Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1WrOHQGzk8M7cF2tvVv8htAYG74.roa
File: 1WrOHQGzk8M7cF2tvVv8htAYG74.roa (raw, json)
Hash identifier: 2Zz29aUjnYJtt9/GFrg8cBU/u5ofj3sdpOVmBa2ihyU=
Subject key identifier: D5:6A:CE:1D:01:B3:93:C3:3B:70:5D:AD:BD:5B:FC:86:D0:18:1B:BE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CA8E63EF58CC4DA0A14087426518442B9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1WrOHQGzk8M7cF2tvVv8htAYG74.roa
Signing time: Sun 01 Mar 2026 10:16:27 +0000
ROA not before: Sun 01 Mar 2026 10:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213958
IP address blocks: 5.175.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Mar 2026 17:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:e6:3e:f5:8c:c4:da:0a:14:08:74:26:51:84:42:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 1 10:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d56ace1d01b393c33b705dadbd5bfc86d0181bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:c6:c5:ef:00:e5:68:81:8e:dc:54:ae:69:
9c:33:78:25:ee:7f:55:7d:b0:2e:f8:58:03:70:42:
9c:f0:b9:2d:40:97:fe:95:3f:e6:4f:26:69:13:ea:
37:bb:19:91:3d:3c:b1:b4:e6:24:98:84:f9:b3:46:
f3:2a:a4:8a:a9:2d:cd:11:13:2e:ab:48:37:66:69:
f1:16:7a:36:87:29:42:d3:24:c8:c7:63:93:f7:bd:
cf:b8:bb:44:6d:27:e7:86:0f:b9:01:3a:1c:3b:e1:
15:95:08:96:29:b8:ca:f0:83:1d:28:45:a7:86:9f:
74:20:2d:8b:ec:2c:08:b1:32:bf:11:21:85:32:97:
68:64:ce:0f:19:d8:95:05:83:e3:22:13:41:e5:97:
97:ec:29:02:ed:5c:66:7a:f9:f0:22:24:93:b6:76:
59:c7:74:c5:a1:ed:f4:6c:26:43:cd:f2:c1:75:8c:
97:89:fc:ab:3d:1f:a1:12:81:89:2c:31:22:ff:10:
69:f2:67:17:51:6c:2f:e3:ea:89:cb:16:21:4a:d2:
d8:59:d8:72:84:19:5e:f6:17:72:5e:24:97:50:89:
67:b0:5b:bb:bb:1f:47:cb:cc:11:e9:16:09:09:2e:
8c:2d:0a:21:54:bb:d6:23:d0:9b:93:c7:97:39:b1:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6A:CE:1D:01:B3:93:C3:3B:70:5D:AD:BD:5B:FC:86:D0:18:1B:BE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1WrOHQGzk8M7cF2tvVv8htAYG74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.172.0/24
Signature Algorithm: sha256WithRSAEncryption
04:12:92:d1:7c:1f:a3:f0:91:2a:cb:16:f4:21:71:c1:5d:5b:
b8:2c:d9:1d:f6:4c:19:80:e6:c8:cb:cd:2c:fc:c1:6d:4e:f2:
f1:c8:15:9c:97:9f:23:66:0e:c4:e1:64:90:93:c2:15:b8:e6:
7e:e0:f6:a3:d0:68:7c:38:4f:c5:26:07:81:67:18:74:9b:60:
84:6f:2b:f9:c4:e4:2f:35:b4:b1:7c:78:ad:ac:43:84:11:65:
46:9f:52:10:ba:92:bf:a3:bc:6c:24:7b:32:7c:00:f0:1c:52:
a2:98:47:42:ef:06:a6:e6:5e:1b:6f:dc:38:e5:1f:1e:a8:92:
71:59:cd:0c:57:ca:46:49:c9:b8:27:8b:ca:c6:5f:be:6f:93:
91:74:5c:54:f9:eb:d9:60:c7:fb:1b:63:ca:ce:96:92:c9:c4:
2e:08:1e:c5:72:a1:97:6c:4a:31:c3:61:1d:c3:b6:b5:71:a3:
9e:be:a7:f7:10:87:e5:3e:a4:da:fb:1a:50:83:f7:8d:2b:4f:
f1:64:14:53:5e:ba:71:fe:74:01:32:38:dd:cc:3a:9b:26:39:
89:32:88:b6:06:59:86:cf:7b:02:c5:b4:43:17:13:5c:54:8c:
5b:61:65:cc:15:e3:37:c5:ac:be:08:18:3f:3b:d5:cc:ca:ed:
8c:70:02:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:32:44 2026 by rpki-client