Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aUotrLSuy6yOibD7tmpLU6OioeQ.roa
File: aUotrLSuy6yOibD7tmpLU6OioeQ.roa (raw, json)
Hash identifier: KxTWnnC7ZADH8hvErfKxvBQvhvPPuQHI4soZXtq+ZR0=
Subject key identifier: 69:4A:2D:AC:B4:AE:CB:AC:8E:89:B0:FB:B6:6A:4B:53:A3:A2:A1:E4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0E3BBDEE9E2F5E3C16639A872AF388738
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aUotrLSuy6yOibD7tmpLU6OioeQ.roa
Signing time: Sun 27 Sep 2026 16:38:55 +0000
ROA not before: Sun 27 Sep 2026 16:38:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 93.123.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Sep 2026 11:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:bb:de:e9:e2:f5:e3:c1:66:39:a8:72:af:38:87:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 27 16:38:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=694a2dacb4aecbac8e89b0fbb66a4b53a3a2a1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:9c:a0:ab:b0:0b:71:9d:7e:14:20:ca:61:
f9:11:0b:f8:18:1b:23:48:e3:37:2f:6d:d4:a3:7d:
14:c1:eb:59:a9:3a:d2:ce:17:24:9a:eb:22:aa:c5:
67:dc:bd:37:53:52:0a:b3:54:00:e5:c1:2b:dc:68:
7d:a1:56:98:24:c9:31:3a:bd:54:bc:6b:bf:e9:f1:
f2:fe:e7:7a:e4:c3:54:48:2a:6a:31:4b:15:f9:2c:
8f:c5:1f:c9:ef:67:56:00:d3:d3:e6:fd:49:41:b8:
05:b5:c2:08:77:c1:6b:ae:64:54:6f:de:0b:86:cc:
b2:2a:69:5b:6e:a0:81:72:b1:7a:cb:55:07:d2:e6:
f5:be:91:84:37:a2:eb:ee:48:d0:aa:30:60:97:0f:
66:98:7a:09:8e:0d:60:3e:94:e0:bb:23:0d:53:46:
fc:64:1d:c2:8b:28:e2:8f:77:d8:ce:9f:a3:0f:5e:
ef:ae:ec:7d:f6:85:74:70:9c:14:f2:54:4f:83:30:
0e:81:e5:70:9a:85:88:8c:57:3f:2e:56:76:e6:23:
44:dd:b5:e8:e4:65:d8:ea:15:b9:d6:ab:8c:54:d8:
a7:3b:bd:77:a1:b9:f8:de:58:77:59:b7:3b:ce:85:
3a:9a:12:99:9d:b7:a2:14:cb:85:bf:30:72:86:3a:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4A:2D:AC:B4:AE:CB:AC:8E:89:B0:FB:B6:6A:4B:53:A3:A2:A1:E4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aUotrLSuy6yOibD7tmpLU6OioeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.100.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b8:aa:ab:d2:23:80:e3:53:a9:76:86:66:0f:ec:71:ba:60:
52:9d:2a:28:ac:73:49:95:eb:a1:ee:ac:60:dc:bd:65:b5:59:
56:d6:83:45:04:6f:d2:b3:aa:e4:23:08:8d:09:a5:0c:62:a7:
8f:36:55:9d:fb:fc:dd:86:bf:e5:c7:c9:03:9e:48:33:4e:c5:
01:e5:d9:e9:bc:50:43:9f:b0:08:a6:d6:08:eb:ee:5b:85:c8:
7a:3e:96:62:cf:4f:45:e8:61:58:b8:bd:b3:9f:16:a6:e1:7a:
ee:06:d2:96:1d:89:43:4c:95:b6:32:01:0d:32:85:dc:bd:e2:
3d:d0:ed:96:bf:37:c1:d2:50:eb:a5:09:4f:75:67:41:b4:d1:
06:b3:81:3c:ea:25:a5:df:49:ac:f6:b4:96:dd:7d:39:be:85:
ec:61:23:21:71:b7:2b:9c:48:00:4f:e0:64:f8:90:a8:f3:2a:
06:71:63:e6:c6:2e:7e:6f:54:21:82:04:c8:1f:8e:17:8d:5f:
5c:bd:9d:99:2a:b8:37:06:77:9e:d0:4b:5b:7b:55:5f:c9:ef:
f1:96:ac:74:6d:6d:bd:7a:65:1e:b9:9d:38:9f:b9:ea:20:3b:
90:34:a3:9b:91:71:ee:37:a6:52:92:72:76:18:84:44:57:4d:
a0:96:c5:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDju97p4vXjwWY5qHKvOIc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwOTI3MTYzODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTRhMmRhY2I0YWVjYmFjOGU4OWIwZmJiNjZhNGI1M2EzYTJhMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj2coKuwC3GdfhQgymH5EQv4GBsj
SOM3L23Uo30UwetZqTrSzhckmusiqsVn3L03U1IKs1QA5cEr3Gh9oVaYJMkxOr1U
vGu/6fHy/ud65MNUSCpqMUsV+SyPxR/J72dWANPT5v1JQbgFtcIId8FrrmRUb94L
hsyyKmlbbqCBcrF6y1UH0ub1vpGEN6Lr7kjQqjBglw9mmHoJjg1gPpTguyMNU0b8
ZB3Ciyjij3fYzp+jD17vrux99oV0cJwU8lRPgzAOgeVwmoWIjFc/LlZ25iNE3bXo
5GXY6hW51quMVNinO713obn43lh3Wbc7zoU6mhKZnbeiFMuFvzByhjqWBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGlKLay0rsusjomw+7ZqS1OjoqHkMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvYVVvdHJMU3V5NnlPaWJEN3RtcExVNk9pb2VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXtkMA0G
CSqGSIb3DQEBCwUAA4IBAQB2uKqr0iOA41OpdoZmD+xxumBSnSoorHNJleuh7qxg
3L1ltVlW1oNFBG/Ss6rkIwiNCaUMYqePNlWd+/zdhr/lx8kDnkgzTsUB5dnpvFBD
n7AIptYI6+5bhch6PpZiz09F6GFYuL2znxam4XruBtKWHYlDTJW2MgENMoXcveI9
0O2WvzfB0lDrpQlPdWdBtNEGs4E86iWl30ms9rSW3X05voXsYSMhcbcrnEgAT+Bk
+JCo8yoGcWPmxi5+b1QhggTIH44XjV9cvZ2ZKrg3Bnee0Etbe1Vfye/xlqx0bW29
emUeuZ04n7nqIDuQNKObkXHuN6ZSknJ2GIREV02glsUF
-----END CERTIFICATE-----
Generated at Wed Sep 30 00:53:10 2026 by rpki-client