Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/IiedQhQUbjfguRMW01vvJYLO-io.roa
File: IiedQhQUbjfguRMW01vvJYLO-io.roa (raw, json)
Hash identifier: d0y2ndYIZdQ7xKIVfUIhIzImuGYNPqtaBreHwwcKt5k=
Subject key identifier: 22:27:9D:42:14:14:6E:37:E0:B9:13:16:D3:5B:EF:25:82:CE:FA:2A
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01A0580D77B6D0B735CA11847ACF099A56C7
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/IiedQhQUbjfguRMW01vvJYLO-io.roa
Signing time: Mon 31 Aug 2026 13:41:12 +0000
ROA not before: Mon 31 Aug 2026 13:41:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 93.152.206.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Sep 2026 08:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:0d:77:b6:d0:b7:35:ca:11:84:7a:cf:09:9a:56:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Aug 31 13:41:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22279d4214146e37e0b91316d35bef2582cefa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:1a:38:3d:17:01:8d:4f:0c:59:3b:a6:5f:
1e:9e:25:c3:cb:3a:88:c1:82:40:92:7d:c3:be:e2:
b3:eb:c2:54:50:e1:c1:81:26:cd:de:f4:0c:70:25:
97:94:22:23:ca:07:56:f0:75:31:f2:86:35:38:76:
7f:f8:a0:f5:f0:f5:18:d9:29:6c:46:5d:94:09:15:
a1:59:13:ac:35:15:33:4a:ee:1e:64:fc:32:1c:38:
c5:86:22:d3:af:02:f3:a5:de:73:92:a9:40:66:94:
66:db:cb:be:aa:89:29:9a:ad:83:e4:cb:90:b1:5c:
4c:10:68:75:aa:c1:eb:3d:e0:80:9e:a1:80:14:33:
38:7f:95:4f:63:95:00:32:80:4a:d6:2e:92:7f:2b:
87:a7:b1:9d:93:18:05:ed:f4:b5:3e:12:90:0d:db:
7a:61:7b:10:57:e5:58:af:e8:1e:bf:20:fe:18:75:
a0:b8:03:85:ee:aa:3c:14:fb:49:83:b6:12:eb:9b:
aa:35:87:66:41:18:25:8e:af:43:e8:91:0f:e0:29:
c9:48:f7:aa:5f:53:bd:fd:e9:20:f8:d3:dc:8d:a0:
bb:4e:e8:5a:2d:2a:ca:b4:70:e8:64:a8:a4:7e:e3:
30:4e:50:e2:97:38:95:04:12:44:fe:8d:62:80:e3:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:27:9D:42:14:14:6E:37:E0:B9:13:16:D3:5B:EF:25:82:CE:FA:2A
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/IiedQhQUbjfguRMW01vvJYLO-io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.206.0/24
93.152.211.0/24
93.152.215.0-93.152.216.255
Signature Algorithm: sha256WithRSAEncryption
07:2d:ba:63:da:3b:fa:08:14:df:64:ea:33:af:86:5f:38:a3:
47:0e:32:cc:d5:c3:87:a2:87:f1:8d:d9:34:1c:1b:55:4d:59:
b4:d2:8d:96:05:b0:35:79:ee:71:f6:29:d5:aa:57:9f:31:c0:
b4:44:25:36:78:c2:61:1f:9b:95:94:1a:f8:be:2f:4f:20:64:
82:5e:69:8a:92:27:a8:65:98:1c:d8:5c:f6:b5:99:09:5a:22:
ba:33:fc:7e:7f:ff:60:16:59:5b:f3:7e:fd:25:fc:38:4f:84:
54:67:94:5f:61:0a:fb:f3:30:8e:65:81:34:df:b5:0a:dc:59:
e6:c1:fc:c0:17:ab:b6:32:d6:d4:d5:c3:a7:55:dc:4b:03:e9:
52:34:81:ec:44:a7:d6:c1:87:e2:db:e3:9f:6a:27:5c:77:59:
e9:a6:da:2c:e7:e0:09:be:ab:9d:4c:da:ec:f8:7b:72:3a:1a:
34:09:fa:05:ee:ff:f7:cb:c6:b7:5b:e3:32:2a:b9:0e:17:bb:
22:d4:8a:85:6c:e3:97:6e:b1:73:84:16:e0:5b:f9:21:f0:d7:
ab:1a:3e:af:b5:dc:ca:ab:6c:ce:4c:15:3a:64:1c:61:a1:e3:
31:90:2a:17:c4:cc:76:20:c9:0c:26:2b:74:83:7d:3b:79:dc:
34:05:9b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:58:06 2026 by rpki-client