Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/sv_gYiTiPSVT9njiNdM_G-C3XF4.roa
File: sv_gYiTiPSVT9njiNdM_G-C3XF4.roa (raw, json)
Hash identifier: mOoYUaj4SU+L8tU8N9CTtZLxkb56zeykYTwiegQuGvg=
Subject key identifier: B2:FF:E0:62:24:E2:3D:25:53:F6:78:E2:35:D3:3F:1B:E0:B7:5C:5E
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019D9218ECCBBDAB2E04E0ED9500C0C6788C
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/sv_gYiTiPSVT9njiNdM_G-C3XF4.roa
Signing time: Wed 15 Apr 2026 17:03:20 +0000
ROA not before: Wed 15 Apr 2026 17:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210705
IP address blocks: 212.23.214.0/24 maxlen: 24
2a05:9080:3::/48 maxlen: 48
2a05:9080:11::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 Apr 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:92:18:ec:cb:bd:ab:2e:04:e0:ed:95:00:c0:c6:78:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Apr 15 17:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2ffe06224e23d2553f678e235d33f1be0b75c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:94:f6:9a:a9:6e:ef:0a:4d:46:a7:e8:ee:
32:c2:c9:64:cc:e8:e5:4e:2b:53:d6:74:d9:20:95:
22:43:58:a7:91:a1:0e:e5:9f:f0:6d:8d:85:00:c5:
ad:ef:40:90:57:e1:ca:ad:17:56:ed:d4:bc:ae:a2:
df:50:c7:ad:b6:de:7a:b4:2a:9e:f9:4b:63:c0:07:
4a:e0:d1:ee:b3:de:60:c4:a2:25:d0:c2:8b:e3:2a:
5c:4b:53:37:0e:27:3f:42:4c:76:bc:0d:0b:99:1d:
05:e9:b6:3b:4a:53:d4:a5:3b:10:7c:64:c9:98:fe:
81:06:48:9e:5f:49:1c:71:60:81:bf:20:90:0f:41:
38:85:bb:51:fc:8f:0f:d5:7e:49:86:94:27:0f:b1:
7e:61:ac:e2:3a:c1:8c:92:e0:43:87:9f:bb:80:39:
f5:c1:3c:d1:b8:9c:8a:43:58:58:98:a5:ed:64:7e:
04:35:aa:69:00:9a:45:fe:cd:74:ce:9b:95:01:c5:
c7:8d:b3:19:30:d9:76:83:cc:3b:c0:95:24:dc:20:
76:e1:b5:1f:b6:8f:04:a5:c3:75:7f:5a:16:69:18:
23:37:ea:14:ab:60:9e:2f:a1:cb:4c:4b:44:a0:71:
8f:18:c2:ef:13:0b:a9:62:9b:a3:4c:b4:57:85:36:
8a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FF:E0:62:24:E2:3D:25:53:F6:78:E2:35:D3:3F:1B:E0:B7:5C:5E
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/sv_gYiTiPSVT9njiNdM_G-C3XF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.214.0/24
IPv6:
2a05:9080:3::/48
2a05:9080:11::/48
Signature Algorithm: sha256WithRSAEncryption
34:7b:84:23:62:66:5a:d0:29:ef:60:a1:10:16:2d:f8:35:46:
fa:46:4f:9f:25:3c:49:da:04:a6:cf:f9:2d:c5:12:76:fd:78:
35:14:5b:4c:4a:f3:36:77:66:36:64:59:67:54:62:53:ec:6e:
4d:04:15:59:b7:c5:2d:63:a0:e0:c9:d0:d0:d5:83:a6:b9:c6:
62:c0:db:8c:94:da:ea:17:d3:11:b6:a7:88:f6:d8:24:1f:91:
f3:60:e0:57:e9:1d:c1:d7:29:6c:41:2a:f3:38:85:d3:33:e5:
cf:32:a4:a1:e2:68:07:bd:44:d7:bc:ea:a1:03:ce:c8:1e:64:
56:4d:28:a7:06:2d:84:dc:59:52:f1:96:b4:14:7b:44:50:c6:
ab:9b:1d:9e:f3:23:30:c3:fa:a0:c0:de:05:1f:f1:a3:08:b3:
82:fe:71:22:52:9b:ae:29:90:3b:fb:4f:23:71:ca:3f:cf:b5:
69:88:f3:67:73:c6:cb:f8:79:da:06:08:42:10:41:4b:a6:4d:
64:08:5e:de:b2:a6:60:af:f4:63:06:1d:9b:84:89:9f:27:b1:
9e:9a:bb:bf:c5:11:a5:14:70:a6:1d:03:4d:7f:f0:7e:b8:f1:
ef:be:dd:7f:8d:fe:23:e5:23:99:2e:2e:00:78:b3:77:66:9c:
05:7a:08:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 20:43:04 2026 by rpki-client