Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/UL3TxfX229nJp9Sbbqtff8hdOG8.roa
File: UL3TxfX229nJp9Sbbqtff8hdOG8.roa (raw, json)
Hash identifier: ayCW7MBFZ801FkVt4ERqbC/plBsZUVPBvOJ4tj7DyG0=
Subject key identifier: 50:BD:D3:C5:F5:F6:DB:D9:C9:A7:D4:9B:6E:AB:5F:7F:C8:5D:38:6F
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 019A12A0DBCE767CFD6F2FBBF73B50D5DD27
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/UL3TxfX229nJp9Sbbqtff8hdOG8.roa
Signing time: Thu 23 Oct 2025 19:52:03 +0000
ROA not before: Thu 23 Oct 2025 19:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 91.239.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Nov 2025 18:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:a0:db:ce:76:7c:fd:6f:2f:bb:f7:3b:50:d5:dd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Oct 23 19:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50bdd3c5f5f6dbd9c9a7d49b6eab5f7fc85d386f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:bd:28:77:b5:5a:d3:1c:2c:e5:44:14:c1:
44:42:21:16:67:34:36:fb:22:b2:3f:4f:68:ff:cd:
a7:3d:5b:d2:a7:56:9f:12:89:c3:2d:71:43:56:ce:
f5:1a:31:7c:61:ba:6f:45:21:ae:fa:3e:8f:e7:80:
46:ee:22:f5:ad:ea:8a:51:5b:4a:6b:2b:f0:a6:99:
b7:79:74:43:cc:af:53:e6:3a:e8:df:ec:35:42:b7:
5e:80:2c:04:df:bb:74:49:ef:86:c4:06:64:d9:99:
80:d5:7c:c6:5f:08:08:b2:df:f8:6b:d5:0a:e7:b5:
c4:a3:ff:79:18:bb:bc:36:df:e8:fa:ca:de:5e:2d:
53:fb:68:72:93:a1:7c:79:2c:fa:71:f6:d9:18:1a:
35:28:27:89:40:33:b9:6a:73:9a:ed:06:94:4a:bb:
d1:eb:ca:79:23:0f:56:26:6d:fd:b4:3d:51:29:43:
5d:5e:20:b1:1c:94:70:e0:a9:fd:ef:47:4f:f6:61:
02:7f:db:53:ed:d5:eb:d5:e9:85:93:a8:0f:1f:e4:
88:ae:c0:9f:0c:e1:a9:92:15:95:37:a6:61:88:d7:
af:f6:8a:39:50:02:f7:38:43:49:a8:84:32:6a:02:
ba:f7:c0:f2:1a:c2:7b:15:28:b3:e6:ff:36:9f:1a:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BD:D3:C5:F5:F6:DB:D9:C9:A7:D4:9B:6E:AB:5F:7F:C8:5D:38:6F
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/UL3TxfX229nJp9Sbbqtff8hdOG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.216.0/24
Signature Algorithm: sha256WithRSAEncryption
37:1d:47:7b:8c:10:c7:70:c8:fa:04:f4:ba:6f:4a:54:33:90:
cb:45:74:f6:22:03:5f:f0:9c:bd:3a:3d:2f:e4:d2:9b:13:14:
3d:35:e8:48:ad:82:46:0f:83:82:09:d3:e7:a2:45:4b:8a:4f:
9b:0a:4b:4f:c2:09:a1:f9:20:0f:dc:65:6b:a9:b0:91:6a:0f:
84:ec:2f:ec:2f:a5:57:d7:a7:9e:41:b2:24:94:da:a0:f8:4f:
9a:30:3b:8f:98:1d:10:32:a8:15:b3:31:a5:da:7a:cc:20:2e:
27:5a:4f:4d:9d:e1:57:5a:43:b0:68:71:69:50:5c:04:ec:85:
ae:b1:90:5b:54:e8:c8:fd:09:e9:e0:ff:cf:9e:2a:ff:42:25:
d4:46:c5:61:a1:e7:04:11:bc:b6:cc:cd:22:84:62:ec:31:db:
09:f0:bb:3f:22:05:9a:0d:cf:27:3a:fc:c7:3b:7c:78:e1:f7:
b3:4b:91:d7:0b:ba:9f:7e:ca:93:56:db:1d:a3:e2:1d:49:4a:
26:41:57:7d:5f:41:eb:ea:cb:0a:90:66:fd:09:fc:f9:fa:c5:
f1:cc:21:61:b0:0e:8f:93:f4:dd:27:2b:d6:01:27:2b:40:41:
1e:65:30:19:0d:ae:0a:4d:5c:e9:55:2e:33:8a:e3:dd:fe:67:
40:21:a8:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoSoNvOdnz9by+79ztQ1d0nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjU4N2E3YzQyYzI2MWZhMjU0YjBiODJlN2JjMDcxOWNj
NjQ4MTIwHhcNMjUxMDIzMTk1MjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGJkZDNjNWY1ZjZkYmQ5YzlhN2Q0OWI2ZWFiNWY3ZmM4NWQzODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCK9KHe1WtMcLOVEFMFEQiEWZzQ2
+yKyP09o/82nPVvSp1afEonDLXFDVs71GjF8YbpvRSGu+j6P54BG7iL1reqKUVtK
ayvwppm3eXRDzK9T5jro3+w1QrdegCwE37t0Se+GxAZk2ZmA1XzGXwgIst/4a9UK
57XEo/95GLu8Nt/o+sreXi1T+2hyk6F8eSz6cfbZGBo1KCeJQDO5anOa7QaUSrvR
68p5Iw9WJm39tD1RKUNdXiCxHJRw4Kn970dP9mECf9tT7dXr1emFk6gPH+SIrsCf
DOGpkhWVN6ZhiNev9oo5UAL3OENJqIQyagK698DyGsJ7FSiz5v82nxqCHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFC908X19tvZyafUm26rX3/IXThvMB8GA1UdIwQY
MBaAFJJlh6fELCYfolSwuC57wHGcxkgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjIt
ODhmYTNiNmViMDA2LzEvVUwzVHhmWDIyOW5KcDlTYmJxdGZmOGhkT0c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjItODhmYTNiNmViMDA2
LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+/YMA0G
CSqGSIb3DQEBCwUAA4IBAQA3HUd7jBDHcMj6BPS6b0pUM5DLRXT2IgNf8Jy9Oj0v
5NKbExQ9NehIrYJGD4OCCdPnokVLik+bCktPwgmh+SAP3GVrqbCRag+E7C/sL6VX
16eeQbIklNqg+E+aMDuPmB0QMqgVszGl2nrMIC4nWk9NneFXWkOwaHFpUFwE7IWu
sZBbVOjI/Qnp4P/Pnir/QiXURsVhoecEEby2zM0ihGLsMdsJ8Ls/IgWaDc8nOvzH
O3x44fezS5HXC7qffsqTVtsdo+IdSUomQVd9X0Hr6ssKkGb9Cfz5+sXxzCFhsA6P
k/TdJyvWAScrQEEeZTAZDa4KTVzpVS4ziuPd/mdAIag6
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:11:37 2025 by rpki-client