Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gn2hTe1JfwNjgEYbQeSlXCNl838.roa
File: gn2hTe1JfwNjgEYbQeSlXCNl838.roa (raw, json)
Hash identifier: y586OgerElx/DabLlMZDqF6fsIKE+7PBl7UReLBG0Kk=
Subject key identifier: 82:7D:A1:4D:ED:49:7F:03:63:80:46:1B:41:E4:A5:5C:23:65:F3:7F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A18C3C77AC6D3EF0B35901CCE574350083
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gn2hTe1JfwNjgEYbQeSlXCNl838.roa
Signing time: Fri 30 Oct 2026 09:55:35 +0000
ROA not before: Fri 30 Oct 2026 09:55:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 5.230.162.0/24 maxlen: 24
5.230.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Nov 2026 02:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:3c:77:ac:6d:3e:f0:b3:59:01:cc:e5:74:35:00:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 30 09:55:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=827da14ded497f036380461b41e4a55c2365f37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:86:5e:fd:9c:9e:4b:1d:f2:20:48:a5:e7:
db:b5:fe:3a:0d:c2:24:8a:d8:64:70:c3:27:07:1a:
ab:32:92:6c:8a:81:36:7a:ce:de:e4:b1:f8:a4:30:
0f:15:85:96:b2:8a:55:1d:d7:03:6f:f2:e5:0d:dc:
e6:83:ed:1f:77:f9:1a:29:66:bb:81:69:02:fa:6f:
6f:bf:1c:94:e9:5c:7d:1d:8e:5a:30:30:2f:97:7b:
5c:de:69:be:1d:6c:4b:6d:56:66:3d:0e:36:90:7b:
31:5f:1d:21:83:c2:f9:a1:db:fd:f4:60:a6:e7:1c:
c1:ea:08:43:03:20:bd:4d:8a:75:e1:14:b3:1f:8d:
fd:f9:d0:bc:8b:a4:a8:94:e1:19:29:5f:e5:54:aa:
4c:33:a1:3d:a9:4e:70:0f:30:7a:0e:92:52:37:73:
f5:f8:00:e4:62:17:0c:9f:89:59:1c:22:a5:66:d4:
47:21:6b:2b:09:09:1c:96:73:d1:ab:83:6e:5d:91:
78:3b:42:b5:99:63:af:d3:75:33:c1:cf:b3:c3:fd:
8c:15:5d:b7:b1:15:16:b2:e2:79:82:7f:8c:09:9a:
52:e8:89:fc:f7:ce:63:5a:2b:82:6b:73:11:6d:6b:
52:ae:f3:33:8c:8f:1a:6a:de:17:95:97:5e:c5:ef:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7D:A1:4D:ED:49:7F:03:63:80:46:1B:41:E4:A5:5C:23:65:F3:7F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gn2hTe1JfwNjgEYbQeSlXCNl838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.162.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:3f:ae:f3:b2:00:93:55:cc:4f:f0:c0:3d:c8:77:ce:9c:16:
93:40:96:22:24:45:39:8d:93:6e:3d:26:c4:21:6f:5d:22:c6:
5f:01:84:a7:d5:db:94:1b:ed:7c:79:b9:9a:80:0b:8b:bf:0b:
ba:02:00:cf:28:c3:c2:29:08:27:a4:38:2f:c6:16:d0:fe:b7:
e3:c2:95:bc:52:05:99:f4:ab:a3:00:62:ce:c1:be:72:cb:e0:
75:26:26:a5:3d:f0:31:5b:7a:d2:f4:e9:13:a2:e7:a7:ae:9f:
b6:95:85:65:f5:65:9d:4a:c7:cb:b3:d9:15:4a:64:e5:91:27:
99:68:3a:f1:c9:07:04:94:23:79:07:9f:1d:51:33:2d:08:50:
b5:43:06:b0:08:43:c7:a6:e5:e7:15:f8:2d:0c:05:74:1b:94:
78:2d:69:20:ea:de:09:a4:b3:d2:83:1a:0b:92:f6:ed:fe:02:
cf:36:2f:ca:65:52:cc:28:ea:99:60:03:b5:59:a7:5c:ca:31:
af:8f:6a:49:ff:93:78:b9:99:22:c5:ff:0b:55:15:94:de:bc:
4a:22:06:53:99:14:09:3d:ac:59:e6:ca:89:96:2b:7a:b2:54:
60:9d:bb:65:14:1d:9c:42:5e:99:99:07:67:d3:10:74:26:3b:
4b:f3:c0:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGMPHesbT7ws1kBzOV0NQCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDMwMDk1NTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjdkYTE0ZGVkNDk3ZjAzNjM4MDQ2MWI0MWU0YTU1YzIzNjVmMzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3yGXv2cnksd8iBIpefbtf46DcIk
ithkcMMnBxqrMpJsioE2es7e5LH4pDAPFYWWsopVHdcDb/LlDdzmg+0fd/kaKWa7
gWkC+m9vvxyU6Vx9HY5aMDAvl3tc3mm+HWxLbVZmPQ42kHsxXx0hg8L5odv99GCm
5xzB6ghDAyC9TYp14RSzH439+dC8i6SolOEZKV/lVKpMM6E9qU5wDzB6DpJSN3P1
+ADkYhcMn4lZHCKlZtRHIWsrCQkclnPRq4NuXZF4O0K1mWOv03Uzwc+zw/2MFV23
sRUWsuJ5gn+MCZpS6In8985jWiuCa3MRbWtSrvMzjI8aat4XlZdexe/npQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIJ9oU3tSX8DY4BGG0HkpVwjZfN/MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZ24yaFRlMUpmd05qZ0VZYlFlU2xYQ05sODM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBeaiMA0G
CSqGSIb3DQEBCwUAA4IBAQBLP67zsgCTVcxP8MA9yHfOnBaTQJYiJEU5jZNuPSbE
IW9dIsZfAYSn1duUG+18ebmagAuLvwu6AgDPKMPCKQgnpDgvxhbQ/rfjwpW8UgWZ
9KujAGLOwb5yy+B1JialPfAxW3rS9OkTouenrp+2lYVl9WWdSsfLs9kVSmTlkSeZ
aDrxyQcElCN5B58dUTMtCFC1QwawCEPHpuXnFfgtDAV0G5R4LWkg6t4JpLPSgxoL
kvbt/gLPNi/KZVLMKOqZYAO1WadcyjGvj2pJ/5N4uZkixf8LVRWU3rxKIgZTmRQJ
PaxZ5sqJlit6slRgnbtlFB2cQl6ZmQdn0xB0JjtL88Cx
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:08:38 2026 by rpki-client