Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/d1tPFgVJ4XkBnjtyn9VFD1y-yrQ.roa
File: d1tPFgVJ4XkBnjtyn9VFD1y-yrQ.roa (raw, json)
Hash identifier: vcWSW1dJQ40/Zu1FIiJ+bJoWn+gCTS3Xo+6G4xEKuW4=
Subject key identifier: 77:5B:4F:16:05:49:E1:79:01:9E:3B:72:9F:D5:45:0F:5C:BE:CA:B4
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A0C29ABA0CD0C3D9C0F412E6A24212580D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/d1tPFgVJ4XkBnjtyn9VFD1y-yrQ.roa
Signing time: Mon 21 Sep 2026 06:15:15 +0000
ROA not before: Mon 21 Sep 2026 06:15:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
93.113.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 10:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:9a:ba:0c:d0:c3:d9:c0:f4:12:e6:a2:42:12:58:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 21 06:15:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=775b4f160549e179019e3b729fd5450f5cbecab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:7b:02:d8:9d:ca:56:e4:3f:00:bf:9b:51:
ce:dd:ea:50:ae:32:e6:f1:85:9f:db:47:bb:9f:e3:
98:3e:e2:95:7e:25:55:27:15:d1:66:85:51:c5:fa:
02:d2:a7:f5:ac:2b:05:75:72:76:22:1c:4e:48:5d:
cf:1d:f5:f3:51:0b:9d:d6:43:68:d3:75:b9:92:06:
11:33:5f:df:cf:28:d1:30:1c:a3:3d:29:11:5c:39:
21:89:72:92:af:8f:cb:63:0d:ac:d3:f6:55:55:d6:
dd:f0:75:8d:8f:10:75:58:13:5b:3c:21:36:d2:4f:
14:9c:24:98:db:86:46:b7:5a:a4:f4:03:5a:c8:46:
b3:68:68:44:b1:e3:c7:6d:b2:0e:6f:64:91:80:50:
e5:c1:21:3e:b9:b6:3a:79:72:54:c6:27:de:d0:55:
78:f3:37:cc:e0:ef:8a:1b:d6:fd:1e:e2:db:99:d0:
1d:38:25:d6:29:ff:45:41:5c:e4:08:07:c6:22:b6:
03:f0:38:3b:31:d4:66:54:20:fb:f2:79:5f:74:6d:
9d:84:54:63:42:e4:67:5f:e5:b9:89:20:c8:30:dd:
c4:46:a0:a0:e7:97:57:7c:53:6c:78:55:ba:9f:ef:
c1:9b:c9:86:27:9b:c7:d3:3d:60:e7:28:cf:ba:68:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5B:4F:16:05:49:E1:79:01:9E:3B:72:9F:D5:45:0F:5C:BE:CA:B4
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/d1tPFgVJ4XkBnjtyn9VFD1y-yrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.82.0/23
93.113.179.0/24
Signature Algorithm: sha256WithRSAEncryption
32:56:d8:87:60:23:6a:c4:0e:07:33:30:3e:f7:99:70:a1:3f:
ea:4e:27:b5:96:87:d0:b1:a0:d7:fb:80:1a:c0:ad:fc:9a:df:
f3:b0:b0:ca:2d:49:53:ea:c4:41:b3:e7:34:7f:dc:7f:af:83:
ae:a4:b2:12:69:57:57:96:6e:76:e4:fb:5c:cd:50:92:12:ba:
0c:59:3b:ff:b7:cb:e1:88:23:2a:d1:e4:da:cd:2d:a2:82:f1:
82:91:be:ed:91:d6:f2:8c:80:c0:21:5b:d7:46:91:e0:1b:e4:
59:50:ff:6b:61:a0:48:56:0a:71:d2:68:6a:b1:67:24:03:a8:
73:6c:cb:e9:17:ff:dd:5f:a2:7d:05:dc:e4:b7:a4:b5:38:8c:
a2:87:3d:67:6c:9d:88:a2:8d:46:e6:4a:f3:24:c6:0a:99:1c:
6c:15:a5:df:ab:b7:3b:76:18:c9:71:6f:fe:4f:93:7b:86:28:
a9:11:f2:fb:0d:24:e2:bd:7a:8d:82:70:54:3a:95:8b:b9:5e:
43:30:e5:02:90:77:01:0f:4e:00:82:14:9e:b1:3c:d0:df:3d:
68:9f:6a:d6:bc:34:b5:0b:9c:ba:17:ec:2a:9b:0f:11:5c:16:
c5:89:a6:32:92:c4:14:cf:8f:4c:f3:e3:8c:9d:91:84:4b:50:
5c:62:c5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:26:54 2026 by rpki-client