Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/j3sBSUJkPAu6LegD9jnwaa6rZ7c.roa
File: j3sBSUJkPAu6LegD9jnwaa6rZ7c.roa (raw, json)
Hash identifier: IrnIM3UEUP7ja4hnpFEsm2+NgmLApTFgvChXXopJxpc=
Subject key identifier: 8F:7B:01:49:42:64:3C:0B:BA:2D:E8:03:F6:39:F0:69:AE:AB:67:B7
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 019D909866F43E7272AB2B4E410C401D0CDB
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/j3sBSUJkPAu6LegD9jnwaa6rZ7c.roa
Signing time: Wed 15 Apr 2026 10:03:19 +0000
ROA not before: Wed 15 Apr 2026 10:03:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43342
IP address blocks: 91.135.180.0/24 maxlen: 24
91.135.190.0/23 maxlen: 23
91.135.190.0/24 maxlen: 24
91.135.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Apr 2026 16:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:98:66:f4:3e:72:72:ab:2b:4e:41:0c:40:1d:0c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Apr 15 10:03:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f7b014942643c0bba2de803f639f069aeab67b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:d2:12:bf:db:40:63:2a:ed:17:29:b0:de:
9b:69:02:31:ee:21:ee:a1:07:c8:7c:3a:95:c6:81:
55:8e:45:a7:3a:69:b8:a5:98:65:6d:92:2a:c0:20:
cc:0d:9d:aa:b7:51:b9:b2:30:9b:a2:01:7a:9d:00:
42:be:54:56:f2:35:a1:fa:17:22:2d:eb:3a:25:7e:
00:9d:b3:2c:2b:0f:08:ba:c0:28:49:89:84:89:19:
59:d1:90:cd:3a:83:78:18:0d:78:06:0b:49:25:06:
29:78:0e:d4:36:da:f6:f7:2e:0c:bb:96:12:21:8e:
b9:2d:2e:a3:8b:19:4f:db:d9:86:f1:4e:67:fd:3e:
a9:43:21:e2:f1:58:31:e9:2d:c7:bb:08:16:a2:38:
81:03:75:ed:c5:d0:28:f7:54:88:1f:9f:ff:e7:26:
fc:46:a8:56:43:7b:e5:c1:bc:75:20:ab:ce:d4:77:
f5:04:63:d4:83:2e:50:7a:ea:3b:ca:50:14:1b:cc:
ad:92:25:99:05:bb:bc:6b:8a:bb:90:57:66:f0:dd:
2c:7b:cc:57:4f:6d:20:dc:bf:36:3b:7b:43:fe:0b:
ed:31:8d:db:3d:7b:53:3f:0d:af:1a:62:ba:3d:e6:
14:04:7c:20:30:5a:df:95:ae:fa:4d:b0:ee:d9:78:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7B:01:49:42:64:3C:0B:BA:2D:E8:03:F6:39:F0:69:AE:AB:67:B7
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/j3sBSUJkPAu6LegD9jnwaa6rZ7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.180.0/24
91.135.190.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:c7:fc:65:e1:fc:57:46:c8:f8:a0:2a:fe:6c:88:b0:17:b5:
a7:ca:9b:6e:b3:38:9e:ae:da:da:54:b4:ae:f4:a1:49:57:ae:
26:4a:f4:36:ef:fb:de:54:78:26:48:57:56:7b:dd:dc:46:d4:
68:14:8d:a2:0d:5e:3b:d9:7e:02:ef:7f:d3:49:cc:cd:70:cb:
5a:cc:58:43:b5:89:c3:3e:1e:58:68:ef:bc:d1:45:1e:9d:64:
9c:cd:78:5f:00:63:10:b9:35:bb:1a:5e:27:48:2f:35:fa:56:
89:85:ee:f9:e5:84:67:7d:92:10:4d:d5:ca:ee:87:8a:7c:67:
ea:e3:4e:d1:87:4e:c3:6c:62:13:64:c4:c1:49:36:be:7e:f0:
a2:92:8e:78:09:26:91:b1:7e:d0:ca:be:fd:19:f8:6b:8f:32:
ba:54:a5:56:5c:22:85:fd:2e:b0:bb:95:1e:c8:cf:11:02:3a:
52:c6:4c:fc:91:d9:d7:95:89:53:22:0d:ce:b3:86:de:6f:d2:
1f:ef:66:f3:df:af:1c:c9:e6:f5:97:6d:a2:f4:cb:64:30:15:
c9:92:c0:88:60:fa:11:79:c8:95:78:d0:1a:48:55:12:54:02:
29:39:95:43:31:91:c4:bf:9c:98:a1:4b:08:fb:c5:cd:46:66:
86:2a:5c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:39 2026 by rpki-client