Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/njAn9_b-0yA1SiYZrPfLPmK7zjc.roa
File: njAn9_b-0yA1SiYZrPfLPmK7zjc.roa (raw, json)
Hash identifier: FZwjCV7NUK5+LnsV84QXe5tA4wy5ss23vFFqPaoaBDM=
Subject key identifier: 9E:30:27:F7:F6:FE:D3:20:35:4A:26:19:AC:F7:CB:3E:62:BB:CE:37
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A0D793113B817FEC56A0C75AF4C265CAD1
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/njAn9_b-0yA1SiYZrPfLPmK7zjc.roa
Signing time: Fri 25 Sep 2026 07:58:54 +0000
ROA not before: Fri 25 Sep 2026 07:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.23.91.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
89.23.94.0/24 maxlen: 24
178.254.168.0/24 maxlen: 24
178.254.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 19:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:93:11:3b:81:7f:ec:56:a0:c7:5a:f4:c2:65:ca:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Sep 25 07:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e3027f7f6fed320354a2619acf7cb3e62bbce37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:a0:7d:bc:e2:50:ad:d1:b2:71:30:e1:0e:
e5:6f:1c:c8:ad:ef:49:06:0b:56:75:79:5f:14:58:
3d:80:79:61:f4:c1:0a:21:ce:f2:5b:76:ec:b0:60:
57:a2:df:4a:dc:d2:80:a6:c0:27:5e:45:2a:eb:d6:
8a:d3:c7:84:fb:45:1e:88:d7:b6:98:ef:96:d8:43:
58:5f:dd:9c:ae:c7:fe:6e:ab:43:f1:e4:e1:18:2a:
8d:27:a3:45:6b:4b:8f:d0:3b:94:df:17:81:91:09:
df:3f:d3:02:17:96:1b:96:e2:1e:b3:a0:a7:c7:fe:
a2:56:ce:13:5f:44:cb:45:08:71:56:ec:da:69:8e:
90:db:d7:8b:16:50:83:7d:94:e6:ad:47:39:bb:e5:
5a:fc:3b:d6:a3:58:78:e9:14:9c:90:19:38:36:09:
c1:ce:63:84:71:ac:e9:1a:4d:2e:da:d1:69:bd:a9:
34:63:e6:5d:21:17:43:f8:c0:fb:55:43:7b:1f:8e:
82:4f:d1:98:46:17:ac:50:d4:34:04:c3:18:ea:aa:
2e:db:48:e2:52:a0:d9:55:23:ca:3d:44:95:f7:af:
6d:2b:e0:45:dd:83:b9:7b:d0:d5:e3:24:30:35:2f:
1f:97:45:42:1d:04:da:4d:79:aa:ae:b4:0c:b0:fb:
4f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:30:27:F7:F6:FE:D3:20:35:4A:26:19:AC:F7:CB:3E:62:BB:CE:37
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/njAn9_b-0yA1SiYZrPfLPmK7zjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.91.0/24
89.23.93.0-89.23.94.255
178.254.168.0/24
178.254.178.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d0:a9:c9:ed:a0:00:30:bd:1b:a2:32:a6:54:46:75:93:86:
82:ee:ff:1f:d8:14:38:44:19:01:20:22:ef:d2:0a:a2:f3:66:
b8:d8:1f:5e:c4:01:4d:9a:eb:d0:0f:49:f0:0c:d6:51:d2:15:
01:a7:a8:54:11:d2:70:4e:67:dd:eb:65:51:9e:b6:c8:ae:4d:
e6:7f:e5:f6:58:59:2a:43:2b:87:f7:c3:56:cc:a8:9e:f7:46:
18:b0:73:c3:07:fd:a6:c1:44:62:04:61:0c:37:e9:3b:c6:80:
e7:7f:9c:40:50:e9:be:43:a0:d4:d4:6a:5b:d6:a3:79:55:06:
45:98:a6:66:c7:66:81:03:eb:bb:25:c9:57:81:28:90:ee:02:
b8:12:9c:f4:5d:c6:5e:5d:5c:dd:42:6f:53:12:91:19:44:2a:
73:dd:83:9f:78:e4:0f:74:0f:0a:f5:e3:c8:28:ea:16:7f:8c:
3f:8d:99:cc:83:d1:0c:26:8b:5d:e4:d4:71:61:7b:d1:2c:02:
8b:7f:58:8c:a6:81:72:b7:c5:3e:cc:e3:ab:cc:de:fd:cf:07:
15:4b:db:3b:f8:42:d2:63:01:10:c8:97:37:07:e7:e4:25:25:
65:83:0f:bb:a9:a1:8f:bf:6b:9e:23:6c:e6:55:3c:27:ab:dc:
4e:ee:31:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:52:45 2026 by rpki-client