Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qBly4_GqXyZaQMrisGWhhMi7mao.roa
File: qBly4_GqXyZaQMrisGWhhMi7mao.roa (raw, json)
Hash identifier: MwuRrdHjJCZe4CrJjl0tDf8Cfc/1VHfR6qBUPZYdQp4=
Subject key identifier: A8:19:72:E3:F1:AA:5F:26:5A:40:CA:E2:B0:65:A1:84:C8:BB:99:AA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8FD8768C51002AEF31DEE7FC8E66326E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qBly4_GqXyZaQMrisGWhhMi7mao.roa
Signing time: Thu 23 Jul 2026 16:39:15 +0000
ROA not before: Thu 23 Jul 2026 16:39:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26969
IP address blocks: 13.142.192.0/18 maxlen: 24
13.143.0.0/20 maxlen: 24
191.223.153.0/24 maxlen: 24
191.223.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jul 2026 20:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:d8:76:8c:51:00:2a:ef:31:de:e7:fc:8e:66:32:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 23 16:39:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a81972e3f1aa5f265a40cae2b065a184c8bb99aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:e6:11:a0:fa:3d:43:d4:b0:a8:2d:a2:0c:
55:ad:92:39:80:5d:6d:44:d7:60:c9:82:3f:69:a9:
48:e6:17:8a:b5:8d:e8:db:09:fd:c7:65:ab:95:d1:
66:ad:ad:8e:4c:1b:ca:bd:e3:81:5e:f4:6b:c4:f1:
b4:e1:1f:33:bb:7c:ba:2f:3e:21:2a:38:ae:fa:1d:
25:41:ad:52:b9:8a:de:bc:fb:bd:ec:90:fa:e4:18:
de:c9:d1:57:98:a3:6a:4e:e3:7a:a8:7d:ff:a9:5f:
2f:71:1c:0d:0c:7e:c9:fd:71:1e:40:aa:ba:ac:ee:
be:85:a4:69:73:10:20:45:3a:67:a8:33:80:ff:d2:
0d:39:b4:71:7c:42:05:6a:79:99:8f:47:c4:d1:e1:
20:03:e5:60:a2:dd:df:2a:53:73:9c:26:ad:c8:d5:
82:d2:fd:1b:ae:d4:c4:11:bd:7a:0c:3b:92:76:b9:
17:08:9e:1a:93:44:c4:d3:90:9c:19:20:fb:f9:fb:
be:33:36:5d:02:c8:d3:91:95:ec:1a:42:3c:18:ba:
42:e1:59:71:dd:d7:86:64:cc:10:17:01:9d:9f:7e:
6b:32:9f:11:1b:6f:d7:2b:1c:fb:45:a1:c5:d0:21:
5e:ea:7f:4a:9f:66:c8:bb:67:37:90:b5:b3:5e:2c:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:19:72:E3:F1:AA:5F:26:5A:40:CA:E2:B0:65:A1:84:C8:BB:99:AA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qBly4_GqXyZaQMrisGWhhMi7mao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.142.192.0-13.143.15.255
191.223.153.0/24
191.223.158.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ba:b1:a1:aa:83:da:94:73:92:7b:66:fa:2b:a8:63:e9:ed:
85:eb:8a:d4:5c:75:aa:73:65:77:27:a3:ab:48:e8:1e:2c:8e:
d2:01:5e:30:fe:a0:88:9c:09:fe:2c:eb:a7:51:45:fe:c7:52:
4f:32:72:e5:37:a8:b2:9b:73:30:33:ac:84:8e:62:75:8e:7c:
91:d8:f3:2b:5c:03:dc:8c:7a:ba:53:4a:00:d7:0c:ce:e7:e6:
74:65:ad:14:a6:c0:04:fd:d9:58:c4:a1:ef:26:9c:15:c2:e0:
55:f1:00:3d:7d:35:61:3b:8f:b9:51:b1:ee:3d:cc:ff:57:ad:
84:7b:a8:4d:fa:f3:96:04:b6:1b:60:4b:1c:3c:bd:f1:ec:eb:
43:44:3b:35:40:01:1b:a1:54:52:e4:87:d5:4b:49:dd:8f:5d:
1c:e2:75:f8:3f:a6:1b:1c:b0:3b:e7:24:96:d4:e2:da:9a:bf:
04:86:72:de:b6:c6:44:33:6d:27:39:13:00:f4:e5:e6:15:a7:
46:d9:2a:b7:ab:fb:f8:93:fa:6f:c2:9d:da:4d:ee:7f:d6:bb:
19:d3:2d:89:63:36:eb:c7:43:ff:42:63:86:0e:32:e5:08:66:
45:7b:8a:af:b0:5b:8b:d1:cd:68:de:37:c9:c7:4f:14:ee:18:
48:b8:41:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:31 2026 by rpki-client