Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ll4SRdulCHc1Ad7ChxPRhegEKfA.roa
File: ll4SRdulCHc1Ad7ChxPRhegEKfA.roa (raw, json)
Hash identifier: nTtjbASM9MlrX6rwvIuA3MBAAmX08aQc6resNjs8FUo=
Subject key identifier: 96:5E:12:45:DB:A5:08:77:35:01:DE:C2:87:13:D1:85:E8:04:29:F0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1957DB64D71C86623C845E6CF42DD4B77
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ll4SRdulCHc1Ad7ChxPRhegEKfA.roa
Signing time: Sun 01 Nov 2026 05:03:26 +0000
ROA not before: Sun 01 Nov 2026 05:03:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 5.175.162.0/24 maxlen: 24
5.175.168.0/24 maxlen: 24
5.175.195.0/24 maxlen: 24
5.175.226.0/24 maxlen: 24
5.175.227.0/24 maxlen: 24
5.230.49.0/24 maxlen: 24
5.230.153.0/24 maxlen: 24
5.231.64.0/24 maxlen: 24
5.231.207.0/24 maxlen: 24
5.231.255.0/24 maxlen: 24
85.118.166.0/24 maxlen: 24
94.249.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Nov 2026 05:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:7d:b6:4d:71:c8:66:23:c8:45:e6:cf:42:dd:4b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 1 05:03:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=965e1245dba508773501dec28713d185e80429f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:df:d0:ea:09:20:c7:4c:eb:05:a2:4d:14:
63:5c:98:ca:fc:fa:61:36:51:09:42:bb:e9:4e:9e:
c9:86:32:76:77:d7:eb:f8:c6:66:5a:b1:c6:ea:da:
68:d7:3b:ce:a5:b6:6b:d2:aa:7f:4d:1a:9f:a3:3e:
2b:b6:fc:c2:a6:59:22:1e:54:a7:42:61:34:57:b8:
01:69:f0:51:fa:99:2f:48:2f:bb:c9:45:ae:52:18:
d6:a9:c5:46:32:08:5b:b3:e1:f0:18:ea:a3:8b:73:
be:88:ab:b0:5d:54:3f:14:bb:d7:9a:a8:66:01:3e:
e5:78:26:aa:af:16:67:b9:d4:aa:24:c1:5f:b3:05:
57:26:c0:94:5b:63:14:dc:55:59:48:1b:cc:73:c4:
19:89:ff:55:b2:e1:7c:90:b6:54:17:6b:a5:ec:e5:
38:5a:78:bf:32:ac:36:f2:31:e0:b3:03:83:f5:17:
fc:78:f7:1d:60:0f:b4:d1:16:26:41:c3:4b:09:49:
27:e5:8c:af:31:be:6e:08:d9:6a:b6:0a:90:df:77:
ca:dc:a1:ba:27:91:71:e8:67:8c:05:e1:0b:a0:f7:
f3:80:12:1f:79:92:7d:7d:b8:91:45:a6:b5:6a:7e:
c7:f9:58:19:ea:7c:1c:ca:50:ea:fb:36:63:ea:95:
f9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5E:12:45:DB:A5:08:77:35:01:DE:C2:87:13:D1:85:E8:04:29:F0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ll4SRdulCHc1Ad7ChxPRhegEKfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.162.0/24
5.175.168.0/24
5.175.195.0/24
5.175.226.0/23
5.230.49.0/24
5.230.153.0/24
5.231.64.0/24
5.231.207.0/24
5.231.255.0/24
85.118.166.0/24
94.249.154.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d0:b3:67:68:ec:e2:a0:ec:c5:73:18:b6:8c:12:68:45:9c:
0c:81:03:a7:55:19:c3:fb:d0:2e:ef:90:bb:9f:a8:d8:89:14:
ca:b3:a7:01:bc:67:7b:00:fa:6a:86:89:33:a1:29:68:80:10:
db:76:3c:3a:d9:22:87:b5:05:06:56:b1:42:d3:1c:97:cf:15:
5a:0d:58:f8:f3:3c:27:94:40:99:64:5f:ed:12:60:1c:e3:e2:
14:0a:65:35:3a:50:80:e9:b3:47:e4:93:15:a9:89:89:a3:f8:
38:12:e2:2c:9c:63:ac:a9:45:08:fb:7a:19:7c:a0:f5:f0:59:
16:e7:a4:2c:cf:02:86:0f:db:9f:e9:b5:ef:3a:15:4a:8c:1a:
ba:37:fd:1e:c5:2b:cc:47:4d:93:3c:d8:51:af:43:43:d0:df:
34:58:d7:66:f8:80:74:55:30:c8:0d:f3:33:6e:8c:51:a2:ac:
7e:30:92:1a:5e:7f:b5:52:87:86:12:82:4e:bb:37:d6:a7:d1:
83:62:dc:c7:ec:d6:0b:a5:b0:4b:d7:27:92:fb:f9:4d:72:e8:
a6:68:25:df:b3:a3:61:c6:00:42:1b:09:50:3b:12:ea:ee:cc:
f0:fe:96:17:b7:bd:95:42:42:6c:b7:a5:ed:f1:35:ff:03:19:
cd:6b:91:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 00:47:51 2026 by rpki-client