Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/mlQ0eZD4XGZn0NvdloCkct1SMYE.roa
File: mlQ0eZD4XGZn0NvdloCkct1SMYE.roa (raw, json)
Hash identifier: a5oufT2xaopI397USuZzHyKO2yD9R84YEpLqxJ0tHqo=
Subject key identifier: 9A:54:34:79:90:F8:5C:66:67:D0:DB:DD:96:80:A4:72:DD:52:31:81
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 01A060D58242482C60B30784788C736DB118
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/mlQ0eZD4XGZn0NvdloCkct1SMYE.roa
Signing time: Wed 02 Sep 2026 06:36:40 +0000
ROA not before: Wed 02 Sep 2026 06:36:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 213.193.240.0/24 maxlen: 24
213.193.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Sep 2026 05:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:d5:82:42:48:2c:60:b3:07:84:78:8c:73:6d:b1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Sep 2 06:36:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a54347990f85c6667d0dbdd9680a472dd523181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:d8:f5:e9:84:a9:ec:d2:ec:18:3c:13:83:
bd:f5:bd:d8:f1:b8:d9:cb:f3:d8:74:0d:1e:cb:b0:
9e:6e:0a:88:8c:c2:8b:33:f5:74:e6:3a:2f:29:b1:
f8:55:af:aa:7d:38:69:41:60:4d:81:f5:17:4f:15:
eb:cc:d7:b4:ab:7d:50:b1:5f:8c:ff:69:4e:b6:81:
f7:49:f8:57:95:d6:20:b5:b0:e2:c1:6e:36:f2:fc:
89:95:b9:36:04:c7:86:ec:8c:e1:ed:b9:3b:ce:51:
06:12:7a:b5:98:bf:4e:b8:ef:6c:1d:bd:9a:c1:32:
a0:f3:d6:b1:57:a5:d1:f6:5e:ae:5f:71:a6:79:60:
88:59:37:ae:43:c7:c9:19:42:83:f9:ca:5b:e6:4c:
ee:0f:b3:0f:1e:66:f0:da:7e:15:ec:b0:be:a6:be:
e1:c0:f4:0f:bf:6a:5d:cc:4e:11:89:44:4c:84:ba:
7d:36:8c:5a:35:7c:e6:3d:2d:04:8d:2a:2c:13:49:
87:29:a2:86:e7:98:4e:c9:00:7d:d8:db:5b:93:eb:
fe:be:8a:cb:f9:ac:b0:b5:5c:1e:63:4f:d9:1e:81:
a8:de:8b:59:97:06:25:d8:a1:34:bd:7a:ce:b6:28:
61:8a:44:06:e7:d5:93:1c:a9:42:1d:f2:f8:5c:79:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:54:34:79:90:F8:5C:66:67:D0:DB:DD:96:80:A4:72:DD:52:31:81
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/mlQ0eZD4XGZn0NvdloCkct1SMYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.193.240.0/24
213.193.243.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2f:90:29:bd:01:47:35:7e:2f:cc:c8:94:cc:de:e5:3d:df:
da:a5:ad:1a:7c:13:49:52:ad:a3:ae:e7:75:e7:cb:15:99:3b:
a3:a2:bb:a2:47:96:ac:14:6a:9c:29:82:db:17:d4:14:5c:fe:
e7:a5:2e:27:d1:98:cf:46:ce:14:3c:3f:8e:5f:9c:e2:d2:d2:
1f:18:f7:96:3b:67:cd:db:c0:83:cb:d2:04:35:db:3c:32:31:
06:d6:48:5f:5a:97:6c:33:34:09:0e:35:49:da:07:9b:05:0c:
30:b1:25:25:13:b8:e0:99:eb:41:70:ce:50:85:a3:9a:d4:0e:
85:4b:1d:2e:2b:81:c5:f7:a4:84:52:67:35:fa:fc:8f:1c:a2:
cc:6f:1f:6e:63:7e:84:b5:c3:81:c6:05:5d:3f:b1:e3:c7:f7:
f3:55:87:ef:50:af:f1:6d:ad:1a:16:71:ee:bb:39:d3:b3:df:
bf:b1:c8:8e:7c:85:3e:dd:c3:b0:91:b5:a6:3d:e1:d5:c2:94:
be:75:ee:2d:90:3c:dd:35:fb:65:0c:5f:9a:6b:4b:d9:2d:3a:
83:9e:49:d6:48:be:52:72:b0:3c:dc:e3:96:df:c2:31:36:1c:
d0:76:b7:b5:58:cd:6f:22:b4:20:e2:d5:de:2b:ea:de:3d:55:
ee:74:04:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:51 2026 by rpki-client