Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/mh2x3qipFhB6EtwDWgxwgag5JpE.roa
File: mh2x3qipFhB6EtwDWgxwgag5JpE.roa (raw, json)
Hash identifier: mbEdvtxR/wAn+HGXqlY29ztT2bQW1cahl9qMHTun1Sg=
Subject key identifier: 9A:1D:B1:DE:A8:A9:16:10:7A:12:DC:03:5A:0C:70:81:A8:39:26:91
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01A07CB8CACCE2774170BBF2532940406B75
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/mh2x3qipFhB6EtwDWgxwgag5JpE.roa
Signing time: Mon 07 Sep 2026 16:34:40 +0000
ROA not before: Mon 07 Sep 2026 16:34:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 94.131.123.0/24 maxlen: 24
103.231.75.0/24 maxlen: 24
185.234.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Sep 2026 11:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:b8:ca:cc:e2:77:41:70:bb:f2:53:29:40:40:6b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Sep 7 16:34:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a1db1dea8a916107a12dc035a0c7081a8392691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:bc:2a:ad:96:91:f4:33:ba:fc:a8:71:97:
cd:a2:62:82:d8:69:1e:26:17:2e:aa:db:44:50:1c:
7e:c7:da:db:5d:e5:5c:c3:a1:2f:1b:de:9e:fe:92:
d5:88:31:3a:f0:4a:40:7a:b0:91:66:81:e9:a9:19:
58:70:52:60:fb:03:d5:25:e3:59:fe:82:46:ac:80:
7a:5f:12:e6:e3:e6:cf:e9:bc:29:da:f3:42:31:e3:
5b:a6:09:2b:5a:a7:52:8b:29:78:23:99:01:28:90:
43:76:a4:3d:46:7e:5a:7c:3c:ea:6c:97:7a:9a:28:
61:61:1f:80:b9:ee:ef:5b:95:fa:9f:74:a8:fb:12:
20:30:70:99:29:de:ca:59:5d:4e:ab:8e:11:bf:c2:
40:69:5e:e6:5c:55:ad:b1:01:24:3e:78:fe:1c:73:
b4:f8:91:bc:8d:99:d2:74:ae:ed:03:36:d9:bd:6e:
43:18:b1:8c:7e:93:5e:1d:8a:20:d7:e2:54:44:c8:
bd:49:b1:97:5b:fd:f5:ff:67:39:a2:f6:bd:a3:95:
69:ef:d6:ba:77:74:71:dd:ff:50:bc:8a:51:ae:47:
80:e3:0e:c3:10:97:aa:81:78:0c:6d:8b:c4:5a:33:
3e:8d:11:73:b5:b0:1e:ea:77:0e:5c:3a:69:f6:3d:
e9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1D:B1:DE:A8:A9:16:10:7A:12:DC:03:5A:0C:70:81:A8:39:26:91
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/mh2x3qipFhB6EtwDWgxwgag5JpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.123.0/24
103.231.75.0/24
185.234.66.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a8:90:bf:a4:3c:f7:3d:ca:d9:f3:87:79:39:96:8c:29:a5:
c9:5f:73:7e:bd:36:ce:3d:62:66:ee:11:2d:7f:e6:6b:33:2a:
15:58:cb:27:1a:cc:4b:9e:6c:d1:b9:e4:7e:5f:ff:d5:48:54:
bf:7c:89:6e:32:3b:46:f5:3b:14:b1:00:2f:28:f9:83:e3:6c:
35:38:e3:2f:ea:66:d7:7a:71:e5:b5:72:25:b5:0a:b5:d4:b5:
8a:1b:07:42:15:7f:04:b1:13:d1:27:b6:79:e7:a3:19:ac:f8:
64:ef:ce:c4:4b:75:d7:35:85:8c:58:e6:12:6f:89:57:03:ed:
d1:15:93:c4:9a:8f:57:ba:83:1a:e3:e4:8d:71:50:d6:d7:c0:
36:fb:33:75:8c:0e:47:8b:9e:e7:3f:dc:f9:44:89:29:62:e7:
60:ec:72:66:93:21:df:66:71:58:16:b6:b4:3f:06:f1:4c:06:
69:6f:27:f6:94:e4:22:80:85:40:49:dd:09:aa:23:d0:bf:39:
8f:69:91:8f:8f:64:3f:08:5d:de:4f:77:3e:c2:15:5f:b6:38:
69:6c:b8:bd:4b:75:06:9f:6a:62:99:97:af:ad:57:d0:17:43:
50:0a:8f:6a:9a:86:38:1d:96:db:7f:1a:28:fe:ff:b2:88:28:
75:f9:d0:a6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaB8uMrM4ndBcLvyUylAQGt1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl
YWNkNDAwHhcNMjYwOTA3MTYzNDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTFkYjFkZWE4YTkxNjEwN2ExMmRjMDM1YTBjNzA4MWE4MzkyNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqia8Kq2WkfQzuvyocZfNomKC2Gke
JhcuqttEUBx+x9rbXeVcw6EvG96e/pLViDE68EpAerCRZoHpqRlYcFJg+wPVJeNZ
/oJGrIB6XxLm4+bP6bwp2vNCMeNbpgkrWqdSiyl4I5kBKJBDdqQ9Rn5afDzqbJd6
mihhYR+Aue7vW5X6n3So+xIgMHCZKd7KWV1Oq44Rv8JAaV7mXFWtsQEkPnj+HHO0
+JG8jZnSdK7tAzbZvW5DGLGMfpNeHYog1+JURMi9SbGXW/31/2c5ova9o5Vp79a6
d3Rx3f9QvIpRrkeA4w7DEJeqgXgMbYvEWjM+jRFztbAe6ncOXDpp9j3p3wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJodsd6oqRYQehLcA1oMcIGoOSaRMB8GA1UdIwQY
MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt
MTE5ZWZjYmIyMDIzLzEvbWgyeDNxaXBGaEI2RXR3RFdneHdnYWc1SnBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz
LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXoN7AwQA
Z+dLAwQAuepCMA0GCSqGSIb3DQEBCwUAA4IBAQAlqJC/pDz3PcrZ84d5OZaMKaXJ
X3N+vTbOPWJm7hEtf+ZrMyoVWMsnGsxLnmzRueR+X//VSFS/fIluMjtG9TsUsQAv
KPmD42w1OOMv6mbXenHltXIltQq11LWKGwdCFX8EsRPRJ7Z556MZrPhk787ES3XX
NYWMWOYSb4lXA+3RFZPEmo9XuoMa4+SNcVDW18A2+zN1jA5Hi57nP9z5RIkpYudg
7HJmkyHfZnFYFra0PwbxTAZpbyf2lOQigIVASd0JqiPQvzmPaZGPj2Q/CF3eT3c+
whVftjhpbLi9S3UGn2pimZevrVfQF0NQCo9qmoY4HZbbfxoo/v+yiCh1+dCm
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:38 2026 by rpki-client