Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/n8gb3nlnsiaKTDMunXLa9uQXG48.roa
File: n8gb3nlnsiaKTDMunXLa9uQXG48.roa (raw, json)
Hash identifier: ZuYKLx8QL/W7Dloq+hEAx+z1DPkWRIJykwtFqRZI+Ck=
Subject key identifier: 9F:C8:1B:DE:79:67:B2:26:8A:4C:33:2E:9D:72:DA:F6:E4:17:1B:8F
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 01A0E6B3FE80B9A7CB16D543843F2B3F1824
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/n8gb3nlnsiaKTDMunXLa9uQXG48.roa
Signing time: Mon 28 Sep 2026 06:29:10 +0000
ROA not before: Mon 28 Sep 2026 06:29:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31363
IP address blocks: 185.127.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 09 Oct 2026 12:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:b3:fe:80:b9:a7:cb:16:d5:43:84:3f:2b:3f:18:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Sep 28 06:29:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fc81bde7967b2268a4c332e9d72daf6e4171b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:95:e0:b4:bc:99:e7:fd:43:01:d1:8d:89:
a4:af:32:10:1c:09:40:cf:ef:2d:1b:32:eb:26:5a:
24:ee:88:c2:83:32:1e:a1:fc:c3:ae:bd:dd:d3:40:
53:e4:30:93:55:42:e1:b2:05:31:d9:66:96:60:ab:
e7:75:79:ec:7e:f1:0f:66:01:f6:fe:58:1d:55:45:
45:53:7f:fe:99:f2:14:12:ba:99:51:46:ec:b1:be:
bc:82:8a:b9:f4:b8:19:30:74:37:a6:ae:75:d2:82:
b7:2d:69:df:3c:71:65:89:f4:e7:31:23:b1:f8:91:
b2:c9:a3:04:76:6c:ed:b6:67:2f:53:22:52:6b:88:
50:b3:83:d1:cc:f3:49:f4:18:44:f1:f7:59:35:cd:
30:1a:d9:68:ad:f6:b6:09:13:9e:48:79:a8:66:e7:
a1:01:03:fa:da:b5:00:eb:af:3f:42:19:27:26:eb:
9c:84:e3:cb:11:fc:3e:8d:5a:76:20:88:96:29:24:
db:69:76:5b:f8:65:f3:7d:6d:20:60:fa:59:5a:7c:
08:91:7b:ce:6d:2c:14:95:d4:95:f4:71:e0:47:59:
3e:18:15:95:e2:48:0b:65:c0:0e:8c:39:46:f0:ee:
17:40:02:bd:1e:e5:df:c8:32:4c:b0:f9:a2:5b:11:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C8:1B:DE:79:67:B2:26:8A:4C:33:2E:9D:72:DA:F6:E4:17:1B:8F
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/n8gb3nlnsiaKTDMunXLa9uQXG48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.224.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:6a:38:02:67:98:43:68:2b:e1:15:14:83:35:90:07:ed:50:
a5:b2:11:ee:92:fb:9e:bb:0a:23:7f:81:43:5f:1e:25:f9:e4:
16:75:e9:73:e7:c2:9f:c6:ae:f8:41:77:8f:96:47:36:b6:ef:
2e:ec:86:02:90:b7:a4:96:3d:9d:50:ff:50:f5:fe:53:7a:2c:
97:8c:e2:6e:04:c0:73:ad:bc:ac:f9:14:97:94:8e:06:17:5a:
a8:25:68:45:67:91:fb:85:9a:8d:80:27:67:38:b0:5a:42:33:
0e:50:16:ee:1b:46:b1:60:2f:66:76:1a:2a:c7:04:7d:d4:51:
de:22:92:31:57:19:46:89:b6:79:a0:93:e1:63:f6:0e:eb:a7:
8a:80:25:cd:3c:ea:d9:fe:4c:be:56:12:91:77:39:45:88:01:
b2:ad:22:2f:e2:b2:a7:37:7f:e3:33:63:0c:4f:cb:a5:29:c9:
c0:4b:7f:ff:5c:67:65:53:7f:10:b1:a1:c9:24:b1:83:50:1d:
b2:8c:b7:3f:05:75:0f:6c:84:bb:17:af:11:dc:7f:83:a4:99:
87:86:97:ba:a2:3d:36:30:c5:23:91:5d:f6:45:59:e9:31:ab:
db:b8:83:c5:53:c2:55:a7:00:88:14:84:cd:dd:b2:ce:40:99:
fd:49:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:27:06 2026 by rpki-client