Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Q5Gam7ljsEiZHHgbXoGxlkAlWhg.roa
File: Q5Gam7ljsEiZHHgbXoGxlkAlWhg.roa (raw, json)
Hash identifier: t8us7piJNgHIEk5G1QsJplVfGRHRVbujDdKsfAzUUVs=
Subject key identifier: 43:91:9A:9B:B9:63:B0:48:99:1C:78:1B:5E:81:B1:96:40:25:5A:18
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019EB6D54957810CEEDD695D9E22FB99A860
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Q5Gam7ljsEiZHHgbXoGxlkAlWhg.roa
Signing time: Thu 11 Jun 2026 13:18:11 +0000
ROA not before: Thu 11 Jun 2026 13:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jun 2026 20:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:d5:49:57:81:0c:ee:dd:69:5d:9e:22:fb:99:a8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 11 13:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43919a9bb963b048991c781b5e81b19640255a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:59:81:2e:bf:47:0f:c7:0f:23:39:92:62:79:
33:a9:ca:cc:59:b3:4e:d2:4c:fd:44:b2:23:b6:db:
8e:d2:01:d1:b5:71:d6:5d:d0:e0:95:ac:06:6f:7d:
e7:bf:2a:af:18:ff:13:54:97:01:6e:28:02:0f:89:
37:32:62:15:b8:fc:ef:0b:99:85:02:b4:1d:f5:d8:
1e:56:44:11:ba:03:93:01:57:4c:50:db:08:7c:92:
6b:87:35:85:f6:ec:69:f2:e4:81:c7:2d:01:01:af:
c1:f8:71:95:7f:15:a3:b0:64:ff:64:cb:1d:11:62:
7b:2e:26:85:6b:6c:5e:7e:2b:e7:cd:62:30:3a:ba:
20:0f:0f:31:77:e2:73:8e:ab:e3:aa:ac:de:2c:89:
b9:b4:48:2a:57:27:d6:e9:7d:61:83:25:a1:47:68:
51:2f:e0:9b:e7:94:ef:c6:55:4a:6c:c0:1c:01:85:
f4:86:ec:02:dc:98:34:92:af:02:97:e9:4a:a9:b3:
87:0e:19:74:b3:8f:b5:a4:6d:fd:d8:62:8b:58:76:
72:c4:50:ba:d4:e1:b3:a9:1d:c7:a6:7c:ae:76:58:
e1:7e:56:76:fa:4f:f7:87:3e:04:f2:3d:a3:43:13:
70:ae:01:85:63:a3:5b:b5:2c:a9:29:f6:03:da:ba:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:91:9A:9B:B9:63:B0:48:99:1C:78:1B:5E:81:B1:96:40:25:5A:18
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Q5Gam7ljsEiZHHgbXoGxlkAlWhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:60:ff:7c:38:c6:8f:1f:24:1d:f5:f6:4b:3a:89:f5:84:75:
83:b7:ad:de:06:c8:98:45:df:a0:1f:9e:86:c0:33:f4:95:d0:
94:f7:86:b0:66:4a:7a:63:04:de:89:f7:b2:9b:78:d4:47:f5:
d6:04:ee:c0:7e:0c:65:0d:17:55:97:41:28:12:a1:3f:19:13:
75:ba:70:e1:12:b3:80:30:e8:f6:88:40:f3:91:fd:5d:99:4b:
f1:10:09:5e:71:d1:76:fe:28:49:82:ee:1c:af:68:0c:47:5a:
5c:0c:eb:d4:fc:55:1e:c9:6e:a3:11:64:df:d4:8b:d9:ae:5d:
57:13:a1:dd:73:b5:ce:c8:83:47:e9:f4:ea:28:fa:a5:b5:65:
78:e9:41:3b:83:9b:1a:02:7e:b5:72:3b:c7:b8:5c:2e:d4:1e:
13:3c:28:41:b4:5a:85:01:aa:b2:59:c0:78:7f:e1:b4:0c:f6:
cb:82:79:15:39:bf:f4:e8:cc:89:13:8f:5d:b9:c2:55:e6:af:
aa:ab:1f:ec:a2:72:40:39:f8:8c:91:bc:83:ce:73:62:aa:00:
2b:cb:9a:df:1c:67:c0:f6:17:ee:da:12:97:23:ce:f4:18:d6:
72:62:2d:d1:9d:c8:09:f0:98:57:f4:c9:e4:59:a1:15:21:e3:
f2:5b:2d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:48:06 2026 by rpki-client