Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/o60UlJyjxg6IutTn8GP_FfGIFCY.roa
File: o60UlJyjxg6IutTn8GP_FfGIFCY.roa (raw, json)
Hash identifier: La8p5BjzqbXs++ruvlxGPr2yfA5ULGyXX9GN/CDuiWA=
Subject key identifier: A3:AD:14:94:9C:A3:C6:0E:88:BA:D4:E7:F0:63:FF:15:F1:88:14:26
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019FD34F9020587D7B1D91C82FD18FB889BF
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/o60UlJyjxg6IutTn8GP_FfGIFCY.roa
Signing time: Wed 05 Aug 2026 19:03:54 +0000
ROA not before: Wed 05 Aug 2026 19:03:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 83.147.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Aug 2026 08:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:4f:90:20:58:7d:7b:1d:91:c8:2f:d1:8f:b8:89:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 5 19:03:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3ad14949ca3c60e88bad4e7f063ff15f1881426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5f:16:0d:c3:fb:0e:e0:c1:45:dc:79:2a:cb:
d9:7d:ca:7c:e7:85:e3:b5:82:04:5f:95:ce:d6:df:
85:be:5a:af:36:fa:79:67:b6:f5:7f:f5:79:68:e8:
0b:c7:32:3a:d9:15:f4:e6:82:da:3f:89:4f:8e:9c:
66:be:e9:1d:c1:bc:8c:01:c7:29:50:f9:38:76:75:
6e:0d:c7:63:b0:dd:5d:ff:8d:ae:cf:75:99:cb:46:
dd:e0:a4:6d:a0:ee:dd:8e:c7:15:80:35:dc:35:bf:
38:ab:a3:a9:9b:a0:78:8d:98:d8:aa:34:63:41:9f:
4e:6c:d3:a7:da:ff:b2:2e:53:4e:cb:3b:71:c4:ca:
e5:9d:27:a0:bd:4c:cd:0e:bb:d8:98:3d:20:f0:61:
99:f8:44:3c:43:bb:03:2d:40:c8:b9:d8:dd:a0:60:
61:bf:b4:5a:58:7c:14:b1:82:6b:ec:25:ec:39:0f:
36:6d:0d:9e:b4:37:0b:4c:75:ee:5c:f7:d2:44:26:
1c:66:65:26:0b:44:61:c9:c9:34:3f:70:7a:04:63:
fc:25:17:01:19:43:2d:72:d5:3f:87:bc:43:6f:39:
7f:37:bc:d0:25:db:a7:b0:da:d1:6a:64:ff:dd:84:
2b:8b:19:7c:33:07:ea:58:9c:c9:5d:64:cf:8c:c2:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AD:14:94:9C:A3:C6:0E:88:BA:D4:E7:F0:63:FF:15:F1:88:14:26
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/o60UlJyjxg6IutTn8GP_FfGIFCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:ed:b9:46:c0:ca:3c:00:a4:49:48:8c:5b:3d:3b:2a:f0:36:
a0:fa:3c:64:b4:f4:c8:13:e1:44:1e:b8:6e:83:40:87:50:77:
7c:cb:3f:8e:33:5f:70:3b:53:d2:76:ac:0e:18:29:c7:d6:28:
73:95:13:a3:e9:88:48:d3:9f:8c:53:9a:a9:6b:5b:e1:ca:08:
e5:7d:c0:53:f6:14:49:48:20:6c:48:38:36:04:49:57:74:ea:
41:49:6e:50:2e:e5:0b:be:5f:16:9d:81:70:85:e8:c0:6e:4d:
d4:57:87:07:7a:21:6d:ab:b6:4a:eb:c5:7b:68:74:99:b1:cc:
dc:91:96:3a:96:d2:8e:81:f9:4f:b7:0a:8f:46:00:4f:a3:04:
b3:2c:38:a4:79:50:f0:d5:94:ed:c8:58:d0:5c:c1:19:12:d0:
af:56:0b:1d:22:99:9c:c5:f8:13:fc:56:e4:9c:66:b9:56:50:
57:4a:b2:cf:a5:4e:6a:5a:53:91:3e:29:6b:c9:6e:21:f1:4e:
b3:8d:5a:59:27:52:c2:54:9d:ec:c7:80:25:a8:25:f3:b0:f7:
8a:d3:c4:ba:2c:ec:be:12:b8:32:03:af:a4:ad:58:13:83:21:
79:a6:38:86:71:fd:42:44:df:87:16:c1:80:38:af:39:56:7f:
2a:ba:98:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:18:43 2026 by rpki-client