Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/mCcPmlBoL34Iz4g1s6kYUzxOfRM.roa
File: mCcPmlBoL34Iz4g1s6kYUzxOfRM.roa (raw, json)
Hash identifier: 3lVrgtGTIJvlHZ5YEDvfuvX9Jz+x3ZmtFYN96T85qIk=
Subject key identifier: 98:27:0F:9A:50:68:2F:7E:08:CF:88:35:B3:A9:18:53:3C:4E:7D:13
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A08AA2EAD23CFF38066573D3BAA2B5781A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/mCcPmlBoL34Iz4g1s6kYUzxOfRM.roa
Signing time: Thu 10 Sep 2026 09:25:27 +0000
ROA not before: Thu 10 Sep 2026 09:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 21 Sep 2026 06:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:a2:ea:d2:3c:ff:38:06:65:73:d3:ba:a2:b5:78:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 10 09:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98270f9a50682f7e08cf8835b3a918533c4e7d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:66:7e:4d:b6:84:21:67:6e:c1:56:cd:e6:
dc:a1:60:3f:18:ac:c9:68:d5:89:00:43:b6:a8:69:
aa:f0:4e:86:8b:94:bd:8e:46:62:f1:04:a1:60:97:
fd:90:76:80:04:14:30:02:da:4d:a8:f0:7a:e6:11:
f7:07:f5:7e:69:9e:52:c4:a3:11:88:df:7a:42:28:
a7:fa:b9:95:2c:b9:aa:64:4f:4e:bd:e9:47:80:28:
71:95:ab:ff:36:9a:0b:e9:4f:fc:12:82:a5:65:6a:
15:94:90:9f:71:e8:5d:5a:a6:33:84:de:39:e9:74:
4e:37:09:b9:d9:b0:3f:60:0c:b2:fd:db:fb:c8:26:
ad:ee:cf:0c:80:9c:1a:80:e1:91:d1:fc:f7:ea:d3:
cb:dc:13:13:00:46:5d:0f:0d:fe:cd:25:96:c7:00:
20:4d:65:b6:b1:a2:0f:73:6c:14:62:28:f8:39:f1:
2c:b7:3a:10:82:dc:1e:af:fc:67:f9:e3:7b:03:e9:
57:40:ee:42:80:2a:fe:56:f9:75:2c:aa:fe:4f:a7:
ac:73:13:f6:e1:13:ca:75:6f:38:14:11:bf:3d:04:
ad:ef:24:55:0c:6a:61:82:c9:47:bc:44:52:b8:6d:
1d:56:f6:5a:6a:92:92:a3:75:b2:56:22:77:4c:52:
c9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:27:0F:9A:50:68:2F:7E:08:CF:88:35:B3:A9:18:53:3C:4E:7D:13
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/mCcPmlBoL34Iz4g1s6kYUzxOfRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.82.0/23
Signature Algorithm: sha256WithRSAEncryption
65:f8:72:76:70:ab:6b:87:d6:39:0f:45:b6:ff:6a:2d:5a:ab:
47:6e:b4:96:eb:ea:df:1c:a6:36:2a:70:e9:d6:09:bb:81:d6:
e8:1e:d7:3e:d4:47:e8:5d:41:a1:53:4d:ac:d9:41:73:e5:d6:
1a:41:ec:42:a2:8d:8d:37:a7:2e:02:8e:bb:f7:97:d6:89:9f:
e2:e8:37:bc:46:bd:25:7a:b8:24:07:f9:80:0e:34:c4:5d:1e:
ce:45:7c:6c:58:0f:9f:88:a9:05:f4:1f:67:19:80:c4:80:25:
b6:3c:22:5a:11:9e:13:e5:ef:c6:91:37:9f:6c:8d:f7:50:2e:
21:10:c9:4a:d8:fc:a0:51:5c:ad:42:70:c7:14:4b:82:90:9a:
f5:f0:a6:20:33:98:42:42:51:34:04:f3:a5:f7:9d:3c:61:9a:
c2:c0:e2:6a:a3:ee:b7:d4:8f:64:b5:4d:8a:f1:5a:eb:d8:55:
90:f6:2b:24:62:c0:2b:eb:92:6e:dd:31:ce:2d:13:c0:e2:de:
2a:8b:ae:62:07:53:bc:32:99:7f:cf:8c:b3:57:82:fc:d9:d1:
a2:8e:91:32:cd:83:41:70:fa:44:56:93:5f:d7:5d:22:db:c3:
c8:af:b2:c4:17:59:be:a0:b9:d0:34:3a:41:7c:26:ff:cc:7b:
57:3b:92:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:22 2026 by rpki-client