Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/u8BiBSFoaT1cWVSBiFiY61DSgFU.roa
File: u8BiBSFoaT1cWVSBiFiY61DSgFU.roa (raw, json)
Hash identifier: t3QMZMuqXjcHTharDBq3Sdk6wrtaJLZChODT2UECJpY=
Subject key identifier: BB:C0:62:05:21:68:69:3D:5C:59:54:81:88:58:98:EB:50:D2:80:55
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019D242BBC1C1B40269985BACA81EC63575F
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/u8BiBSFoaT1cWVSBiFiY61DSgFU.roa
Signing time: Wed 25 Mar 2026 08:45:39 +0000
ROA not before: Wed 25 Mar 2026 08:45:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49635
IP address blocks: 206.203.28.0/24 maxlen: 24
206.203.29.0/24 maxlen: 24
206.203.30.0/24 maxlen: 24
206.203.31.0/24 maxlen: 24
206.203.32.0/24 maxlen: 24
206.203.33.0/24 maxlen: 24
206.203.34.0/24 maxlen: 24
206.203.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Mar 2026 08:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:2b:bc:1c:1b:40:26:99:85:ba:ca:81:ec:63:57:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 25 08:45:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbc062052168693d5c595481885898eb50d28055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:07:e2:ec:3e:07:4b:2e:6f:e2:10:ee:47:
ff:dd:18:bc:47:2e:a0:90:c4:c3:86:ce:8a:d8:30:
71:44:0d:87:5a:4b:fc:4f:69:b7:d3:d6:1e:9a:8e:
d3:53:a7:14:55:fa:27:a1:73:d0:cb:03:6a:e5:04:
77:4d:9a:09:2c:5d:44:60:86:9e:04:09:39:23:a2:
d4:0b:85:0e:92:03:69:90:72:c3:b1:38:a5:11:6d:
5b:b1:f3:e9:f0:b8:69:6e:1e:9f:5b:9d:0f:83:23:
72:77:e4:26:10:a6:80:0a:6f:70:68:f1:9e:63:c5:
fe:eb:51:41:da:6d:5b:a4:92:d5:19:98:ba:57:c1:
fe:52:ac:4d:32:3d:09:3c:44:d6:01:3d:52:dd:fd:
c0:16:48:0a:0e:bb:d2:ca:0b:c8:3b:8a:de:e6:5a:
fb:70:dd:53:dc:c2:cd:69:f9:3d:da:a5:86:03:42:
db:b4:cf:ce:de:e9:1e:01:4f:10:d8:7c:f8:6b:68:
db:18:18:44:12:92:54:52:b4:f7:87:46:89:3f:48:
0b:dc:a0:67:72:24:d0:cf:95:ca:c1:cd:93:e6:21:
0a:ac:b9:f5:85:9e:47:f9:61:e6:a8:33:ad:cc:0c:
eb:5a:27:d3:07:f2:96:62:ae:3b:59:25:6a:a2:06:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C0:62:05:21:68:69:3D:5C:59:54:81:88:58:98:EB:50:D2:80:55
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/u8BiBSFoaT1cWVSBiFiY61DSgFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.203.28.0-206.203.35.255
Signature Algorithm: sha256WithRSAEncryption
3e:4e:f6:af:89:04:52:40:07:a4:e3:6b:21:17:32:82:f5:04:
96:f2:00:8f:80:49:b2:9d:9f:12:d6:be:f8:58:d4:43:c5:d0:
3d:48:4e:64:00:c2:3d:ec:62:84:3a:6d:be:05:df:1c:80:68:
44:3a:e5:27:9e:c9:47:2a:e6:d2:8e:69:40:57:a8:f0:4d:9d:
c5:5e:8d:a5:5e:2a:b6:21:6b:a3:9c:7b:4e:03:15:4c:e8:74:
cc:e8:a4:01:e9:68:a6:d5:46:43:4c:ee:4e:cd:35:41:9c:9a:
bc:b2:af:bc:e1:9c:a4:83:40:e4:a9:6f:5a:75:e0:4d:64:04:
9b:4b:9c:f7:73:03:46:5b:ba:fd:81:3f:34:61:aa:a8:1b:54:
85:18:0a:7d:7d:53:fb:be:ff:8c:27:fe:f1:6c:bf:48:ca:c8:
df:df:f5:8c:2f:86:dc:7a:1a:f3:31:2a:ad:18:3d:97:74:2b:
7c:7e:38:99:c5:4d:7e:f3:6c:6d:6c:89:65:f9:61:06:bc:9c:
71:4a:15:4b:bb:ba:1c:1e:72:c1:7e:89:23:a0:de:92:ea:a5:
07:71:a9:74:ee:5c:ed:ac:d1:ab:5b:d6:76:1e:68:c6:3f:55:
89:c3:54:36:79:8f:a1:d7:9c:b7:8b:97:05:73:fa:41:22:9c:
5c:bc:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:35 2026 by rpki-client