Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/98M2uI-n4j9IWZbHcwHyHuLlgMY.roa
File: 98M2uI-n4j9IWZbHcwHyHuLlgMY.roa (raw, json)
Hash identifier: tVlnB/iVZUbrEmnQNiLmzqD9BnbN1mF6tx08GYdGgbo=
Subject key identifier: F7:C3:36:B8:8F:A7:E2:3F:48:59:96:C7:73:01:F2:1E:E2:E5:80:C6
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019EC977316926DD889D12F50B8413F11B99
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/98M2uI-n4j9IWZbHcwHyHuLlgMY.roa
Signing time: Mon 15 Jun 2026 04:08:12 +0000
ROA not before: Mon 15 Jun 2026 04:08:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2001:3080::/29 maxlen: 29
2001:3180::/29 maxlen: 29
2a10:6c40::/29 maxlen: 32
2a10:9600::/29 maxlen: 29
2a14:6ac0::/29 maxlen: 29
2a14:6bc6::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 18 Jun 2026 16:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c9:77:31:69:26:dd:88:9d:12:f5:0b:84:13:f1:1b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 15 04:08:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7c336b88fa7e23f485996c77301f21ee2e580c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:05:90:47:b4:a9:08:16:4d:94:5f:30:d8:
8d:cf:a8:d6:96:bb:4e:77:7f:72:7b:e8:af:e5:ef:
ef:27:f4:7a:f1:64:ae:73:4d:f3:c1:42:7c:04:93:
38:6c:fe:2e:1e:bb:16:2a:d7:ea:43:1b:39:34:e0:
4c:28:02:e1:b4:8d:3f:97:ff:59:77:65:40:77:0e:
5e:7a:30:08:73:1a:c8:b4:c6:e3:18:57:d2:a1:d8:
c8:d7:ec:4b:ed:db:d8:48:c8:2f:0b:80:67:f0:b2:
2c:f2:91:e6:f9:3e:1f:87:12:9c:b3:2c:85:3c:31:
ad:39:52:03:4e:95:53:c0:04:dd:d7:e1:aa:35:b0:
e6:b1:91:fa:4a:15:d7:0d:cd:f4:cc:e9:a7:81:43:
fa:e7:71:5c:b4:0b:db:56:b9:37:9b:60:91:61:49:
4f:5d:f4:51:9e:59:fe:46:24:3f:21:63:f9:1b:25:
9d:8a:70:8e:de:32:c8:ef:c1:ad:91:9c:3c:b3:04:
64:46:82:c0:05:ef:af:84:4b:1b:39:e7:e3:9d:fa:
b1:9a:6a:17:b5:76:16:28:55:ca:5c:32:72:16:89:
50:4a:3e:29:f6:62:40:d8:51:89:5b:f3:eb:ff:a1:
e3:94:05:25:7e:06:5f:02:3c:7e:92:2a:9c:2c:f6:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C3:36:B8:8F:A7:E2:3F:48:59:96:C7:73:01:F2:1E:E2:E5:80:C6
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/98M2uI-n4j9IWZbHcwHyHuLlgMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3080::/29
2001:3180::/29
2a10:6c40::/29
2a10:9600::/29
2a14:6ac0::/29
2a14:6bc6::/32
Signature Algorithm: sha256WithRSAEncryption
84:ec:85:e0:f2:f9:60:f4:21:02:45:10:60:da:42:17:74:55:
19:49:30:78:90:a4:01:7d:aa:e9:1e:f2:dd:3c:5d:10:b3:2e:
aa:5c:54:8f:8f:3f:e1:5e:f5:97:1b:27:d6:1a:60:f6:da:2c:
11:9f:9f:c9:8a:b0:62:d2:f9:0e:da:07:bd:7b:50:71:8e:43:
76:c9:f0:cc:5c:dd:ba:ad:65:db:12:cc:3d:f6:7b:37:dd:0a:
bb:32:04:6a:e9:52:14:f4:2d:f3:9c:3f:e5:3a:98:8e:97:ed:
10:41:73:e3:0f:e4:15:e0:5d:7e:b1:00:e1:36:d7:b8:8a:9e:
00:77:09:40:d6:97:60:23:7a:9d:9b:cc:25:99:49:e5:2a:c1:
26:a9:7b:da:b2:09:07:c3:44:79:24:c8:cc:e4:ab:a7:87:e9:
bc:53:c4:e1:af:fe:29:e7:65:76:e2:3b:25:8f:8f:0c:4f:d5:
f8:1e:6c:82:0c:d7:b7:4e:84:98:d5:7e:b6:cb:58:2b:ef:02:
75:dc:27:c5:42:87:51:38:f0:1a:78:77:62:8a:0d:71:fd:d4:
a5:0a:b7:50:17:25:4c:b1:bc:0a:55:4f:ca:c9:6d:9a:e0:34:
3b:1e:52:a8:f2:43:3e:b2:75:5a:d4:98:39:c8:d6:ec:d8:6c:
b9:48:5c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 13:15:46 2026 by rpki-client