Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/9W8ue3hRwaPUMNXqvbRzH9O8xkI.roa
File: 9W8ue3hRwaPUMNXqvbRzH9O8xkI.roa (raw, json)
Hash identifier: ENRDzPOcZttKPsNbbuyrG9pRYfH5Kci8R4hG9BmWqhs=
Subject key identifier: F5:6F:2E:7B:78:51:C1:A3:D4:30:D5:EA:BD:B4:73:1F:D3:BC:C6:42
Certificate issuer: /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial: 019B7C7FE660A47EFF5E7A407114DDEDBE28
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/9W8ue3hRwaPUMNXqvbRzH9O8xkI.roa
Signing time: Fri 02 Jan 2026 02:18:35 +0000
ROA not before: Fri 02 Jan 2026 02:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214145
IP address blocks: 2a01:e140::/44 maxlen: 48
2a01:e140:10::/44 maxlen: 48
2a01:e140:100::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 Jan 2026 14:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:e6:60:a4:7e:ff:5e:7a:40:71:14:dd:ed:be:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
Validity
Not Before: Jan 2 02:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f56f2e7b7851c1a3d430d5eabdb4731fd3bcc642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dd:d4:75:3b:95:6a:07:fd:3b:5a:09:59:01:
28:4c:b6:26:69:23:3a:5a:c5:d7:b3:e6:63:2c:23:
26:5e:4b:26:20:b9:44:7a:b8:97:e9:ce:ab:04:65:
48:cb:4f:2a:ab:8e:d6:48:ee:a0:c1:5b:e0:d1:63:
c0:b0:9d:7a:d1:98:89:25:9a:33:e0:38:ed:60:11:
7a:8a:cf:d9:c6:a9:bf:58:ed:09:05:60:09:c4:69:
44:6c:7b:f3:ae:8b:0b:eb:77:26:aa:a0:51:f4:27:
e3:85:68:44:dd:72:09:e2:88:94:11:bc:51:c4:c0:
cb:d2:c8:f5:bd:1c:f8:e7:f8:c7:a6:6c:70:21:f0:
20:65:e8:a7:1f:05:cd:ab:50:ba:07:6f:02:96:f1:
bc:5b:f0:a4:f4:b7:4e:5b:e8:7f:39:c9:5b:2b:35:
47:1e:8a:0b:b4:4f:b8:ad:10:11:9c:71:40:13:1c:
8c:1c:56:30:ce:67:14:ee:f2:79:f9:4b:6e:d6:e0:
7d:24:2c:67:a8:34:75:54:1e:96:cf:20:2f:d0:da:
4e:39:8d:db:e1:bc:54:f7:7a:16:34:fc:17:0e:93:
ac:1a:51:7a:da:af:78:f7:94:14:26:f5:fa:aa:8c:
03:26:46:f1:96:d8:cb:c9:b3:43:48:ce:fe:53:bb:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6F:2E:7B:78:51:C1:A3:D4:30:D5:EA:BD:B4:73:1F:D3:BC:C6:42
X509v3 Authority Key Identifier:
keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/9W8ue3hRwaPUMNXqvbRzH9O8xkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e140::/43
2a01:e140:100::/44
Signature Algorithm: sha256WithRSAEncryption
55:d9:5f:50:1d:bc:c4:dc:36:78:aa:65:02:91:b6:27:42:2f:
bd:b4:06:d9:6f:7a:c7:5a:6e:d4:23:44:24:4e:14:85:7f:ae:
2e:45:8d:8f:9c:42:bc:74:ab:8d:58:d0:67:e0:1d:18:26:84:
6f:7e:cb:b9:4a:a1:96:08:48:81:e4:ec:76:b9:15:98:9e:36:
bb:84:60:c7:d3:53:37:95:58:d3:71:f1:64:4c:69:c4:d4:e7:
35:fd:a2:5c:35:07:89:d9:68:7a:fe:97:f4:45:77:4e:dc:29:
45:c2:cc:fa:1a:6c:4d:3f:ea:1a:fb:65:d3:a2:e2:6e:a5:cc:
e5:57:95:58:11:a1:fc:8a:d9:fb:32:6b:bb:51:b8:ce:ea:22:
21:b4:a3:6c:ce:9a:1c:15:2e:bd:74:a7:23:16:b5:74:6f:88:
10:b0:87:e9:8d:76:fc:84:2f:2c:50:c9:2f:f8:61:bc:cf:64:
1d:e0:c9:30:31:da:48:6e:fd:be:d6:05:d1:7a:c7:c3:93:95:
b5:66:85:47:2d:ee:07:7f:a3:f5:0c:e3:ed:68:db:2b:80:81:
d5:28:86:69:05:4a:a1:e7:37:82:ef:0e:14:d4:6c:14:25:a6:
ea:ad:08:33:57:08:b1:e8:d1:84:3a:6f:77:54:7e:d5:7f:f5:
a2:89:90:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 04:16:58 2026 by rpki-client