Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/x6966iBHuT80DMI46fHHcLNbs3Q.roa
File: x6966iBHuT80DMI46fHHcLNbs3Q.roa (raw, json)
Hash identifier: MM7t5cVwDCZycYnS0zPIgHWzrcvIb69OMd1uk5/RkXw=
Subject key identifier: C7:AF:7A:EA:20:47:B9:3F:34:0C:C2:38:E9:F1:C7:70:B3:5B:B3:74
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0B98B94090F2DEF7C295A402C9E3E4517
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/x6966iBHuT80DMI46fHHcLNbs3Q.roa
Signing time: Sat 19 Sep 2026 12:02:07 +0000
ROA not before: Sat 19 Sep 2026 12:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.5.28.0/24 maxlen: 24
163.5.54.0/24 maxlen: 24
163.5.56.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Sep 2026 15:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:8b:94:09:0f:2d:ef:7c:29:5a:40:2c:9e:3e:45:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 19 12:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7af7aea2047b93f340cc238e9f1c770b35bb374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:6f:22:90:07:f1:bb:5a:08:b4:1e:ef:9c:
cc:27:d0:b1:63:fd:b5:db:d6:1e:59:58:1b:c9:df:
91:58:7f:c8:f3:f7:b3:eb:42:41:01:55:ea:17:08:
13:6f:58:c4:f3:8e:29:c9:0e:33:46:22:40:1f:c1:
ea:61:9b:74:6c:cb:3c:55:73:7f:51:99:98:38:18:
94:8e:04:6d:60:39:fa:32:93:9e:19:38:49:14:2e:
7f:c1:8f:27:44:29:de:4c:44:7b:56:62:c6:3b:2d:
8a:58:05:9a:33:c2:e0:2e:7d:dd:99:38:e5:23:32:
66:0c:f9:c5:fe:08:e1:c3:a9:90:17:10:8c:4f:12:
08:50:c0:e5:29:83:4f:0d:59:38:ca:42:6a:da:5f:
b0:6c:d8:ea:30:07:2e:98:1b:53:98:6f:50:57:b2:
ca:60:c9:f8:28:86:cb:f7:42:ff:df:db:0a:66:7a:
a9:2e:0e:7a:47:83:7b:bf:d6:54:c3:a5:75:4e:4c:
e8:fd:53:32:6d:af:b0:a7:d3:87:05:d2:fa:7f:4c:
3d:37:d7:a4:a6:cd:6b:47:b4:9d:c9:44:a6:b6:5d:
15:0e:ef:04:e4:e6:ad:67:ae:79:52:6e:d9:eb:7b:
a5:ee:f0:dd:99:84:12:64:bf:ce:a2:44:25:92:a5:
f6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AF:7A:EA:20:47:B9:3F:34:0C:C2:38:E9:F1:C7:70:B3:5B:B3:74
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/x6966iBHuT80DMI46fHHcLNbs3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.28.0/24
163.5.54.0/24
163.5.56.0/24
163.5.59.0/24
163.5.90.0/24
163.5.112.0/24
163.5.121.0/24
163.5.125.0/24
163.5.129.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.196.0/24
163.5.216.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ac:38:2b:ac:ce:c4:67:14:68:c2:ea:a3:99:f5:95:8a:f9:
db:b8:22:8b:ad:dc:2a:d7:d5:66:e1:78:cc:16:a6:2d:18:0b:
91:47:37:9f:57:8b:62:7a:1a:eb:e9:1d:94:5e:c1:50:91:7e:
ca:2d:11:93:44:6a:15:29:0f:ca:78:75:a0:ce:d9:25:a1:ab:
f1:b8:39:dd:dd:2d:92:7b:18:c3:0b:8b:77:ce:68:bf:d3:b0:
04:5f:b5:aa:1b:09:d6:98:8d:d7:fe:bd:72:5a:48:1f:41:eb:
8b:4f:4c:f2:db:00:f1:2c:9e:20:fc:03:0f:99:8c:3f:84:02:
49:ec:74:26:69:f6:9d:20:00:7d:f8:e5:35:8a:33:62:6f:52:
f1:5d:33:f6:38:c0:c4:f2:e8:01:dc:08:fc:92:fa:fa:78:09:
37:cc:22:47:c5:82:d6:32:87:28:db:9b:05:9b:85:e0:0f:8c:
59:67:19:5a:5b:03:c6:ce:50:13:33:06:52:4c:19:b5:28:0e:
ae:75:7f:f2:a5:2f:64:50:96:01:79:1e:92:f3:95:fa:d3:f4:
1e:51:85:03:11:d3:41:9b:83:92:71:00:08:bd:bf:98:5e:30:
28:cf:78:9a:51:37:dc:f1:80:52:fe:e3:90:17:98:11:92:d3:
a1:02:5c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:51 2026 by rpki-client