Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/L22NhSaekNvismH-e8GguBIeI9o.roa
File: L22NhSaekNvismH-e8GguBIeI9o.roa (raw, json)
Hash identifier: ySKCJ57pHKekdPgnA156+MPykVZmDmqHDVpwCtlrlAs=
Subject key identifier: 2F:6D:8D:85:26:9E:90:DB:E2:B2:61:FE:7B:C1:A0:B8:12:1E:23:DA
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 019DF36E5C94C345E8F9EEB800A04AFC9A98
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/L22NhSaekNvismH-e8GguBIeI9o.roa
Signing time: Mon 04 May 2026 14:39:49 +0000
ROA not before: Mon 04 May 2026 14:39:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398549
IP address blocks: 69.38.204.0/22 maxlen: 24
176.10.89.0/24 maxlen: 24
2a13:d8c1::/32 maxlen: 32
2a13:d8c2::/32 maxlen: 48
2a13:d8c3::/32 maxlen: 32
2a13:d8c3:5::/48 maxlen: 48
2a13:d8c3:7::/48 maxlen: 48
2a13:d8c5::/32 maxlen: 32
2a13:d8c6::/32 maxlen: 32
2a13:d8c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 05 May 2026 14:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:6e:5c:94:c3:45:e8:f9:ee:b8:00:a0:4a:fc:9a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: May 4 14:39:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f6d8d85269e90dbe2b261fe7bc1a0b8121e23da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:8c:5a:31:d0:d4:2b:61:c2:3d:18:50:80:
3e:1d:03:39:1a:84:d6:58:b0:31:4d:ca:03:1a:fa:
21:95:6c:99:c7:40:4c:fa:91:4e:79:de:38:7a:16:
00:ab:79:cc:09:e4:b7:18:96:87:52:90:4c:22:46:
08:ee:ea:9d:a3:e2:da:4a:e7:da:c5:8a:ec:31:43:
dd:b5:93:26:cd:42:71:98:f8:61:86:83:5c:ce:af:
11:26:ea:97:60:f5:d3:00:4c:db:6a:0b:62:fc:29:
4d:5c:9b:ec:bd:e3:b6:af:7c:7c:b8:e3:74:40:2b:
5e:14:a9:30:f9:b8:a2:89:1c:bb:ab:c3:e5:48:0c:
64:97:4e:de:87:b7:10:3c:58:a9:b5:0e:86:07:b5:
05:0d:c2:24:db:12:22:0b:59:64:6e:6f:19:a2:a0:
e4:77:33:b1:24:ae:e9:00:f0:bf:80:7b:6e:e6:5a:
f6:41:c6:ab:0a:ae:03:1c:94:12:d7:f6:10:5b:49:
ec:64:74:96:25:d3:83:6c:6a:f1:94:02:4a:2c:68:
ba:bf:ae:4a:0e:75:81:8c:17:0c:d5:4c:61:a1:5c:
20:6a:07:fa:20:6d:82:55:51:8d:ef:9a:d7:d0:af:
23:d3:f2:b9:8b:15:bf:e6:e2:92:b5:72:96:e8:8e:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6D:8D:85:26:9E:90:DB:E2:B2:61:FE:7B:C1:A0:B8:12:1E:23:DA
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/L22NhSaekNvismH-e8GguBIeI9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.38.204.0/22
176.10.89.0/24
IPv6:
2a13:d8c1::-2a13:d8c3:ffff:ffff:ffff:ffff:ffff:ffff
2a13:d8c5::-2a13:d8c7:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:0f:70:34:c6:00:62:80:94:c7:01:0c:4d:10:fb:bd:09:e6:
40:91:89:cc:32:3f:4e:d2:27:10:83:f4:f7:78:33:8e:94:c6:
39:d9:ff:03:3b:34:dd:4f:92:e1:91:44:8b:2f:c5:de:e2:4f:
14:72:7e:84:b8:27:83:8f:a2:d0:de:3c:bf:7f:5d:27:ab:66:
d2:61:99:15:f6:ec:aa:e2:98:9b:d7:7c:47:45:51:64:f6:6b:
f8:3a:9a:b3:b6:17:56:6b:49:aa:a4:86:0c:bd:5e:5b:46:cb:
3b:f9:91:8c:1d:0f:b4:a5:35:7a:1c:8c:4e:2d:b1:e1:5a:f5:
a8:d8:ca:16:6c:6e:0c:87:08:de:bb:86:59:15:25:be:14:1f:
f7:43:e1:af:a9:37:70:33:e6:1b:6a:2d:a0:a1:0b:0f:98:f7:
87:cb:32:11:03:9c:77:b0:20:1b:1b:41:e4:73:f1:de:ce:05:
85:38:9f:3e:9c:c7:81:19:8c:d1:bf:e5:37:c3:72:4d:f8:e4:
f6:71:7b:bf:b8:d3:8c:eb:8e:69:94:13:b2:0e:2b:d3:78:ec:
20:ce:a3:a8:14:84:be:93:d0:59:ca:43:a3:30:7e:7e:b7:97:
51:8b:e3:17:e6:11:e6:35:70:d8:aa:23:51:07:97:36:a2:46:
e3:03:15:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:23:18 2026 by rpki-client