Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qVd8thUoRNxsaOV4Uy3c8meMWWw.roa
File: qVd8thUoRNxsaOV4Uy3c8meMWWw.roa (raw, json)
Hash identifier: +XxbnxSd3mUWxh+jddC2nSgq/NEv4jpzNGGo+F01DCY=
Subject key identifier: A9:57:7C:B6:15:28:44:DC:6C:68:E5:78:53:2D:DC:F2:67:8C:59:6C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FDDD24079160FC560732DFCFAC8D5A4BC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qVd8thUoRNxsaOV4Uy3c8meMWWw.roa
Signing time: Fri 07 Aug 2026 20:02:51 +0000
ROA not before: Fri 07 Aug 2026 20:02:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15731
IP address blocks: 89.35.73.0/24 maxlen: 24
89.125.226.0/23 maxlen: 23
153.76.195.0/24 maxlen: 24
153.76.205.0/24 maxlen: 24
162.35.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Aug 2026 09:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:d2:40:79:16:0f:c5:60:73:2d:fc:fa:c8:d5:a4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 7 20:02:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9577cb6152844dc6c68e578532ddcf2678c596c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8b:0a:81:14:15:85:fb:5b:3a:6a:9c:d3:04:
3a:f6:f7:9e:3e:24:eb:9b:0b:35:b3:b2:d5:59:4c:
cc:46:f8:2b:4c:15:68:f5:a8:7d:43:69:a4:e1:89:
3d:ca:04:f4:f2:a1:96:1e:25:2a:0c:9b:97:11:cd:
21:ea:b1:f4:92:36:50:69:25:31:45:ad:32:b8:2d:
bf:c1:34:49:84:24:50:b7:c0:f1:93:e3:be:b5:39:
9b:05:e7:ce:85:9b:cc:6d:8a:d3:79:0f:c4:34:29:
2c:cb:5b:92:99:ae:e1:12:b2:bc:2b:ba:9d:6a:45:
5d:8b:5d:0e:63:54:0e:a7:39:56:b5:39:f0:4d:46:
5f:77:a9:3c:56:ea:04:bb:cd:5c:82:54:6d:cf:00:
b8:4d:45:81:64:bc:b3:53:ce:a9:55:c7:b1:eb:d7:
43:9f:2c:e5:ab:d7:7d:12:b1:89:9d:02:83:4d:df:
e3:54:64:e3:38:f9:de:dd:6b:3b:5b:5c:03:ef:d1:
a7:00:ec:b0:f8:09:83:89:c1:24:3b:d8:fd:66:e6:
98:85:3e:2f:d2:b4:ec:9d:ca:33:79:cc:b3:b5:1b:
33:8c:34:fa:a8:e6:26:b7:d9:6d:fd:77:af:fe:0f:
75:20:c2:ef:37:00:f2:07:56:2f:ad:a8:12:fd:27:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:57:7C:B6:15:28:44:DC:6C:68:E5:78:53:2D:DC:F2:67:8C:59:6C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qVd8thUoRNxsaOV4Uy3c8meMWWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.73.0/24
89.125.226.0/23
153.76.195.0/24
153.76.205.0/24
162.35.230.0/24
Signature Algorithm: sha256WithRSAEncryption
37:bf:6f:b6:20:9a:40:4a:f4:8d:54:cb:e9:d6:06:49:91:1c:
bb:14:53:4f:a8:77:86:62:2f:7e:b1:20:62:53:71:1a:48:86:
f1:f0:ae:21:8f:94:a8:53:55:58:1b:78:76:5b:4f:45:bb:a6:
60:0a:a5:a7:38:5e:d6:00:9a:66:44:a5:45:58:9e:4d:11:c0:
25:81:99:2b:62:b9:a5:a0:49:c8:3b:a5:85:96:6f:07:97:a0:
1f:82:24:c7:b4:5e:68:ca:86:d5:5c:0e:d9:35:53:98:46:1b:
b4:a1:4e:48:32:c6:77:a3:73:67:72:c9:0e:35:36:d6:7a:97:
2e:a2:df:97:68:a6:ce:64:77:c8:3d:8f:93:f3:4f:22:f6:2f:
ca:fe:06:c6:55:d1:24:54:fe:d5:5a:bc:8e:95:24:29:d6:b6:
69:f1:9e:80:f1:5b:77:0b:e8:cc:33:68:36:42:1a:86:c2:19:
0c:f3:23:e6:de:e8:b4:cd:24:ef:c2:4b:fe:8a:b3:f3:e2:57:
71:fb:67:ca:b8:e1:0e:59:c0:ad:45:c3:1d:22:36:a4:19:e5:
fb:0a:1c:61:55:60:df:1a:89:ce:0d:a7:1b:dc:26:72:03:06:
bb:e7:bb:28:5a:18:e9:48:af:c2:c9:98:e9:69:f6:fe:8e:c0:
af:f1:a0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:59 2026 by rpki-client