Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Kd2-lttLTrZxzH5kzh9JBAKXIOI.roa
File: Kd2-lttLTrZxzH5kzh9JBAKXIOI.roa (raw, json)
Hash identifier: o9AXV4+Wq+K0QdQ1Jb62Bpp/MDQ18XVvbufdS7tU7yk=
Subject key identifier: 29:DD:BE:96:DB:4B:4E:B6:71:CC:7E:64:CE:1F:49:04:02:97:20:E2
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019FDB0DAC50D2397E141BCF030780A6CED8
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Kd2-lttLTrZxzH5kzh9JBAKXIOI.roa
Signing time: Fri 07 Aug 2026 07:08:54 +0000
ROA not before: Fri 07 Aug 2026 07:08:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a01:f040::/29 maxlen: 29
2a0e:d300::/29 maxlen: 29
2a0f:89c0::/29 maxlen: 29
2a0f:e3c0::/29 maxlen: 29
2a10:7ac0::/29 maxlen: 29
2a13:b740::/29 maxlen: 29
2a13:bd40::/29 maxlen: 29
2a13:be40::/29 maxlen: 29
2a13:bec0::/29 maxlen: 29
2a13:d0c0::/32 maxlen: 32
2a13:d0c5::/32 maxlen: 32
2a13:d1c0::/29 maxlen: 29
2a13:dfc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 13 Aug 2026 20:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:0d:ac:50:d2:39:7e:14:1b:cf:03:07:80:a6:ce:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Aug 7 07:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29ddbe96db4b4eb671cc7e64ce1f4904029720e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:f1:82:e4:c4:76:85:a6:ed:38:47:b3:56:
30:4e:0d:9f:d6:84:cd:32:3b:77:2d:57:d1:f2:87:
1e:05:e0:9b:6b:d9:e7:fc:dc:b3:6f:f4:c1:84:c0:
c7:2c:83:28:cd:98:c7:1d:88:0c:21:9a:e3:fe:1b:
97:7b:ae:1f:1b:e3:f8:0b:65:1b:2d:81:28:bc:92:
5c:d6:88:9e:87:0e:3c:2e:76:61:1e:9c:02:2b:36:
49:a9:d1:26:78:0e:51:95:8a:c8:cd:3f:49:2c:a1:
fb:ed:17:a6:fe:c5:6a:a6:29:db:54:61:2f:29:10:
1d:ce:af:2c:90:31:12:b1:50:57:25:ea:97:8d:df:
be:b8:e5:9d:75:07:42:e8:87:5d:54:a8:e7:9b:a2:
33:1e:c7:ff:86:46:12:4a:43:97:d1:85:a1:69:42:
1a:1b:19:1a:8e:64:a4:26:95:64:5a:90:4f:a6:4b:
4d:01:fd:a7:0a:cb:3c:3b:2b:12:d1:f3:78:f3:6d:
b8:40:e6:28:2f:da:c1:3c:82:97:6c:6b:26:38:ca:
e5:e8:99:87:88:76:3b:a1:4a:3f:c4:ac:4a:f9:9c:
f2:b0:b2:9c:71:87:d6:79:a3:33:1f:7b:ba:8d:24:
55:a8:dd:43:7d:93:b8:7e:a2:15:c0:9a:72:96:fd:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DD:BE:96:DB:4B:4E:B6:71:CC:7E:64:CE:1F:49:04:02:97:20:E2
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Kd2-lttLTrZxzH5kzh9JBAKXIOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f040::/29
2a0e:d300::/29
2a0f:89c0::/29
2a0f:e3c0::/29
2a10:7ac0::/29
2a13:b740::/29
2a13:bd40::/29
2a13:be40::/29
2a13:bec0::/29
2a13:d0c0::/32
2a13:d0c5::/32
2a13:d1c0::/29
2a13:dfc0::/29
Signature Algorithm: sha256WithRSAEncryption
92:de:de:b0:50:65:d3:5f:5d:7d:cb:86:b8:b4:68:5c:63:b1:
23:7b:d3:88:19:6c:ae:1a:a4:0e:1c:1e:a2:83:11:d5:5c:bf:
b1:ce:45:7c:54:85:ea:15:45:1b:b1:6b:64:d4:46:34:95:e7:
78:ac:ee:ef:41:c7:6d:5b:2f:92:e1:b0:de:45:ca:e3:70:b2:
64:a6:98:cd:61:78:83:19:d5:4e:39:59:34:32:85:a2:40:b1:
9b:55:5c:5f:66:18:a1:f4:35:ae:58:de:84:a1:5d:73:9e:7b:
0f:a4:bd:6a:b3:dd:95:96:fb:7e:00:0b:03:e6:f3:66:5a:fd:
62:7b:57:ee:9d:51:b3:3f:ba:51:2b:a8:1b:dc:16:b7:3c:61:
78:a1:c5:5d:47:35:24:72:f0:12:aa:01:1d:07:90:b7:c5:6f:
5d:0a:f8:9c:cd:cc:bd:0f:47:69:cb:21:34:3b:ed:1c:fb:c2:
8c:64:20:8c:da:13:cd:e7:93:eb:bb:76:97:94:e0:07:70:d9:
3c:c4:60:1e:fc:8d:a1:fe:c1:4b:95:7e:2a:12:7a:56:45:8b:
7b:8b:ba:09:2c:b0:16:03:85:66:77:5b:c6:97:9c:54:87:76:
eb:6c:04:0e:a5:e1:f1:f3:dc:40:f1:07:2f:01:1f:3f:a7:a1:
15:e0:4d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:50:05 2026 by rpki-client