Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GmKaWGWDpzjrO1vjCD_aXHDvoz0.roa
File: GmKaWGWDpzjrO1vjCD_aXHDvoz0.roa (raw, json)
Hash identifier: 01LNcr9DGVj7bP9PILgd/MChc1kr7a4ys0oW+CyNTfQ=
Subject key identifier: 1A:62:9A:58:65:83:A7:38:EB:3B:5B:E3:08:3F:DA:5C:70:EF:A3:3D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0D9C44C290ADFB64B7B737DF7705904B6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GmKaWGWDpzjrO1vjCD_aXHDvoz0.roa
Signing time: Fri 25 Sep 2026 18:11:55 +0000
ROA not before: Fri 25 Sep 2026 18:11:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213282
IP address blocks: 179.254.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Oct 2026 16:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:c4:4c:29:0a:df:b6:4b:7b:73:7d:f7:70:59:04:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 25 18:11:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a629a586583a738eb3b5be3083fda5c70efa33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:c6:e2:a5:b3:b5:03:af:a8:62:f4:4f:a9:
bc:e1:16:24:91:3b:84:08:1c:9f:09:20:5e:05:9f:
49:ed:13:5f:0e:d3:2f:d3:c0:df:20:87:22:70:16:
b5:1a:a2:02:55:ac:56:03:42:73:44:07:eb:6c:84:
39:97:71:09:12:6d:33:a7:60:24:2d:8b:24:d3:b3:
f9:10:f0:49:f0:a9:12:2f:09:92:31:fa:9f:03:4d:
41:80:f7:39:5e:d6:9f:1a:0a:e3:ca:aa:0a:3c:98:
e0:5e:74:41:4d:cb:ba:ad:ea:a2:c3:61:dd:b2:49:
d8:68:ba:eb:42:e1:5f:85:7a:ea:67:94:50:ba:b6:
11:8b:5e:a0:fd:fb:90:69:5e:f8:59:e4:35:7d:0d:
cd:ba:dd:64:8c:81:98:b1:08:63:0f:c2:d0:fe:1b:
76:7e:06:32:bc:57:38:aa:ac:0e:97:97:82:dd:ad:
b8:16:86:cd:d2:e6:17:02:bd:26:7d:a7:d4:d0:fc:
d4:5b:8b:bb:81:5f:47:91:80:1d:c4:97:aa:6f:9c:
c8:32:87:af:72:af:a6:95:15:42:ae:7e:e3:54:84:
d2:95:df:d6:11:35:8f:f5:9f:db:5f:cf:cc:4b:63:
b5:9f:1c:98:c4:ae:1b:0d:98:7a:a0:6f:97:65:6b:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:62:9A:58:65:83:A7:38:EB:3B:5B:E3:08:3F:DA:5C:70:EF:A3:3D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GmKaWGWDpzjrO1vjCD_aXHDvoz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.254.95.0/24
Signature Algorithm: sha256WithRSAEncryption
51:99:ef:99:2c:0a:a1:e3:05:b4:72:56:bf:f6:5f:f2:fd:06:
92:2f:08:ad:96:cc:e7:11:04:9f:25:96:db:51:75:8b:1a:03:
dd:2f:70:ad:c8:68:56:a4:a5:ce:5a:62:ef:7c:54:f1:eb:4f:
5b:58:51:42:00:35:d3:32:fe:60:7d:ba:a8:40:9a:8e:e0:7d:
da:1c:5d:70:a3:04:53:54:3d:09:08:a9:37:bb:d0:e1:8d:b8:
2f:9d:70:ca:4d:3a:60:43:e7:24:c0:32:3f:b4:66:d6:e3:58:
94:23:73:30:b4:59:67:fa:7f:9d:5a:b5:c7:c4:a8:6b:d4:e4:
c9:f1:8a:9a:6c:61:7d:d8:11:c1:3d:b8:c5:cf:da:f3:b7:bc:
96:02:c5:2c:46:22:99:93:d7:ff:4b:c8:c5:af:77:25:4b:44:
0e:a8:7d:2e:35:e1:7f:f9:8b:b8:6a:93:e6:c3:8f:45:3b:63:
ea:ec:92:82:f4:ab:99:8b:70:19:5a:99:a1:80:61:18:23:dc:
97:94:aa:39:17:83:bc:82:2f:59:e8:64:0e:68:14:48:68:98:
ce:5b:3c:4b:41:84:ff:79:09:fd:b4:09:d8:93:04:cf:5f:47:
cb:a9:dc:f8:14:dc:77:dd:f2:fa:cc:de:bd:2c:07:95:c1:2e:
dc:1f:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:49 2026 by rpki-client