Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/GJ4FTYxM_IXuT1ye7XGCGkV0gdM.roa
File: GJ4FTYxM_IXuT1ye7XGCGkV0gdM.roa (raw, json)
Hash identifier: 0A08mXUIMjhTz5f0ZSFSa8oBB2fy3gvqR2S4YDVT4lg=
Subject key identifier: 18:9E:05:4D:8C:4C:FC:85:EE:4F:5C:9E:ED:71:82:1A:45:74:81:D3
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019FAC6F2B9918426286053BD05B862A6A49
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/GJ4FTYxM_IXuT1ye7XGCGkV0gdM.roa
Signing time: Wed 29 Jul 2026 05:53:14 +0000
ROA not before: Wed 29 Jul 2026 05:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 2a13:d0c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 13 Aug 2026 20:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:6f:2b:99:18:42:62:86:05:3b:d0:5b:86:2a:6a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jul 29 05:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=189e054d8c4cfc85ee4f5c9eed71821a457481d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:4d:c5:58:c0:d7:4f:17:69:a6:fb:e1:a3:
53:50:e5:f1:8b:f1:85:64:62:34:c0:e6:27:69:81:
3e:16:68:16:ca:e9:35:d1:64:d3:dd:3a:2c:d8:1a:
55:98:b6:07:91:20:d3:69:07:13:df:96:a4:f0:54:
cc:6b:3b:ee:d0:7e:a2:c1:d5:25:e0:67:29:7b:04:
cb:c5:e9:51:2f:46:53:f1:8a:69:e8:ae:3d:bb:f8:
03:65:5b:e3:13:70:b3:03:2a:b6:d0:cf:f9:31:d0:
0c:4d:e9:63:38:6d:f3:01:a9:42:3d:f6:73:8d:b4:
e6:6e:ab:6c:e8:cd:f7:e3:58:38:50:9d:98:43:3f:
fb:1e:58:ca:9c:1c:28:67:77:75:0a:09:b1:9d:74:
94:d3:ab:ec:bb:e6:72:47:38:ac:a8:96:79:6a:f1:
f5:24:13:c8:93:46:5b:96:d5:5e:bc:0b:97:c4:0d:
b0:e9:74:c5:be:e7:2b:15:1b:8a:56:2b:1f:6f:b9:
72:c5:a8:d8:62:59:c4:43:f5:45:c3:e2:a2:74:12:
52:0e:1a:1e:b1:09:09:a5:a2:aa:48:d1:3c:aa:a3:
0e:df:e4:19:43:82:b8:c9:eb:6f:c9:86:72:9f:91:
6b:df:25:a1:11:fb:fc:0b:fb:62:7d:7e:9e:0c:2e:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9E:05:4D:8C:4C:FC:85:EE:4F:5C:9E:ED:71:82:1A:45:74:81:D3
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/GJ4FTYxM_IXuT1ye7XGCGkV0gdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d0c7::/32
Signature Algorithm: sha256WithRSAEncryption
3f:fb:de:96:b3:5e:86:5a:a6:05:74:32:f9:3a:0f:32:39:0a:
f3:ff:72:2a:bd:93:ca:1c:ca:d8:2a:4f:20:7e:1f:1c:b9:5f:
5b:c2:3d:4c:da:12:ba:e0:80:ce:ff:01:29:4e:66:c0:c9:2a:
70:d2:9f:23:7f:b2:e5:39:da:03:b9:e8:b6:df:c5:70:fb:b6:
7b:46:fa:b0:4d:8e:d1:1d:78:88:76:89:3a:c8:f5:e1:af:08:
cb:9f:28:36:11:44:1d:7e:a5:a7:46:12:1a:5e:92:18:6a:bf:
e7:71:42:df:dd:f8:16:ea:c3:d8:c9:0b:4d:7b:b9:92:40:9b:
66:51:2e:20:8e:1a:ee:f4:4e:fb:83:62:e3:fd:49:a4:f9:08:
36:d7:da:84:56:0a:98:10:93:55:2d:8f:d0:68:57:78:4e:9f:
a1:d1:1d:3e:9c:7f:7e:a1:24:88:fb:9d:34:ae:e3:66:0c:0d:
65:a8:da:6b:fe:0a:ec:3a:d4:6a:c8:0e:b3:10:34:c1:16:6b:
3c:19:ea:c9:9e:f0:aa:4b:61:6b:0d:e0:1c:77:dd:6e:2e:8c:
88:ab:8b:39:b9:0f:ba:95:b1:46:ce:73:a6:f2:85:5e:8b:a5:
62:10:91:e4:e1:81:2a:a8:90:d8:6d:6a:11:a1:48:9f:3e:76:
35:f9:6d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:47:32 2026 by rpki-client