Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bt23mODmJQ5xOZE9C9YzUipBE58.roa
File: bt23mODmJQ5xOZE9C9YzUipBE58.roa (raw, json)
Hash identifier: eLDYfX7kHgvcIRJ/l6zRltPmOTujQvB7UDGkIupxJQM=
Subject key identifier: 6E:DD:B7:98:E0:E6:25:0E:71:39:91:3D:0B:D6:33:52:2A:41:13:9F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D53651680FF0EE53D4D55A60BEF9555C8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bt23mODmJQ5xOZE9C9YzUipBE58.roa
Signing time: Fri 03 Apr 2026 12:50:27 +0000
ROA not before: Fri 03 Apr 2026 12:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 163.5.39.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Apr 2026 13:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:53:65:16:80:ff:0e:e5:3d:4d:55:a6:0b:ef:95:55:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 3 12:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6eddb798e0e6250e7139913d0bd633522a41139f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:c4:34:d7:96:ff:e7:39:c8:be:4f:2c:16:
2a:64:19:b1:b2:3d:30:a9:fb:f8:1a:e7:81:47:be:
97:4c:4b:d6:72:78:47:0b:b8:42:a0:90:ea:a3:43:
4f:7a:10:dd:e6:4d:74:da:9d:38:23:ed:01:a3:f0:
e2:ae:4d:79:12:b5:c4:9a:bf:62:fb:92:bf:18:ff:
62:bd:35:5c:db:f1:8d:7a:c4:50:94:91:38:a2:1d:
55:c7:c6:d4:c3:3c:ca:29:2a:f7:a2:aa:37:6e:1c:
d8:94:be:33:1b:5a:f6:7d:19:cb:12:21:ff:48:c9:
ac:18:ac:4b:da:42:08:fa:17:60:50:1a:8b:a5:14:
10:e6:54:5a:b3:fb:6d:74:2c:ca:9a:3e:30:12:1a:
83:40:34:6d:2c:57:e2:18:99:9b:e5:42:f6:45:f9:
89:e4:e2:3e:9f:04:cc:5d:4c:79:c2:65:2c:de:82:
b8:98:c1:c8:54:74:a0:7f:fb:77:ab:d3:39:a0:a6:
cd:06:78:ae:93:bc:f3:f7:14:38:20:2e:ba:14:f7:
65:09:97:16:b0:f3:dc:3d:63:40:45:35:b5:c3:e4:
f6:13:17:64:43:01:46:1a:62:36:76:a2:50:1e:af:
8b:21:9e:ab:19:e2:8d:b4:de:dc:66:1d:74:3b:8d:
82:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DD:B7:98:E0:E6:25:0E:71:39:91:3D:0B:D6:33:52:2A:41:13:9F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bt23mODmJQ5xOZE9C9YzUipBE58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.39.0/24
163.5.88.0/24
163.5.90.0/24
163.5.100.0/24
163.5.114.0/24
163.5.117.0/24
163.5.130.0/24
163.5.153.0-163.5.154.255
163.5.174.0/24
163.5.177.0/24
163.5.189.0/24
163.5.226.0/23
163.5.240.0/24
163.5.243.0/24
163.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
40:3b:40:1d:89:a5:76:2b:0c:b8:57:22:9a:3a:96:89:48:0a:
37:a7:dc:b5:de:1a:cc:c0:e6:88:16:40:d7:c6:73:1a:d6:93:
60:12:a2:dc:b9:71:da:03:eb:d5:d4:ad:81:db:60:cc:d2:37:
f2:69:d1:b2:0b:c7:d4:e7:b3:9e:7d:3a:02:cc:fc:4f:1c:7d:
3c:66:4c:54:1e:4d:6c:01:f1:9f:88:80:46:f5:b6:1b:2d:85:
d1:40:4e:b2:ec:b2:bd:72:60:15:1e:d4:e0:a8:3d:e1:0a:75:
5f:ed:bb:a5:e3:07:f9:35:43:d8:08:50:7a:44:92:db:cb:9e:
cd:83:01:e8:83:8d:2c:99:d1:8c:8a:f2:fc:a8:41:79:85:4c:
25:e6:20:26:94:ee:70:c5:02:7a:1c:b8:2d:68:07:1e:24:20:
aa:37:f9:c8:b5:43:0b:87:b3:1b:01:89:bd:ae:09:e2:e9:cb:
f4:08:c1:b3:15:f8:bb:b7:f6:f3:c5:6f:86:f0:df:a1:3f:4b:
b4:b9:2d:5e:dc:45:7d:16:6f:f9:f3:ec:e5:52:8a:35:b7:99:
ad:34:41:bc:7a:24:bb:7a:d3:a3:e0:a0:4a:eb:55:94:92:2e:
6a:70:1d:ba:84:d5:63:30:84:72:06:0c:e6:0b:ca:99:81:c7:
d8:45:cf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:11 2026 by rpki-client