Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/uB1Z96gGfmYf44MMKodvAMj4gLY.roa
File: uB1Z96gGfmYf44MMKodvAMj4gLY.roa (raw, json)
Hash identifier: psfDdtIpdrC25aKjG3ZiuX3Syn8B1cx3F6wF9mnQKDA=
Subject key identifier: B8:1D:59:F7:A8:06:7E:66:1F:E3:83:0C:2A:87:6F:00:C8:F8:80:B6
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A0D31AA7F2EDB695D8D4F190619F88A7AE
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/uB1Z96gGfmYf44MMKodvAMj4gLY.roa
Signing time: Thu 24 Sep 2026 11:08:54 +0000
ROA not before: Thu 24 Sep 2026 11:08:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.23.91.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
89.23.94.0/24 maxlen: 24
178.254.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 07:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:1a:a7:f2:ed:b6:95:d8:d4:f1:90:61:9f:88:a7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Sep 24 11:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b81d59f7a8067e661fe3830c2a876f00c8f880b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:80:4b:4f:80:fa:ce:9e:b6:f7:41:6f:d0:
1d:ed:96:3c:6a:65:43:ea:df:42:51:eb:bc:e6:2c:
9e:7f:a8:aa:21:47:84:0c:ba:e6:2f:f7:7b:03:f5:
f2:b6:5c:93:29:b8:03:c9:ab:f3:06:e7:fa:2c:79:
46:ef:41:b9:8e:2e:8d:bb:73:be:85:12:ae:14:ee:
13:a0:1d:8a:e0:8f:c7:be:79:90:73:42:b7:88:2f:
26:b3:5a:65:cc:2b:8a:bb:1e:f9:81:57:c6:8a:78:
6c:d1:1c:a3:99:80:f6:4b:6c:97:af:27:de:ea:7f:
c5:0e:e0:24:2b:83:37:d8:74:01:d3:db:99:ab:23:
14:69:aa:ea:b4:bf:52:a2:a0:33:d9:00:00:87:01:
a2:96:9c:0f:8e:73:a2:aa:c5:f6:68:c3:94:14:e1:
12:d4:ee:03:77:71:22:6b:f2:fe:c5:25:3c:90:f0:
51:ca:27:c6:7c:a5:3b:54:cd:b5:dd:c4:d9:5c:27:
6b:73:0a:d5:c4:5f:a2:e4:55:44:78:22:94:37:a5:
8e:26:04:07:6b:70:ff:8a:b1:29:f3:4e:4b:85:9b:
dd:1d:80:b5:d4:9e:e8:6e:78:0c:be:09:fb:91:c4:
45:72:94:e8:4e:5a:11:c1:43:00:c2:cf:c8:96:b5:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1D:59:F7:A8:06:7E:66:1F:E3:83:0C:2A:87:6F:00:C8:F8:80:B6
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/uB1Z96gGfmYf44MMKodvAMj4gLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.91.0/24
89.23.93.0-89.23.94.255
178.254.178.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1e:7b:3f:cd:03:a4:5c:68:92:1f:0e:45:f2:de:c6:12:33:
e3:35:bd:8b:dd:27:2c:5f:06:fc:0a:df:ef:1d:2c:c3:32:f2:
c8:96:6a:17:13:5d:e5:ac:83:67:cd:a8:4f:3c:cb:70:61:ae:
c5:ff:a3:0e:83:87:8d:51:5d:cc:89:1a:49:62:d7:94:99:15:
84:5c:9a:66:3c:ad:bb:e4:7c:49:cf:4c:ed:4d:32:bc:00:67:
3e:24:79:43:99:0d:d2:cb:ab:ee:aa:a0:81:66:5f:8d:fc:45:
a1:7c:7c:e2:6a:ad:2e:da:7e:40:7a:3e:db:55:58:dc:0f:e7:
52:c5:b7:91:97:79:b2:79:f5:ed:e2:f9:cf:f7:24:6f:9c:67:
b8:28:d8:8f:05:e1:19:73:59:27:be:4e:7f:b8:2b:3f:8a:c7:
28:ae:36:a7:a4:b2:c8:00:3d:6e:a7:a0:be:0f:58:fb:ad:db:
10:c2:7a:b1:28:63:f7:f7:e9:ff:18:c3:4c:04:9c:b8:33:f3:
ae:74:f4:44:30:88:e2:13:63:92:af:73:e7:1a:0a:ce:64:b6:
ae:7e:54:18:bd:d4:63:5d:52:76:33:86:c2:f4:e1:6d:06:90:
be:8b:a8:42:6a:1a:75:6f:10:1f:23:35:6c:f4:cf:9f:29:ae:
98:f2:a4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:02:15 2026 by rpki-client