Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/eRW1sjyUsZiC7jnkN4CCqgJmBUA.roa
File: eRW1sjyUsZiC7jnkN4CCqgJmBUA.roa (raw, json)
Hash identifier: jb1RlmbAxVoyV6xW8zP18t8IpmOuLXYNQQCEVuzJGOA=
Subject key identifier: 79:15:B5:B2:3C:94:B1:98:82:EE:39:E4:37:80:82:AA:02:66:05:40
Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial: 019B7EA71A4D4BFBD867C52A9DC40E0DF03D
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/eRW1sjyUsZiC7jnkN4CCqgJmBUA.roa
Signing time: Fri 02 Jan 2026 12:20:39 +0000
ROA not before: Fri 02 Jan 2026 12:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59705
IP address blocks: 5.45.16.0/23 maxlen: 23
5.45.18.0/24 maxlen: 24
2a01:6c8:2000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 05 Feb 2026 10:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:1a:4d:4b:fb:d8:67:c5:2a:9d:c4:0e:0d:f0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
Validity
Not Before: Jan 2 12:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7915b5b23c94b19882ee39e4378082aa02660540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:ac:59:10:90:31:76:d0:52:85:4c:03:b9:
51:7c:83:1d:01:8c:05:83:18:06:e4:0c:79:3d:b0:
26:ce:b0:bd:45:ed:d7:91:13:25:d9:a2:a6:96:3d:
08:a6:26:41:86:34:a7:c1:6d:3b:d8:99:74:fc:28:
97:3e:69:a3:80:25:de:f0:24:83:7e:ad:da:1b:58:
4d:a9:93:e3:bd:f1:78:fb:07:a4:9c:ab:de:53:18:
4b:38:c9:2f:23:0e:c7:d5:b7:71:30:47:36:13:9d:
59:e8:17:d7:1d:a2:33:3f:b4:0b:ec:b2:bc:2a:98:
60:bb:97:9f:55:4c:e4:6b:ae:29:9c:61:ae:ec:85:
8f:bf:55:b0:5c:7b:4c:de:db:9f:13:24:51:b3:af:
77:10:7f:02:45:f1:f6:9c:d9:b4:4f:50:14:d4:38:
42:9c:ea:0d:db:ff:cb:38:6a:bb:02:d9:dc:4a:bd:
8d:41:6d:84:3f:e6:4a:03:13:58:df:48:1f:4a:15:
98:4c:b5:25:2f:e4:42:2b:95:7b:ed:a9:d2:dc:35:
08:97:74:27:3c:26:39:4e:b9:9a:e9:00:24:59:8e:
79:b3:39:50:fd:a3:48:1b:f2:ed:4c:7c:6f:06:db:
67:33:1e:39:a5:17:64:17:e2:4e:64:e4:9d:15:0f:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:15:B5:B2:3C:94:B1:98:82:EE:39:E4:37:80:82:AA:02:66:05:40
X509v3 Authority Key Identifier:
keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/eRW1sjyUsZiC7jnkN4CCqgJmBUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.16.0-5.45.18.255
IPv6:
2a01:6c8:2000::/36
Signature Algorithm: sha256WithRSAEncryption
50:09:aa:c5:c4:77:de:a8:da:66:e5:81:e6:27:6e:f2:23:35:
54:b3:dc:5d:61:cf:4b:8e:1f:35:85:f2:14:65:89:42:6e:20:
3a:25:43:22:82:ef:f2:e5:34:41:c9:ae:06:e6:17:b9:61:d8:
9d:71:bb:21:6f:7c:e1:4b:ba:cd:b8:b6:3d:b4:f1:2e:61:59:
ce:08:96:6e:75:fa:76:9a:cf:f1:03:6a:23:f6:6e:8a:13:01:
64:78:60:a6:33:d1:e6:7f:1a:57:e1:56:1d:7a:8d:5e:9f:d9:
9e:df:1f:1d:aa:49:df:40:dc:b7:5b:e4:64:0f:b6:88:22:28:
5d:b3:01:94:5f:9f:b5:bd:b2:d3:f2:64:ae:ff:ba:78:e5:ee:
5b:72:0c:7c:8e:3b:c0:58:34:49:45:48:00:ab:cf:06:47:e8:
73:bc:fb:0d:f0:17:73:85:f7:6e:dc:fe:69:ea:43:ab:fd:d6:
1b:24:0f:46:9e:6e:0b:0e:93:0c:e3:b5:30:d2:9c:80:64:66:
ba:9a:f5:e4:68:ec:29:16:70:3f:8c:e1:93:1b:99:d1:49:ea:
0e:45:f9:a8:38:a7:8c:9c:b7:d5:16:60:2b:20:cb:03:4b:15:
f7:01:87:d5:41:d5:b3:bc:0a:72:89:f1:4f:35:11:7e:7b:c9:
d4:5c:36:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:56 2026 by rpki-client