Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/AO28er3cyI1r7YIS6P1Y5n1232E.roa
File: AO28er3cyI1r7YIS6P1Y5n1232E.roa (raw, json)
Hash identifier: 1bhGTI7w+XNTXeluGbGvw3sI2l9VzKYX0nDffS707hw=
Subject key identifier: 00:ED:BC:7A:BD:DC:C8:8D:6B:ED:82:12:E8:FD:58:E6:7D:76:DF:61
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 01A0D200DFD4D787E2215D22B3C4CEFEF2EF
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/AO28er3cyI1r7YIS6P1Y5n1232E.roa
Signing time: Thu 24 Sep 2026 06:01:07 +0000
ROA not before: Thu 24 Sep 2026 06:01:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 394192
IP address blocks: 185.31.19.0/24 maxlen: 24
2a04:4e41:24::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 26 Sep 2026 00:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:df:d4:d7:87:e2:21:5d:22:b3:c4:ce:fe:f2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Sep 24 06:01:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00edbc7abddcc88d6bed8212e8fd58e67d76df61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a9:1f:9c:9c:2f:4c:d9:9d:91:f0:e3:79:be:
77:10:09:1f:2b:d2:47:84:20:b2:ce:cc:5d:79:f5:
02:6e:02:64:b6:cc:e4:38:5c:01:d1:24:01:80:1f:
f0:68:cc:b3:56:ed:b0:e5:a5:b3:ae:d6:c7:58:04:
22:2d:ac:e2:b0:5e:5e:d5:96:27:04:75:74:80:ce:
eb:f2:7d:9d:a3:02:c4:f4:ff:c1:76:d0:7b:37:c5:
97:c0:54:11:3b:b9:a1:2c:30:5c:a6:41:31:8a:dd:
af:f7:d2:90:20:b9:3b:48:f5:57:37:c5:15:e3:ac:
01:25:6d:ab:0d:7d:76:7f:88:94:39:3d:55:16:f8:
60:f0:98:37:6a:f7:2c:84:50:0b:07:a1:60:40:1c:
ba:50:45:b4:87:d6:97:4d:8e:c8:d1:ca:2e:f3:8f:
19:2b:26:ae:95:35:7a:3f:5a:8c:b6:a9:32:f2:93:
5e:91:c7:e4:22:a3:72:61:ef:fe:35:f7:de:c5:23:
d4:a6:b3:0e:52:6a:3b:c8:bd:b4:d4:ce:8e:43:20:
7f:35:35:91:af:03:d4:b2:d5:a1:dc:59:bb:6b:c9:
91:d6:0f:a8:54:10:6f:a9:76:98:1b:2f:75:61:4d:
45:04:08:bf:bf:0f:be:44:e0:c0:13:7a:69:98:43:
04:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:ED:BC:7A:BD:DC:C8:8D:6B:ED:82:12:E8:FD:58:E6:7D:76:DF:61
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/AO28er3cyI1r7YIS6P1Y5n1232E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.19.0/24
IPv6:
2a04:4e41:24::/48
Signature Algorithm: sha256WithRSAEncryption
1a:5c:0e:f6:89:db:24:c3:dc:5a:fb:d4:8a:42:5b:3c:54:34:
1a:cd:6b:3f:0a:f5:f2:2e:6f:f5:85:33:fa:41:08:8c:25:bf:
eb:3f:d5:6a:57:3d:ec:b2:d4:a0:92:7c:57:5f:2e:89:db:fa:
14:e4:cd:8c:3b:91:da:04:3a:ae:a0:99:98:6d:be:2c:6c:35:
d2:00:24:eb:c4:62:88:9a:df:5e:ec:cc:f7:2b:14:3e:74:92:
3b:06:e0:0b:94:a9:72:f9:fc:ba:6a:7b:94:b3:7c:4c:96:65:
c8:ad:18:47:a0:cb:a1:f3:40:73:2d:37:3a:22:59:4e:72:2e:
dd:76:fa:b7:a1:97:b0:9e:e7:03:36:db:fc:e7:c3:05:86:51:
71:d2:bc:3e:58:5d:5a:0c:b0:78:30:81:41:7f:22:40:ef:2c:
c6:99:f1:40:07:00:19:21:58:51:de:85:5c:c0:62:01:5b:6b:
e9:93:8b:c1:29:d0:6c:96:3e:8b:64:e6:d4:6a:b1:33:24:20:
8f:f6:6a:e4:85:18:8a:64:19:30:48:fd:93:df:a3:50:a6:c4:
15:10:06:98:0b:da:c8:cd:bc:50:9b:c8:31:6c:c9:f5:65:68:
22:ed:04:e6:dd:f6:cb:56:56:f3:13:a1:6a:39:f3:08:cf:9a:
a7:8c:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:29:11 2026 by rpki-client