Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/3nH_4u5HCxIa1k6SmlJK-XBi4vw.roa
File: 3nH_4u5HCxIa1k6SmlJK-XBi4vw.roa (raw, json)
Hash identifier: iqMRMPYzrYnIUEpArHjq/lfH/3KCnKONda0uM4LzExQ=
Subject key identifier: DE:71:FF:E2:EE:47:0B:12:1A:D6:4E:92:9A:52:4A:F9:70:62:E2:FC
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 01A0C4253269FF57EAD840EB145AA6885C9F
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/3nH_4u5HCxIa1k6SmlJK-XBi4vw.roa
Signing time: Mon 21 Sep 2026 13:26:07 +0000
ROA not before: Mon 21 Sep 2026 13:26:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35485
IP address blocks: 93.174.64.0/21 maxlen: 24
158.58.136.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 13:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:25:32:69:ff:57:ea:d8:40:eb:14:5a:a6:88:5c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Sep 21 13:26:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de71ffe2ee470b121ad64e929a524af97062e2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:57:50:43:32:36:0a:1e:59:7f:0e:ff:8e:
8f:c8:8b:9c:e9:54:6d:70:54:3c:97:dc:ea:b5:22:
62:33:71:66:f4:90:98:05:ca:f1:66:0d:02:7e:4c:
f4:d2:aa:d5:3b:43:86:6d:f5:0e:07:7a:7d:31:a7:
af:66:82:c1:57:65:2b:d4:03:55:48:59:0b:a1:d0:
7e:f4:57:0c:ce:00:de:04:1f:3f:ca:c7:1d:c2:a0:
4d:cc:6d:54:1d:91:ee:17:a5:cc:af:df:d5:73:ed:
34:85:68:f4:06:84:14:a0:15:c7:32:28:1b:a5:a9:
97:49:43:7f:ac:6c:77:73:67:93:94:f3:3f:78:79:
b2:de:ef:5f:c4:4f:d7:2d:33:bb:c4:96:ec:99:3d:
4e:f7:b9:f7:3b:21:2e:0b:ef:7a:6b:e5:1d:03:b6:
9d:c3:55:a3:8c:91:b1:fb:a8:a9:8a:e3:8e:06:c4:
e6:51:e4:10:3b:74:72:b7:74:cb:ea:a3:0a:c9:33:
59:9f:11:99:90:7d:0f:c5:d2:b8:6e:5d:e7:9c:84:
cd:19:4e:41:fe:87:81:85:d3:73:18:d1:f3:0b:84:
6a:6f:96:41:0d:d7:14:cb:04:24:bd:9f:84:1d:f2:
e5:74:09:d9:9f:ee:ce:43:30:17:d4:e3:78:99:b1:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:71:FF:E2:EE:47:0B:12:1A:D6:4E:92:9A:52:4A:F9:70:62:E2:FC
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/3nH_4u5HCxIa1k6SmlJK-XBi4vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.64.0/21
158.58.136.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:80:08:29:11:39:2c:31:2b:f6:d0:f4:5d:2f:85:51:bb:fc:
98:84:e3:d4:da:5a:2d:b0:1c:4e:04:37:4d:62:7b:7f:56:b6:
be:f8:6b:4e:21:85:05:5f:da:0a:44:f6:b7:31:34:a4:ea:5a:
8f:8f:69:e7:a3:fe:59:5b:68:d8:51:fe:2c:ea:47:62:91:84:
f6:97:c8:0c:33:6b:f2:95:6a:32:94:20:3f:3f:5a:15:43:63:
7a:fd:39:14:67:28:0b:95:d0:27:5d:70:0f:98:99:34:d7:3f:
86:f0:ab:5c:1d:db:b7:f0:f4:89:f6:67:f2:05:33:0c:81:aa:
b4:4c:6d:d1:5c:a7:7a:6f:c9:06:d1:d6:35:29:e9:53:f9:3e:
20:c7:d6:53:48:3b:c8:a1:2a:6f:8b:e4:98:59:59:a4:61:ad:
db:0c:53:70:9c:54:ec:49:4d:77:f5:0e:77:6a:09:e5:c7:31:
6c:be:53:bc:40:8a:10:c0:a3:41:2f:fd:1e:4b:83:62:2b:1b:
04:bc:6c:dd:9d:d2:fe:c8:70:b3:18:3e:cb:87:ad:08:62:b3:
2c:aa:43:99:ba:28:09:1a:01:c3:06:b7:82:33:a4:2f:14:32:
78:bd:1b:2b:fc:98:44:85:2e:35:4b:bb:84:55:d5:95:66:03:
35:3b:7a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:24:08 2026 by rpki-client