Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5gLaXUyyzatjgzJ3J6zdojyWNnM.roa
File: 5gLaXUyyzatjgzJ3J6zdojyWNnM.roa (raw, json)
Hash identifier: eYsY+TKY08LcxNGwqKqx1FygSf0JBn82IGP6hoURV6Q=
Subject key identifier: E6:02:DA:5D:4C:B2:CD:AB:63:83:32:77:27:AC:DD:A2:3C:96:36:73
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A05BF4554B782472B5C75C38327B77A000
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5gLaXUyyzatjgzJ3J6zdojyWNnM.roa
Signing time: Tue 01 Sep 2026 07:52:14 +0000
ROA not before: Tue 01 Sep 2026 07:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 82.152.60.0/24 maxlen: 24
82.152.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 07:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:f4:55:4b:78:24:72:b5:c7:5c:38:32:7b:77:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 1 07:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e602da5d4cb2cdab6383327727acdda23c963673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:66:08:95:99:d1:44:16:c0:81:e7:4c:a0:
6f:68:4f:c4:a0:bf:35:08:6d:b3:7e:d7:b1:45:16:
2f:fe:7f:5d:b0:d6:6a:1d:4e:2c:63:c3:19:6b:6a:
32:a4:71:97:be:7b:12:1f:c7:88:14:ae:47:77:86:
b6:b0:45:25:6c:c6:4a:63:dd:e0:cf:81:65:bf:9b:
a5:d3:06:d8:c7:a3:82:49:59:e3:e9:0b:b2:94:84:
50:c4:0f:03:ea:83:31:a5:f9:d4:fc:70:31:c8:9a:
a6:54:04:65:08:9f:65:bb:19:31:61:0c:13:8e:09:
1d:e3:51:be:75:92:06:53:55:13:7c:c5:b5:ec:5d:
dd:30:4c:b2:22:ff:43:e8:1d:8e:f4:1e:b5:e5:9b:
68:3f:04:78:62:ea:00:b7:7a:c5:91:7f:31:1a:99:
75:a8:08:a0:97:68:e6:42:39:2f:f8:16:e3:99:e6:
9f:c5:39:77:2b:16:90:ab:98:97:e5:c7:de:1c:ca:
c7:1c:ae:e2:13:3a:3e:b6:8f:33:2f:be:e9:83:17:
2e:fa:a0:4b:20:ad:b2:f1:6d:ce:8b:30:5d:99:71:
08:48:6d:9c:23:de:c8:49:1d:45:b0:1a:5c:59:ab:
d3:5c:48:6e:ea:4d:77:b9:52:b8:c3:57:be:be:73:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:02:DA:5D:4C:B2:CD:AB:63:83:32:77:27:AC:DD:A2:3C:96:36:73
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5gLaXUyyzatjgzJ3J6zdojyWNnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.60.0/24
82.152.69.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:fb:b4:8d:87:78:d6:42:9e:38:7b:26:77:36:24:d5:b0:c7:
88:9a:f1:54:b3:e4:0e:4e:22:37:3a:fc:dc:d9:f0:67:a8:6b:
33:f6:5f:9c:74:df:3e:c4:1d:4a:43:70:8d:d4:a0:c3:e4:e7:
9c:e7:e9:a0:37:2b:5a:df:cf:88:f1:87:e2:a9:f4:c7:ef:e4:
52:65:85:8e:8a:be:93:d3:0c:a8:8e:96:1c:e1:b3:96:00:03:
2a:a9:95:f8:5b:8a:00:5c:45:c1:11:18:24:94:6a:8c:a1:77:
fd:71:33:0e:d5:a1:fb:d1:33:78:96:30:1d:ae:e5:33:e9:30:
f6:46:8b:e7:17:ce:58:58:d7:28:b9:90:f4:71:da:6d:5d:6d:
f4:3b:4f:09:b4:2c:aa:7a:fd:e2:d5:94:ce:aa:81:d9:12:70:
72:af:c5:c9:b9:87:c4:e9:7b:35:41:ca:d1:02:8c:1a:82:5f:
4c:c9:ff:4c:01:b6:20:01:3a:75:80:17:37:ae:7b:1d:58:f8:
16:21:65:8a:27:5d:5f:8b:a7:7e:d6:96:2a:b1:68:f1:c8:b2:
ff:fe:40:63:8d:ba:5e:a3:05:ce:60:ec:be:bb:1f:c6:a2:dd:
31:07:23:c3:f7:b1:03:80:92:1b:b6:6b:39:3a:7b:5f:bd:da:
92:e4:3c:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBb9FVLeCRytcdcODJ7d6AAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwOTAxMDc1MjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjAyZGE1ZDRjYjJjZGFiNjM4MzMyNzcyN2FjZGRhMjNjOTYzNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPZmCJWZ0UQWwIHnTKBvaE/EoL81
CG2zftexRRYv/n9dsNZqHU4sY8MZa2oypHGXvnsSH8eIFK5Hd4a2sEUlbMZKY93g
z4Flv5ul0wbYx6OCSVnj6QuylIRQxA8D6oMxpfnU/HAxyJqmVARlCJ9luxkxYQwT
jgkd41G+dZIGU1UTfMW17F3dMEyyIv9D6B2O9B615ZtoPwR4YuoAt3rFkX8xGpl1
qAigl2jmQjkv+BbjmeafxTl3KxaQq5iX5cfeHMrHHK7iEzo+to8zL77pgxcu+qBL
IK2y8W3OizBdmXEISG2cI97ISR1FsBpcWavTXEhu6k13uVK4w1e+vnPdcwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOYC2l1Mss2rY4Mydyes3aI8ljZzMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvNWdMYVhVeXl6YXRqZ3pKM0o2emRvanlXTm5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpg8AwQA
UphFMA0GCSqGSIb3DQEBCwUAA4IBAQB/+7SNh3jWQp44eyZ3NiTVsMeImvFUs+QO
TiI3Ovzc2fBnqGsz9l+cdN8+xB1KQ3CN1KDD5Oec5+mgNyta38+I8YfiqfTH7+RS
ZYWOir6T0wyojpYc4bOWAAMqqZX4W4oAXEXBERgklGqMoXf9cTMO1aH70TN4ljAd
ruUz6TD2RovnF85YWNcouZD0cdptXW30O08JtCyqev3i1ZTOqoHZEnByr8XJuYfE
6Xs1QcrRAowagl9Myf9MAbYgATp1gBc3rnsdWPgWIWWKJ11fi6d+1pYqsWjxyLL/
/kBjjbpeowXOYOy+ux/Got0xByPD97EDgJIbtms5OntfvdqS5DxT
-----END CERTIFICATE-----
Generated at Mon Sep 28 07:00:12 2026 by rpki-client