae:d5:01:62:31:77:9a:f6:e8:57:5a:1c:8a:2e:
3f:74:af:9c:c5:61:a1:17:be:12:9f:c5:13:30:d0:
0d:2d:51:4b:41:26:b1:2e:9f:93:e9:bd:05:8b:d7:
3d:00:8c:45:a2:a1:80:2d:e1:73:7c:b8:3d:b3:bc:
f9:9f:90:6e:eb:40:f9:3a:50:70:59:3f:44:1e:e7:
4f:19:28:9f:2e:b6:d8:01:6d:70:bb:75:12:f7:cc:
e9:e9:ab:53:8e:1b:e8:31:b5:e1:1a:b2:24:bc:33:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A2:DF:0E:01:32:D7:E0:88:AB:FC:0A:79:26:9F:17:BA:30:C4:6C
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/A6LfDgEy1-CIq_wKeSafF7owxGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.152.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fa:19:86:37:d3:d4:52:b8:9d:9c:20:fe:ef:de:1a:78:39:
a9:05:2d:2c:c0:c5:9c:96:b6:c8:0f:0a:92:c6:bd:b8:bf:1b:
c6:5a:87:80:96:4c:da:7f:44:3c:76:2b:37:25:c4:00:4a:d0:
bb:65:cb:d1:32:c0:e8:26:3d:90:a2:58:ee:90:57:f2:e9:56:
d1:f1:0c:1f:50:55:6e:e3:6c:55:9e:f0:b4:1a:35:58:a1:9a:
33:b5:2e:3c:ae:bd:e0:7d:84:f2:59:b7:e7:8a:8e:cf:0e:34:
40:f8:31:fc:6e:48:fc:e1:e5:00:49:39:1d:0f:d3:0e:7b:f2:
12:57:7f:f4:f7:91:40:14:be:35:c0:49:c8:3a:78:ff:36:b4:
48:42:ec:28:e9:5e:94:57:7c:3e:62:c6:6a:88:9d:b3:27:27:
8b:64:c9:35:22:e9:84:ab:ae:8a:e3:dd:bb:0c:02:46:07:98:
72:72:3e:8e:f2:40:fc:d7:41:a9:35:5b:15:7e:37:4f:d1:4c:
67:1c:7c:3f:93:7a:f8:bd:a8:12:6a:e4:01:60:14:9b:a1:55:
22:3b:43:0e:2d:80:61:a7:28:eb:d8:e4:e1:45:41:71:86:52:
5e:60:6c:20:e5:cd:07:c5:4e:90:f4:4c:f5:e4:fc:c3:c7:59:
59:7f:e3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:45:56 2026 by rpki-client