Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t8aEpCmnTrGGwQdMJvquxiF7L6I.roa
File: t8aEpCmnTrGGwQdMJvquxiF7L6I.roa (raw, json)
Hash identifier: 8udPdyGx1gIYDDhattWBL9RHI++wsELeaNcZkQRJ8NM=
Subject key identifier: B7:C6:84:A4:29:A7:4E:B1:86:C1:07:4C:26:FA:AE:C6:21:7B:2F:A2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A03881DB103612486D00383D438D08109F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t8aEpCmnTrGGwQdMJvquxiF7L6I.roa
Signing time: Tue 25 Aug 2026 10:40:29 +0000
ROA not before: Tue 25 Aug 2026 10:40:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 31.56.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Aug 2026 06:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:81:db:10:36:12:48:6d:00:38:3d:43:8d:08:10:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 25 10:40:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7c684a429a74eb186c1074c26faaec6217b2fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:33:71:7e:d4:7e:9f:b1:7d:b4:f8:8a:f5:
7e:46:6a:e1:81:16:be:4a:50:47:14:9f:03:2a:01:
72:dd:5d:8f:fa:bf:92:a3:73:a7:b4:a3:18:3d:ee:
6b:b4:f7:98:7c:3f:cc:e1:41:1b:4e:56:15:ba:9f:
fc:bb:3e:90:ce:57:5f:1c:0a:12:d8:8c:73:f3:f7:
6d:59:cf:4d:53:c9:82:ac:78:90:c1:17:45:d6:b9:
a6:09:36:0c:f9:0a:71:90:f0:32:c5:5e:b3:b8:99:
5d:4e:9c:9a:fa:99:e9:02:4e:8e:14:66:9a:22:e4:
e8:92:55:85:e9:3a:75:2a:22:e7:06:09:91:14:cf:
8d:eb:0c:41:6f:04:fe:a3:63:d1:e8:21:43:5b:94:
3f:4c:e5:a2:83:fc:da:ff:a8:f0:5a:77:31:b8:0b:
11:7a:85:25:95:bb:6a:81:d7:1a:bd:bc:a1:c0:25:
5a:4b:bb:a8:e5:d0:ca:a1:63:90:19:cd:97:6c:6c:
43:f0:a9:a3:62:33:51:c2:70:db:dc:11:c2:58:f7:
0a:e3:27:e4:36:77:b8:e7:9b:bc:a2:11:5f:64:c3:
56:9b:56:55:ed:e2:28:d7:20:9b:1a:7c:35:f6:4b:
45:2f:16:1c:f0:ee:22:90:af:cd:87:d9:77:23:6f:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C6:84:A4:29:A7:4E:B1:86:C1:07:4C:26:FA:AE:C6:21:7B:2F:A2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t8aEpCmnTrGGwQdMJvquxiF7L6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.73.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d3:3b:21:0a:c8:aa:83:9c:43:73:ae:89:0e:2c:77:6a:c2:
c0:b1:2b:36:a6:d2:6c:3a:4d:5b:9a:82:cf:52:a4:a6:de:1c:
03:f7:ae:d8:7a:3c:f6:a0:c6:c3:d6:fe:15:7a:e5:3c:04:90:
ff:eb:7b:0e:26:e9:fa:51:2e:82:a9:09:e3:36:1d:6c:77:3a:
fe:45:32:07:4e:d5:a3:2c:5b:b3:bb:a6:a5:15:e9:56:bd:d6:
fe:0e:f1:b9:69:00:44:c9:60:60:f6:75:68:2b:87:8b:e6:48:
61:84:48:1a:94:94:9c:5f:9d:56:11:24:82:27:4b:cf:10:68:
95:87:a1:a1:d7:85:2c:e3:c5:10:10:c5:98:73:88:70:4c:e3:
00:f2:67:df:b3:09:a0:34:3d:f0:e1:36:1f:2f:45:88:ce:89:
8e:65:63:b1:09:09:87:42:02:4d:39:4b:3d:e5:07:ba:3d:47:
33:0f:8a:19:37:c8:dc:17:4f:94:49:d2:3f:45:fa:9e:57:e3:
99:d4:f1:3f:fb:28:49:8d:16:ec:f5:5b:63:8e:24:00:4a:fd:
04:39:66:b0:14:b6:a1:a0:ba:51:7f:c9:38:53:2f:1a:e4:47:
72:10:28:b9:bc:8f:27:9b:3c:bc:c1:cd:ce:7d:a3:ef:9c:02:
94:33:75:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:12:57 2026 by rpki-client