Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nbfOrIj8QUioLpKOhsrC0AX-igQ.roa
File: nbfOrIj8QUioLpKOhsrC0AX-igQ.roa (raw, json)
Hash identifier: iqXyjOjMQ05UQwczu8aZ7LYtClfgd1L2PXXNINiqb5k=
Subject key identifier: 9D:B7:CE:AC:88:FC:41:48:A8:2E:92:8E:86:CA:C2:D0:05:FE:8A:04
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019E1DB75F6F546C65B08AFDD297E907DBF2
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nbfOrIj8QUioLpKOhsrC0AX-igQ.roa
Signing time: Tue 12 May 2026 19:43:37 +0000
ROA not before: Tue 12 May 2026 19:43:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 194.231.134.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 May 2026 22:44:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:b7:5f:6f:54:6c:65:b0:8a:fd:d2:97:e9:07:db:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 12 19:43:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9db7ceac88fc4148a82e928e86cac2d005fe8a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:c3:0e:dd:d9:a8:58:ba:f9:ba:7c:af:fe:
25:43:25:e4:75:a5:c2:9f:7a:18:e2:73:f6:f0:e7:
b9:84:32:06:32:ce:b5:46:c1:e9:2a:68:1b:60:e7:
43:df:8a:19:e9:4a:bd:c0:35:6b:72:2b:19:0e:aa:
27:42:58:0b:24:6e:f9:be:47:ea:0f:c8:32:11:08:
b0:8e:0c:1f:d9:72:7e:0f:cd:9c:63:98:83:ac:7e:
9f:a5:3c:5d:65:24:23:11:7c:bd:4e:85:9a:f1:6f:
f1:c9:9f:61:6d:b3:e1:01:fe:8f:f0:24:be:6c:cd:
da:ed:f6:a7:a7:3b:ba:38:db:8c:1b:91:8b:9e:16:
08:32:9e:65:0c:ba:09:da:2e:b2:2b:ad:be:c1:1f:
9f:02:06:b9:63:89:5c:d0:b0:cf:fc:4c:b4:b7:eb:
00:4b:7e:0b:a4:27:c3:b8:90:d7:d2:93:04:21:de:
cc:3d:9c:f2:8b:67:6b:66:ed:4a:e5:c7:33:07:ba:
16:55:76:01:aa:dd:0b:ec:56:31:ed:3e:70:07:50:
0c:31:5a:30:7d:b0:e4:cb:75:87:c5:ce:3e:c2:6f:
2b:95:d2:b1:a9:e1:3e:a3:58:e7:a7:90:d2:d5:3d:
56:19:03:f6:a1:c5:19:a3:5a:98:f1:5b:cb:3e:b4:
7a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B7:CE:AC:88:FC:41:48:A8:2E:92:8E:86:CA:C2:D0:05:FE:8A:04
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/nbfOrIj8QUioLpKOhsrC0AX-igQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.134.0/24
194.231.157.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b8:9f:a7:a1:da:77:82:50:5d:7c:19:46:c4:92:4f:cd:4e:
24:56:72:d9:eb:dd:81:0e:8a:16:e5:8f:9d:d2:ed:38:91:ce:
0e:59:11:c6:4b:16:b0:71:5f:71:e6:06:e8:e6:db:9d:83:da:
32:00:e1:11:21:dc:eb:dd:35:f8:00:4d:e8:bb:24:74:25:ef:
09:33:7c:4b:f7:be:36:1c:bb:6e:bf:72:c8:50:e9:a3:4c:e1:
8e:b4:e1:aa:1a:79:97:de:2b:35:d7:6e:de:5b:ac:9e:da:77:
eb:b4:82:4f:47:82:06:73:af:22:ae:62:d3:c7:56:f9:1e:9a:
bd:7a:9c:b2:3b:47:b5:ff:ae:96:2c:7a:90:de:99:96:43:38:
e4:a1:77:88:50:9f:68:23:5e:8a:d7:2f:61:3e:dc:ef:13:e4:
49:f4:6c:95:a8:99:ad:23:cf:5b:3c:6b:4a:b3:af:66:5d:83:
c9:0a:83:76:cf:eb:c5:c9:b4:23:65:d9:40:b4:b0:b5:c1:de:
53:9c:fd:14:ad:7b:ca:0f:bd:0f:67:de:00:1b:bf:ad:f0:8e:
a5:25:e9:ee:34:03:ef:1a:72:37:0a:80:fc:13:e6:31:26:14:
29:1c:6c:65:77:5b:6c:ef:dd:9a:30:93:28:24:6e:d3:06:0b:
bc:67:ea:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:46 2026 by rpki-client