Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/abTaLP8TVhp7KBI89Snle-8LaWE.roa
File: abTaLP8TVhp7KBI89Snle-8LaWE.roa (raw, json)
Hash identifier: /DLSXn5BC3nFQ7Sj47jJJHbgLHyeX5T2MM8kLEkolxY=
Subject key identifier: 69:B4:DA:2C:FF:13:56:1A:7B:28:12:3C:F5:29:E5:7B:EF:0B:69:61
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 01A13E561D031262D641E0EA61B469A7833E
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/abTaLP8TVhp7KBI89Snle-8LaWE.roa
Signing time: Thu 15 Oct 2026 06:53:13 +0000
ROA not before: Thu 15 Oct 2026 06:53:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6282
IP address blocks: 31.131.8.0/23 maxlen: 23
31.131.10.0/23 maxlen: 23
64.43.100.0/22 maxlen: 22
77.36.24.0/22 maxlen: 22
81.161.0.0/23 maxlen: 23
81.161.2.0/23 maxlen: 23
91.234.156.0/23 maxlen: 23
91.234.158.0/23 maxlen: 23
93.120.20.0/22 maxlen: 22
176.96.52.0/22 maxlen: 22
176.111.160.0/23 maxlen: 23
176.111.162.0/23 maxlen: 23
176.116.36.0/22 maxlen: 22
178.159.144.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 19 Oct 2026 19:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:56:1d:03:12:62:d6:41:e0:ea:61:b4:69:a7:83:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Oct 15 06:53:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69b4da2cff13561a7b28123cf529e57bef0b6961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0e:13:40:90:dd:d3:f4:0b:5f:99:ee:bd:db:
4d:da:76:bc:dd:45:fb:2c:3e:b9:dd:16:15:a3:7a:
43:08:60:59:cc:09:d5:ca:aa:d1:ef:6a:55:7a:a4:
a2:8c:a8:df:c7:a1:a5:14:33:39:a7:4b:07:88:bf:
6a:73:63:cf:b1:5c:b2:33:56:b5:89:24:72:00:ce:
e3:24:b5:58:71:65:8d:6e:38:3c:f5:00:09:c9:1b:
69:69:63:c3:9a:33:de:cf:a6:cf:2b:eb:b6:7b:ae:
17:bd:5e:ea:12:d9:a7:e5:06:d3:b5:93:7b:63:a9:
4f:86:87:ed:59:b9:96:71:9c:b2:46:e8:54:a3:41:
69:8c:41:89:29:e0:29:f1:1e:e3:dd:14:02:9e:45:
fa:05:86:75:fd:12:4b:07:d7:ff:2e:b9:e7:25:b2:
fb:91:b1:7f:16:49:18:14:fc:e8:21:e4:68:5a:16:
91:03:b0:74:06:65:de:70:17:ab:18:7f:83:3f:b3:
84:6a:2a:8b:9f:58:40:6b:fb:90:47:22:74:b5:aa:
df:69:64:52:73:0b:6d:17:14:e6:5f:95:27:91:3f:
83:72:8b:02:32:5a:63:20:ab:d0:3a:9f:4c:1d:05:
57:1b:4f:f4:2f:c4:84:65:8a:a3:54:b7:fc:10:a3:
d1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B4:DA:2C:FF:13:56:1A:7B:28:12:3C:F5:29:E5:7B:EF:0B:69:61
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/abTaLP8TVhp7KBI89Snle-8LaWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.8.0/22
64.43.100.0/22
77.36.24.0/22
81.161.0.0/22
91.234.156.0/22
93.120.20.0/22
176.96.52.0/22
176.111.160.0/22
176.116.36.0/22
178.159.144.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:17:31:5f:93:7b:4f:d3:fd:79:bd:1e:58:33:e1:4f:f4:db:
f8:ce:bb:4d:6e:38:39:43:30:de:b7:61:e7:c8:95:a5:f2:c7:
af:61:41:3d:2a:c8:f3:be:6a:47:2e:9c:c5:c1:a0:70:6e:42:
10:bf:f8:8d:0d:6c:fc:df:95:16:5c:24:74:79:52:00:4f:46:
12:6c:a2:21:0f:8b:19:4e:40:89:98:b9:62:bd:9b:b4:35:0f:
f1:1d:6a:e1:34:cf:16:92:dc:41:f9:ba:09:c4:31:2a:bd:f7:
72:29:b7:80:b8:83:7c:71:b9:25:62:aa:ea:ba:75:be:cb:4f:
e6:fb:bf:49:c3:74:9d:ea:04:79:6f:64:ec:ff:1d:9d:d9:ad:
4c:4b:a5:42:c3:82:7d:43:94:d0:6b:26:98:20:39:1e:74:aa:
d8:0a:b6:96:c5:07:ec:ea:a0:04:68:b3:53:28:ec:9e:3e:d0:
d1:7a:ca:be:fc:e1:84:c0:3b:27:91:7c:7d:cc:4a:57:78:68:
e4:a4:8e:5c:c3:a5:b4:1d:cf:62:d5:06:0b:2b:a0:46:a7:21:
e1:6e:8d:63:1b:75:db:18:ec:55:e6:35:95:de:13:4a:47:a0:
e8:8d:23:7b:43:82:09:10:b8:b6:f3:87:6d:d5:a2:b5:ab:95:
f6:4f:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:44 2026 by rpki-client