Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/AHxw9epQCItW7mdbFQ8BTE_ZilM.roa
File: AHxw9epQCItW7mdbFQ8BTE_ZilM.roa (raw, json)
Hash identifier: VUKO3WFaZoVHMRJP3x9B6Y0//EHLr+101BZhHXXGjM4=
Subject key identifier: 00:7C:70:F5:EA:50:08:8B:56:EE:67:5B:15:0F:01:4C:4F:D9:8A:53
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 019B7F8343CF6D69FC11AF66C834E6FD163B
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/AHxw9epQCItW7mdbFQ8BTE_ZilM.roa
Signing time: Fri 02 Jan 2026 16:21:07 +0000
ROA not before: Fri 02 Jan 2026 16:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210122
IP address blocks: 45.91.13.0/24 maxlen: 24
2a06:d1c1:c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 Jan 2026 15:18:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:43:cf:6d:69:fc:11:af:66:c8:34:e6:fd:16:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Jan 2 16:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=007c70f5ea50088b56ee675b150f014c4fd98a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:ce:77:4e:84:aa:4f:b0:f1:7a:11:80:a2:
6d:b4:49:ea:36:49:77:20:93:84:1f:e4:a6:02:d0:
a7:5b:cc:b2:ba:10:61:54:01:51:80:f8:14:c9:7f:
44:75:41:9c:1a:39:59:cb:c6:6c:50:ae:8b:eb:28:
a5:eb:04:3b:ee:cb:b2:0e:48:17:f1:f9:e3:4a:68:
55:53:63:f4:67:cc:95:55:1f:f8:ba:bf:d3:f6:4e:
0e:f1:89:5d:c6:16:c3:f5:b7:f6:66:1e:1e:1b:98:
f9:7f:7a:db:3a:e3:e5:50:83:c4:dd:80:ae:4a:eb:
ff:17:5d:4d:d7:99:f4:7b:2c:a0:0f:a7:1d:e3:41:
30:6f:bc:28:ae:93:ee:9d:82:cf:69:5d:fc:30:a5:
3b:d3:71:e9:fc:2b:c2:e9:bf:13:a8:43:66:cc:f6:
1e:92:da:c3:41:2c:96:b6:27:81:80:be:bf:6b:8f:
bc:34:96:78:4f:b1:b9:68:5f:ca:15:8b:09:ce:c0:
5d:b2:8d:62:07:70:1b:8a:01:19:c9:96:5a:14:c0:
1e:63:0c:eb:cf:fd:2e:16:8b:78:00:45:98:f1:10:
f6:1b:b5:ea:26:8d:d7:38:4d:85:f8:23:d1:7e:0e:
60:50:aa:63:aa:95:fe:5b:0e:7c:7e:06:64:4d:d5:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7C:70:F5:EA:50:08:8B:56:EE:67:5B:15:0F:01:4C:4F:D9:8A:53
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/AHxw9epQCItW7mdbFQ8BTE_ZilM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.13.0/24
IPv6:
2a06:d1c1:c0::/48
Signature Algorithm: sha256WithRSAEncryption
37:ef:57:2f:39:25:51:b7:03:8e:8f:05:7a:a0:ff:82:84:9d:
60:a5:44:1f:46:43:38:c3:a1:12:ee:3f:e2:34:6f:ad:e8:44:
60:9b:af:c9:07:91:da:f5:c3:89:58:28:c9:7f:a4:cc:b4:8e:
94:3d:77:c2:00:89:9f:9f:c1:03:78:86:7f:0d:02:ba:c8:35:
c4:84:08:2c:83:cf:f3:b3:ec:c4:b5:2e:bf:45:a6:07:10:90:
90:79:ca:5e:27:ec:9d:b2:72:47:05:43:ca:15:ab:d1:6c:01:
37:e6:21:02:1b:b2:83:8f:16:0d:9f:2e:44:23:cc:68:1e:a0:
b4:15:32:59:27:65:8b:9f:86:1c:ef:48:4d:1b:e7:d8:9b:7c:
a2:1d:eb:dc:f9:a0:e4:b4:d3:34:14:8c:cd:52:dd:88:72:c2:
de:5a:e8:bf:80:6c:cc:6e:05:d1:aa:68:45:a7:a3:2e:41:da:
c8:35:5d:8a:3c:ff:82:d5:c3:d8:bf:d7:a5:4b:7d:92:75:a3:
8b:bd:a3:56:2c:22:be:98:f3:2d:c5:3e:43:eb:d7:a9:41:40:
e5:95:3d:ac:03:15:82:c9:ab:51:39:8f:db:bf:31:93:13:95:
5f:83:61:97:6c:e7:6f:4c:4c:b4:bb:a3:41:97:db:05:4f:ed:
50:19:2f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:37:52 2026 by rpki-client