Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/u6QbMx7Jas48v_zLwt8mN6OPI6w.roa
File: u6QbMx7Jas48v_zLwt8mN6OPI6w.roa (raw, json)
Hash identifier: 9820iY+DWt6zz/DqP/PH6kAY5hV3KBTwQbS4vP5EccY=
Subject key identifier: BB:A4:1B:33:1E:C9:6A:CE:3C:BF:FC:CB:C2:DF:26:37:A3:8F:23:AC
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 01A0B57C73D787D56DE50D5AA180E2063C3D
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/u6QbMx7Jas48v_zLwt8mN6OPI6w.roa
Signing time: Fri 18 Sep 2026 17:07:07 +0000
ROA not before: Fri 18 Sep 2026 17:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 31.3.64.0/24 maxlen: 24
31.3.65.0/24 maxlen: 24
31.3.66.0/24 maxlen: 24
31.3.67.0/24 maxlen: 24
31.3.68.0/24 maxlen: 24
31.3.69.0/24 maxlen: 24
31.3.70.0/24 maxlen: 24
31.3.71.0/24 maxlen: 24
93.114.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Sep 2026 14:37:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:7c:73:d7:87:d5:6d:e5:0d:5a:a1:80:e2:06:3c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Sep 18 17:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bba41b331ec96ace3cbffccbc2df2637a38f23ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:3b:2a:78:81:7a:ea:76:ad:86:92:15:33:
c7:82:ef:4c:f3:e7:ff:23:97:47:53:9b:4e:01:61:
39:cb:84:63:b5:3e:ab:4d:ad:b0:96:57:8e:3c:29:
3f:11:b7:a8:da:53:3f:91:86:16:50:4c:4f:93:67:
a9:33:93:d5:d2:86:05:0f:d0:48:5e:c3:ed:df:15:
6b:6d:66:b1:92:f8:7d:e6:c9:93:89:74:5c:20:54:
06:27:93:0d:24:5e:e9:37:86:5d:14:77:40:dd:32:
33:ce:ca:a2:da:42:f8:5f:18:7c:3f:76:f5:81:f4:
5e:25:56:36:0d:2e:09:df:f1:db:55:5a:41:bf:ee:
1c:a3:72:c7:90:03:bc:7f:6c:af:9a:5e:10:55:b0:
93:10:44:0c:5a:40:ed:f9:15:36:00:04:48:c6:eb:
2f:f0:1e:f0:36:3a:4e:a7:d5:2c:d4:ab:10:11:08:
70:3a:c3:dd:d6:18:7e:33:84:7e:42:9b:96:5b:13:
5e:40:92:76:f2:c6:20:33:c7:5a:2c:61:02:a0:56:
78:f1:18:e5:01:2b:a8:96:2b:a0:b5:16:20:d9:03:
ac:a2:7f:db:0f:5b:02:58:77:40:d5:ac:3a:af:65:
a0:d9:b5:84:62:56:c9:68:22:3d:e6:8b:22:c4:ce:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A4:1B:33:1E:C9:6A:CE:3C:BF:FC:CB:C2:DF:26:37:A3:8F:23:AC
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/u6QbMx7Jas48v_zLwt8mN6OPI6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.64.0/21
93.114.49.0/24
Signature Algorithm: sha256WithRSAEncryption
14:01:39:d9:24:28:8a:8c:0b:cf:26:1c:a4:11:b5:8d:02:56:
bd:b8:53:cd:5b:8f:9f:cd:b2:67:0a:73:4e:99:82:cb:bf:22:
c2:ae:85:ca:7e:6f:71:12:97:4c:cd:5b:e8:df:c3:20:9c:23:
6a:a0:48:de:6e:15:8c:b2:83:f1:97:e3:63:1d:2b:01:46:9d:
7c:c8:ea:76:2b:bd:d3:be:f9:8f:d1:7c:3b:b9:8f:c2:b9:36:
6e:83:07:8f:e8:87:66:71:c1:48:73:3e:fb:b6:ce:0c:5e:ed:
0d:25:da:cf:32:b6:aa:5c:fc:92:64:e1:60:3a:8d:7a:e2:54:
ef:80:d5:6b:a8:c7:84:c6:66:3e:d4:4c:75:d7:14:28:15:01:
77:3f:a9:71:c3:0f:32:77:92:49:93:89:c9:4d:d5:be:19:2a:
53:82:f9:2e:d8:d5:5b:36:ce:85:de:63:39:1e:ef:67:f6:d3:
90:6a:0c:5e:dd:8f:3c:ce:4e:75:c5:12:23:98:c1:90:1c:e2:
1f:e1:68:b9:6e:bd:b6:16:aa:d8:07:99:34:00:26:43:0b:61:
ef:f4:49:07:2e:e5:04:bc:dd:98:d5:90:92:b0:db:a0:62:c9:
da:c5:45:7a:e5:a8:f5:e4:cb:70:9a:c0:fa:dc:e7:82:a6:c0:
16:0d:3a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:26:12 2026 by rpki-client