Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9-lgQSPm8TAgjuufLAECC-wbPjk.roa
File: 9-lgQSPm8TAgjuufLAECC-wbPjk.roa (raw, json)
Hash identifier: 5qnc43+XUEiODngAfHzDO0kXN5U5drOPZPmdWn/t5qs=
Subject key identifier: F7:E9:60:41:23:E6:F1:30:20:8E:EB:9F:2C:01:02:0B:EC:1B:3E:39
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0A36433ACD7976ED9A1150E4BD609BF20
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9-lgQSPm8TAgjuufLAECC-wbPjk.roa
Signing time: Tue 15 Sep 2026 04:47:28 +0000
ROA not before: Tue 15 Sep 2026 04:47:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 5.175.162.0/24 maxlen: 24
5.175.168.0/24 maxlen: 24
5.175.195.0/24 maxlen: 24
5.230.153.0/24 maxlen: 24
5.231.207.0/24 maxlen: 24
5.231.255.0/24 maxlen: 24
85.93.21.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 02:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:64:33:ac:d7:97:6e:d9:a1:15:0e:4b:d6:09:bf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 15 04:47:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7e9604123e6f130208eeb9f2c01020bec1b3e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:da:ac:3d:eb:5a:ce:9d:c6:37:0c:74:bf:
5e:d0:a9:e6:92:76:9a:a8:87:fd:b5:ed:8f:0e:3c:
f1:af:0a:84:f1:de:a8:83:a2:f4:c4:e8:b6:87:1f:
b2:99:e9:9e:ee:bd:f8:1d:00:6b:4d:09:45:82:17:
6c:48:4f:e0:46:26:78:43:20:cd:67:70:7b:6a:bf:
90:5e:f7:c1:d9:61:71:30:a0:f2:a5:e9:4e:85:dd:
cf:d1:37:28:ea:02:a0:b5:7c:ca:ab:12:5b:e6:77:
e0:d7:d2:74:ea:d3:25:81:6c:df:ec:38:40:b1:8c:
77:8d:3d:fd:fb:97:14:fa:cd:5a:4a:e3:f7:9b:a3:
c0:7b:ec:0d:1c:13:c0:04:d2:ae:0e:7b:b5:0e:b4:
da:35:01:d8:60:f7:21:91:97:2a:13:68:e2:13:68:
a7:e5:e3:f2:7b:f1:fe:a1:f4:bc:5d:de:0e:13:16:
17:d6:fc:6f:2e:9f:8b:60:2e:16:99:8e:cf:25:37:
ec:db:9f:5c:8f:59:65:f2:fa:aa:ab:fa:82:62:41:
e5:93:41:21:a9:b3:a4:f5:34:96:a1:a1:ca:f7:63:
cf:ea:6a:ac:fb:50:27:88:67:c5:50:c8:fb:17:9f:
1a:e5:1f:6e:cf:3a:34:b0:7c:eb:c9:f2:25:01:f8:
e9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E9:60:41:23:E6:F1:30:20:8E:EB:9F:2C:01:02:0B:EC:1B:3E:39
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9-lgQSPm8TAgjuufLAECC-wbPjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.162.0/24
5.175.168.0/24
5.175.195.0/24
5.230.153.0/24
5.231.207.0/24
5.231.255.0/24
85.93.21.0/24
89.106.95.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a9:e4:a8:c5:fc:a8:62:2f:55:18:a4:07:3f:83:43:1b:17:
e7:a0:e7:07:bc:49:b7:b9:64:55:41:c3:e5:b0:19:af:9d:b5:
c1:dd:71:a3:80:60:55:7c:d2:0d:36:6d:da:a6:4d:f7:b5:b3:
c9:08:bf:7e:bd:e8:2e:50:57:98:b4:a8:94:d1:8a:bc:62:3f:
08:8c:59:f7:45:44:f2:7e:f8:16:ee:59:49:b7:af:cf:e6:e0:
46:11:42:ac:0e:68:7c:d5:fb:34:f5:67:f7:d2:81:e6:16:b5:
ab:99:5d:ef:ee:4d:dd:bd:bc:f2:87:d7:cc:b6:a5:c4:00:7c:
5b:77:78:74:5c:ae:73:3b:79:91:ae:fe:13:ff:47:47:26:75:
09:75:0b:c2:b0:fc:90:4c:ff:46:47:a2:15:23:1c:9e:c9:e4:
64:80:80:bc:03:34:25:6b:74:9c:3a:8c:4c:64:41:ee:bb:8b:
00:45:f8:d4:ca:aa:f8:b2:25:c6:47:9a:3d:8c:22:bc:d7:f3:
2d:ea:90:10:23:81:af:48:08:b3:ac:87:c7:84:90:c6:ea:c5:
08:4e:2d:83:83:d3:f0:c3:01:f5:7a:f1:01:2c:94:78:0b:41:
3f:58:71:1b:3f:6e:30:4b:63:0e:80:fa:17:ee:ea:02:01:c3:
7e:5b:86:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:59:19 2026 by rpki-client