Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/K9OaAGmxSiAdAbOGdJ0HNgLeae4.roa
File: K9OaAGmxSiAdAbOGdJ0HNgLeae4.roa (raw, json)
Hash identifier: 32Wzb+C4gZJP0KKzl5rF3K5rwst7RljwmHo9rawyEDs=
Subject key identifier: 2B:D3:9A:00:69:B1:4A:20:1D:01:B3:86:74:9D:07:36:02:DE:69:EE
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019B77C68145BBD5B783546AED197DC3E741
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/K9OaAGmxSiAdAbOGdJ0HNgLeae4.roa
Signing time: Thu 01 Jan 2026 04:17:36 +0000
ROA not before: Thu 01 Jan 2026 04:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 88.148.21.0/24 maxlen: 24
88.148.104.0/24 maxlen: 24
89.32.167.0/24 maxlen: 24
89.43.87.0/24 maxlen: 24
93.115.157.0/24 maxlen: 24
94.76.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jan 2026 15:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:81:45:bb:d5:b7:83:54:6a:ed:19:7d:c3:e7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 1 04:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bd39a0069b14a201d01b386749d073602de69ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:5a:b6:fd:6e:b3:a0:cf:07:78:a4:1d:8d:
10:72:e0:74:d5:e1:1d:3f:96:24:fe:0b:56:a9:dd:
24:26:9c:37:a6:74:30:90:8f:a7:85:80:93:22:ff:
93:33:2e:4e:76:ad:da:54:57:bb:41:ab:46:cc:39:
d5:62:f0:7a:86:f8:e8:81:b8:29:04:83:de:49:16:
13:d2:dc:bd:51:33:f4:c1:f3:e3:34:ee:03:61:20:
c4:d6:2e:27:9f:5e:05:cc:b9:19:5d:f0:cf:91:21:
e9:1c:50:51:67:e7:23:12:a3:b9:61:70:22:9b:22:
7a:b8:e7:b0:a2:a6:fc:d6:40:ed:71:28:a2:91:d2:
8f:df:35:92:f9:15:27:16:48:84:ab:35:a6:13:d9:
e7:e5:26:12:8f:3e:f3:de:9d:a2:cc:9e:b6:db:29:
b7:d6:d6:9c:3a:d5:9c:46:ab:f7:60:a5:d5:5d:e8:
60:59:14:41:aa:f7:c5:59:b5:3d:30:e7:3d:61:9b:
31:06:ce:5f:37:60:d9:0c:71:cf:61:21:3c:a8:d7:
7e:a7:0b:d9:bc:e1:44:6a:f2:46:20:99:e9:dd:4f:
ec:4f:23:f4:a1:c1:a1:6c:ea:62:b3:8b:70:53:30:
dd:71:08:80:e0:c1:3b:7b:cf:04:8c:be:1f:8d:92:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D3:9A:00:69:B1:4A:20:1D:01:B3:86:74:9D:07:36:02:DE:69:EE
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/K9OaAGmxSiAdAbOGdJ0HNgLeae4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.148.21.0/24
88.148.104.0/24
89.32.167.0/24
89.43.87.0/24
93.115.157.0/24
94.76.182.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:36:e1:80:a1:c4:33:14:5b:45:40:a0:8f:a6:60:e5:8c:ee:
77:40:c3:99:ff:d7:7c:f1:4d:de:7f:1d:bb:37:a6:cf:e9:4c:
64:24:94:da:ed:00:8a:79:9f:cb:f6:40:dc:5e:0c:24:34:d5:
4a:58:ff:0c:25:66:2f:60:b2:01:b2:66:7c:dd:1f:2f:7e:0c:
b2:39:59:77:24:ef:18:86:c5:4e:40:70:99:ee:44:da:f5:c6:
1f:a6:6b:29:98:54:07:e2:05:99:79:a5:b5:5d:a5:6b:a3:33:
81:b1:83:ae:c3:4f:c5:6d:aa:c6:f6:6f:bd:6c:73:22:ce:c3:
9b:09:bf:19:7d:60:a8:a7:47:56:45:06:51:e6:0b:51:99:eb:
c5:39:41:cd:de:86:e4:23:d2:13:d0:ce:42:a2:0f:69:e2:71:
3b:cf:5f:e2:01:e1:db:c3:74:e8:b6:2c:13:d6:75:99:fa:33:
6b:32:6d:4f:cd:20:19:22:c9:2f:a5:2e:cd:e2:55:86:33:c3:
0f:33:6c:82:4f:7e:ee:d3:23:33:b9:ca:87:5b:74:b9:f2:59:
9f:df:85:58:f0:68:aa:3b:ed:c4:0a:bb:c8:4c:98:e6:8b:e4:
76:17:11:28:8f:16:2c:1d:17:ac:2f:a0:6b:43:59:07:a6:08:
e1:63:70:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:41:53 2026 by rpki-client