Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/qoO1VGrbasNcljLx7WnOzrOiSzU.roa
File: qoO1VGrbasNcljLx7WnOzrOiSzU.roa (raw, json)
Hash identifier: GSCrJfG5928X7a4qKKOUKD29RdBJfavq91zcRFLz/0A=
Subject key identifier: AA:83:B5:54:6A:DB:6A:C3:5C:96:32:F1:ED:69:CE:CE:B3:A2:4B:35
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019E982B887403AC40AFE357539F03E9F62A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/qoO1VGrbasNcljLx7WnOzrOiSzU.roa
Signing time: Fri 05 Jun 2026 14:24:10 +0000
ROA not before: Fri 05 Jun 2026 14:24:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.175.103.0/24 maxlen: 24
81.18.48.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
178.253.227.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.174.0/24 maxlen: 24
188.255.175.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
188.255.236.0/24 maxlen: 24
212.69.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jun 2026 07:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:2b:88:74:03:ac:40:af:e3:57:53:9f:03:e9:f6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 5 14:24:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa83b5546adb6ac35c9632f1ed69ceceb3a24b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:65:b4:b6:07:db:36:ac:ba:44:a3:b7:6c:
dc:1d:e8:49:10:97:e1:5f:72:29:70:68:a8:a7:29:
4d:1c:9e:77:24:35:55:27:03:e8:18:75:09:03:98:
5d:a9:aa:96:a9:15:f0:e0:51:f6:74:32:ee:1c:59:
aa:9e:b1:ca:d9:78:f4:1a:9c:ab:e0:17:41:aa:4b:
35:23:6f:9f:07:6e:d5:c2:e1:91:e6:42:76:88:6e:
f2:75:59:0f:f3:d7:41:33:16:af:8e:b0:8d:8a:2c:
bd:b2:b2:fd:55:76:7d:ad:75:9f:cf:7d:3e:0f:0c:
e2:a0:61:5d:c5:2b:f5:83:5a:de:68:7d:7f:75:92:
79:f9:2e:08:f3:7b:78:b1:1e:95:1c:df:6d:92:96:
87:b6:8b:31:05:7d:36:0f:0d:67:e4:7d:85:42:fd:
86:a3:ba:7f:e5:89:db:dc:aa:c3:cd:db:60:bc:86:
1f:85:c0:07:39:be:ce:f1:94:ee:28:bf:8c:c4:6e:
c9:c6:ec:dd:0f:5f:fe:ce:7b:fa:61:68:65:b0:e4:
bd:bd:8e:b7:52:ce:eb:31:6a:ae:39:98:02:d6:4c:
b6:3a:c5:a4:45:db:21:3f:36:60:2d:33:d0:53:e5:
06:ea:da:4d:e1:8b:d2:0b:ac:9d:ac:90:af:fb:de:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:83:B5:54:6A:DB:6A:C3:5C:96:32:F1:ED:69:CE:CE:B3:A2:4B:35
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/qoO1VGrbasNcljLx7WnOzrOiSzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.103.0/24
81.18.48.0/24
178.219.6.0/24
178.253.227.0/24
185.47.91.0/24
188.255.174.0/23
188.255.198.0/24
188.255.236.0/24
212.69.8.0/24
Signature Algorithm: sha256WithRSAEncryption
72:91:7b:6c:3a:13:ae:17:c8:4c:2c:2c:1a:e4:28:71:89:55:
5f:33:3e:03:65:3f:07:0c:56:08:08:cc:cc:e9:96:6d:fd:4f:
69:4a:03:a9:0a:ba:9c:d4:d3:87:8c:3a:3b:05:9f:ff:02:84:
94:58:6b:22:b7:14:44:d9:58:a8:7b:af:e2:21:d8:87:aa:39:
53:10:6b:1b:8d:d0:ad:13:be:1c:73:b0:b9:52:71:30:8b:12:
96:5f:07:9c:61:57:f4:30:1a:23:72:f9:21:e2:b0:e5:0d:d1:
d7:62:0f:70:cf:35:c2:e7:1b:58:60:b6:28:f0:12:1b:32:12:
4f:9b:37:28:bd:9b:84:aa:0c:2e:9a:16:74:f8:f0:01:25:6c:
0a:89:b6:3f:61:b6:1b:12:a3:12:86:57:f0:fd:83:9c:b0:82:
81:f4:d1:05:47:c1:09:e0:01:85:0b:99:73:fc:12:31:6d:27:
b1:be:7f:3a:09:69:44:bc:23:56:e5:ea:e3:16:97:4d:73:d5:
66:0f:fc:c5:57:5f:49:8b:2f:5c:85:5a:79:f9:a1:cb:53:30:
9e:4c:6f:ef:5f:4a:d4:31:13:2b:5a:35:2c:e0:0e:e5:12:b1:
43:00:1b:9f:5d:ce:98:ac:bf:ff:f2:18:44:67:02:9f:a5:ab:
22:69:3d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:08:40 2026 by rpki-client