Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/zI3qo9feQqd8v3h5INnJIfkWQqo.roa
File: zI3qo9feQqd8v3h5INnJIfkWQqo.roa (raw, json)
Hash identifier: N3VhrEedGi7cMDAL5ZR1TOilPoJbS7YVZMDzS5332aA=
Subject key identifier: CC:8D:EA:A3:D7:DE:42:A7:7C:BF:78:79:20:D9:C9:21:F9:16:42:AA
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A0C522CD04F70DB78B444C416B2002B208
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/zI3qo9feQqd8v3h5INnJIfkWQqo.roa
Signing time: Mon 21 Sep 2026 18:03:07 +0000
ROA not before: Mon 21 Sep 2026 18:03:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 83.147.41.0/24 maxlen: 24
83.147.44.0/24 maxlen: 24
83.147.45.0/24 maxlen: 24
83.147.46.0/24 maxlen: 24
83.147.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 04:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:22:cd:04:f7:0d:b7:8b:44:4c:41:6b:20:02:b2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 21 18:03:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc8deaa3d7de42a77cbf787920d9c921f91642aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:59:04:d6:62:9b:13:aa:2d:1f:3c:0d:18:
f4:bc:c7:30:dd:23:7c:f8:cc:ee:c8:ef:a9:b1:78:
eb:fa:a7:cc:58:64:33:c4:83:46:52:85:a7:bc:12:
31:21:e6:ac:cd:16:81:b2:d5:f9:63:28:9f:3c:57:
ef:04:cc:2f:9d:88:c4:a3:81:3a:3d:fe:76:d8:70:
e2:e8:66:3d:74:27:4b:7d:df:30:63:8b:a3:d3:2d:
46:cc:e4:f0:37:82:1f:8a:ee:c9:9b:f7:1b:5a:ba:
56:28:cd:ff:4c:5e:78:dc:92:2f:1c:97:7e:20:64:
2e:2b:df:eb:d7:f1:1c:88:46:f0:4b:a0:43:00:63:
e2:aa:2e:62:09:73:3a:69:e6:9c:1a:46:d8:54:0f:
a4:aa:3c:85:9d:a2:c1:96:6a:c7:64:45:73:fe:df:
cb:f5:53:02:80:82:96:de:f2:42:96:11:55:e1:85:
e1:3a:7f:8e:10:6d:ac:d8:b8:07:f4:2b:b8:d2:ea:
1f:01:d2:e2:d4:f9:08:b8:fb:56:85:b6:93:65:b6:
00:cf:a5:72:2f:b4:e7:e7:86:37:00:fe:26:af:ec:
d7:16:06:c5:a4:af:da:02:7b:f1:c6:bf:37:54:bb:
07:b2:1c:f6:21:79:bc:f8:1e:14:dd:44:4c:37:c6:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8D:EA:A3:D7:DE:42:A7:7C:BF:78:79:20:D9:C9:21:F9:16:42:AA
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/zI3qo9feQqd8v3h5INnJIfkWQqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.41.0/24
83.147.44.0/22
Signature Algorithm: sha256WithRSAEncryption
17:80:9a:56:32:bd:cf:6f:6c:b5:a2:87:fc:66:92:12:d4:d7:
b8:c4:c0:dc:cf:5f:4a:e2:3f:b2:8d:ee:76:cb:13:0e:f5:44:
76:aa:3a:0f:ff:2a:5f:66:b0:55:b5:c2:cf:b7:05:20:f4:d4:
8b:61:30:9f:3e:35:93:30:34:8c:bb:b0:fa:e0:99:5b:cc:84:
e9:33:a1:ad:23:78:92:37:e7:8e:e8:ef:92:04:96:32:b8:b1:
76:08:b1:6b:cf:4e:85:3b:82:57:a3:3b:06:c1:78:ad:12:c8:
19:ae:6a:d1:8f:95:35:29:c3:9d:a2:89:e4:59:b7:43:da:cc:
f6:62:61:12:5f:0b:3b:43:ac:4b:35:6b:bf:fb:f4:8b:d7:44:
e4:a8:16:fc:76:fd:fd:df:97:f9:67:00:40:99:05:a4:54:58:
10:ed:c9:6f:a2:a2:d3:14:e0:25:f4:50:5b:00:2a:80:b2:70:
00:df:a3:8c:72:fc:41:e5:1d:46:98:0c:10:a6:c3:7a:cf:bd:
e9:e6:3b:09:bb:bc:bc:15:65:fc:0e:e9:21:51:d0:c9:bd:3f:
38:46:29:6f:b2:19:56:07:5c:ad:b6:a4:0b:14:14:dc:c0:ea:
7c:bf:82:f2:ca:73:58:05:d7:31:7a:7f:92:06:64:e4:e2:33:
1c:a0:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:04:36 2026 by rpki-client