Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/hmHqlYsQtLJ3G0BSg84JBuo69PM.roa
File: hmHqlYsQtLJ3G0BSg84JBuo69PM.roa (raw, json)
Hash identifier: 8JiNzaLWlIfWOngOKp8bx1zjTZqeaPw5+35iFwLQN4w=
Subject key identifier: 86:61:EA:95:8B:10:B4:B2:77:1B:40:52:83:CE:09:06:EA:3A:F4:F3
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 019EBAAEE991448660DB268CFB83D5A35D06
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/hmHqlYsQtLJ3G0BSg84JBuo69PM.roa
Signing time: Fri 12 Jun 2026 07:14:45 +0000
ROA not before: Fri 12 Jun 2026 07:14:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51907
IP address blocks: 193.134.8.0/21 maxlen: 24
193.134.16.0/20 maxlen: 24
2a10:8244::/30 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Jun 2026 08:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:ae:e9:91:44:86:60:db:26:8c:fb:83:d5:a3:5d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Jun 12 07:14:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8661ea958b10b4b2771b405283ce0906ea3af4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1d:3e:ba:6d:e7:c6:7f:9b:f9:5a:e9:bc:de:
fe:e9:15:61:c8:16:66:4b:74:67:77:f8:c8:76:06:
bc:b5:59:da:8b:ea:a5:73:95:79:e5:7a:c2:73:36:
58:de:17:99:d9:f8:f8:63:32:1f:79:70:a4:81:78:
f4:91:6b:51:ae:4d:d7:6c:ef:66:57:28:3a:7c:76:
03:7e:01:ca:84:24:de:fd:0c:00:15:a4:b4:d9:73:
de:50:36:2b:79:fe:b9:d2:d6:ac:99:3e:44:7c:33:
52:9c:2e:57:a5:8c:7e:6d:c6:3e:7f:88:cd:27:cb:
12:9b:33:90:62:49:52:21:9f:07:53:3e:40:83:42:
42:21:82:f8:97:bb:f3:dc:61:66:8a:51:04:7d:90:
ff:d1:09:88:90:07:4f:22:03:e9:ff:04:2e:33:a9:
8f:d2:d3:d0:9a:af:a9:74:8f:a4:40:d7:b6:55:59:
0f:43:2b:73:94:1c:de:5e:e4:8d:24:07:30:e9:c4:
77:8d:04:54:22:f2:14:fa:1f:97:af:f7:ba:b5:9b:
12:b4:04:0d:c9:63:93:0d:c1:70:79:1f:47:53:74:
0d:94:70:a0:13:c0:61:23:03:31:3f:58:c8:41:f9:
f2:8b:62:77:22:c6:7b:6d:dd:16:39:60:9c:3b:ad:
70:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:61:EA:95:8B:10:B4:B2:77:1B:40:52:83:CE:09:06:EA:3A:F4:F3
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/hmHqlYsQtLJ3G0BSg84JBuo69PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.8.0-193.134.31.255
IPv6:
2a10:8244::/30
Signature Algorithm: sha256WithRSAEncryption
0f:11:c2:ca:62:ed:f4:bd:1b:db:62:fc:46:bc:50:d8:fe:cf:
67:eb:33:96:58:4f:21:27:09:f4:70:d5:3e:4e:b7:6a:95:cc:
1e:93:5b:5d:25:a3:b0:2d:a2:f4:e7:98:d6:68:18:d5:45:ef:
1e:ec:78:d7:db:8e:b0:00:1d:5b:7c:a7:e4:1e:3f:c8:6a:af:
a0:5e:6e:97:1a:8f:4c:5e:57:f0:08:ea:e3:d0:55:f4:ec:23:
a2:1e:c4:1e:78:e6:48:2e:39:2d:02:27:f4:76:36:d1:9e:ce:
0c:30:c8:02:fa:34:b6:53:2f:05:67:95:11:85:bf:a5:e4:a0:
3d:b7:96:eb:ff:96:6b:f2:f7:7c:17:f7:60:e1:74:7e:58:51:
13:59:a2:37:5e:64:55:fa:ac:28:7c:fd:a1:82:ce:50:8a:1b:
1c:f4:bd:27:45:80:08:bd:e1:90:35:7e:d7:53:70:65:ad:77:
3f:ef:ea:2d:bf:ad:d8:43:43:ef:7b:30:a6:e2:65:1f:c8:fa:
95:d0:61:b5:f3:a1:c6:26:5c:79:b8:fa:89:75:40:3c:91:79:
a4:0c:24:f0:2c:89:e8:92:13:21:fc:43:6e:46:b8:40:a1:e7:
78:e6:bd:63:fc:26:4c:d2:44:dc:c9:41:c3:98:30:16:e6:3c:
3b:d2:95:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:27:02 2026 by rpki-client