Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/QAGYZrlK2DCAvjc8lD-9Pg7UOAc.roa
File: QAGYZrlK2DCAvjc8lD-9Pg7UOAc.roa (raw, json)
Hash identifier: JeU+QuT/nOHVuNA6auqnNJd17XvVLjZcPnm3vkYSKdA=
Subject key identifier: 40:01:98:66:B9:4A:D8:30:80:BE:37:3C:94:3F:BD:3E:0E:D4:38:07
Certificate issuer: /CN=69bc02035045e832a0e1e5acf8a1f2bee634e6bc
Certificate serial: 01A0D7888B23E7E3F9D5C1E591C021938172
Authority key identifier: 69:BC:02:03:50:45:E8:32:A0:E1:E5:AC:F8:A1:F2:BE:E6:34:E6:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abwCA1BF6DKg4eWs-KHyvuY05rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/QAGYZrlK2DCAvjc8lD-9Pg7UOAc.roa
Signing time: Fri 25 Sep 2026 07:47:24 +0000
ROA not before: Fri 25 Sep 2026 07:47:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218859
IP address blocks: 142.228.32.0/23 maxlen: 23
2a0d:4ec0::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 25 Sep 2026 09:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:88:8b:23:e7:e3:f9:d5:c1:e5:91:c0:21:93:81:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69bc02035045e832a0e1e5acf8a1f2bee634e6bc
Validity
Not Before: Sep 25 07:47:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40019866b94ad83080be373c943fbd3e0ed43807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:1e:d5:33:34:80:f5:cd:78:7e:24:13:c3:
0d:ba:82:7b:15:7d:c4:59:57:86:cd:43:06:5f:69:
05:a0:91:44:32:aa:d6:88:c1:8d:3e:14:fc:bc:70:
23:eb:b6:0a:88:26:f0:92:4e:90:aa:b4:d5:dd:7a:
1d:d6:02:16:8d:c0:63:ee:6f:2f:c0:5c:b5:27:5f:
84:4a:b5:42:8b:2e:72:c5:7e:af:b1:e2:38:01:c5:
ba:ef:6a:0b:66:e1:7e:60:05:31:d6:32:c9:e7:50:
95:46:9e:b5:37:6e:3a:4c:1d:9f:c3:46:5c:cf:4d:
3d:2f:33:2a:3f:00:cc:47:87:6c:6f:44:a7:a5:24:
91:7a:fd:a0:32:24:13:36:af:8b:9f:da:3f:42:95:
e3:2d:99:60:2a:fd:c4:9e:b8:34:30:97:57:5e:89:
de:73:58:3c:06:e5:53:43:ff:6e:16:36:af:23:b8:
b3:52:6a:28:5a:0a:ae:b6:98:60:7c:61:ac:1e:02:
a1:dc:2c:48:79:a4:f5:33:04:6f:aa:d4:e1:0a:cd:
44:06:e0:06:2f:d0:d0:fe:65:20:5d:a4:2c:17:8b:
b4:83:44:23:fc:e1:24:cb:e1:5e:22:77:a3:31:b5:
95:46:35:12:35:9e:35:13:84:3f:fb:e3:33:12:f4:
fe:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:01:98:66:B9:4A:D8:30:80:BE:37:3C:94:3F:BD:3E:0E:D4:38:07
X509v3 Authority Key Identifier:
keyid:69:BC:02:03:50:45:E8:32:A0:E1:E5:AC:F8:A1:F2:BE:E6:34:E6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abwCA1BF6DKg4eWs-KHyvuY05rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/QAGYZrlK2DCAvjc8lD-9Pg7UOAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.32.0/23
IPv6:
2a0d:4ec0::/32
Signature Algorithm: sha256WithRSAEncryption
14:bc:60:ea:e5:7f:0c:6c:26:33:2b:5e:17:e3:a6:e2:a9:03:
e7:d2:d5:3a:70:35:9f:d0:3c:a5:f6:74:0b:74:32:fe:fe:e4:
3f:44:b6:00:b2:1e:9f:96:b6:86:a0:8f:79:94:0e:78:33:09:
79:7e:2b:b1:83:c6:76:55:3a:d9:c6:76:38:72:3a:a2:4b:ac:
8f:11:2b:f8:29:d9:b0:a5:14:10:9b:32:96:df:d8:79:fb:d9:
33:1d:a1:80:6d:b5:2c:e7:43:e1:9f:6e:2c:93:4f:6b:82:10:
5a:63:57:96:fc:fa:24:c4:95:8a:96:dd:69:64:c4:7e:04:54:
44:08:44:68:93:5a:3d:c5:1f:08:db:06:65:6d:7e:86:2c:e2:
88:33:4b:aa:17:d7:00:67:3d:07:42:02:d4:92:53:87:41:33:
10:63:1e:73:92:28:59:25:e6:05:8b:ea:ee:40:da:20:b0:a5:
f8:7e:55:a9:6b:64:84:26:c4:06:9c:3a:85:fd:32:91:5b:51:
71:91:82:09:5f:d0:27:8c:8a:5e:df:7b:99:85:45:4a:1c:f3:
c3:37:a4:6f:1a:a1:2e:ad:23:59:b6:45:20:3b:9e:4c:dc:13:
2d:ee:eb:d8:ce:a3:59:86:c5:2e:d6:bc:66:00:78:0e:99:6f:
92:dd:d7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:36:32 2026 by rpki-client