Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ChqyPMGCSOUDm1bdXQ9g6sWSH9c.roa
File: ChqyPMGCSOUDm1bdXQ9g6sWSH9c.roa (raw, json)
Hash identifier: hXm8PlWQJAuHviDWyYwa8XyAhPfPUrOKx9uQbDhqcfw=
Subject key identifier: 0A:1A:B2:3C:C1:82:48:E5:03:9B:56:DD:5D:0F:60:EA:C5:92:1F:D7
Certificate issuer: /CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Certificate serial: 019EA7A7E1A96393DA7F1671D6EA19D40289
Authority key identifier: 95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ChqyPMGCSOUDm1bdXQ9g6sWSH9c.roa
Signing time: Mon 08 Jun 2026 14:34:17 +0000
ROA not before: Mon 08 Jun 2026 14:34:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 201.51.0.0/24 maxlen: 32
201.51.1.0/24 maxlen: 32
201.51.2.0/24 maxlen: 32
201.51.3.0/24 maxlen: 32
201.51.4.0/24 maxlen: 32
201.51.5.0/24 maxlen: 32
201.51.6.0/24 maxlen: 32
201.51.7.0/24 maxlen: 32
201.51.8.0/24 maxlen: 32
201.51.9.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 15 Jun 2026 19:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:a7:e1:a9:63:93:da:7f:16:71:d6:ea:19:d4:02:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Validity
Not Before: Jun 8 14:34:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a1ab23cc18248e5039b56dd5d0f60eac5921fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:8b:60:38:c1:68:8b:d3:87:62:47:10:39:
4e:df:88:3f:1d:f0:33:17:c5:79:75:ed:e4:42:7e:
52:6b:b8:df:13:57:11:2d:18:e7:74:82:51:61:e3:
2f:69:c1:dc:8a:3a:ad:c9:cf:c8:e6:31:75:df:5c:
d8:a4:81:2f:b1:97:9c:31:c1:8e:4a:1d:c8:36:42:
2d:30:c6:6e:a5:27:6d:b7:c1:ed:d4:e8:db:59:4f:
14:47:db:88:41:be:fd:61:f9:07:a7:fd:74:d2:17:
09:3b:26:43:8f:db:61:4e:99:a8:84:0a:86:c0:a1:
d9:16:67:cf:d1:a6:8b:ed:99:ff:4b:ba:13:9b:59:
fe:4c:60:45:d0:b0:5a:60:e7:32:5b:e2:fe:29:23:
e0:5d:c3:83:e7:2a:eb:33:33:3b:ba:dd:24:ad:75:
49:a5:a5:34:b6:3d:7b:cf:0c:c0:87:18:1b:9e:ce:
fe:09:e2:e0:51:44:0e:68:88:1e:15:aa:19:b2:2a:
5f:5e:15:be:4f:a5:4b:5a:28:86:71:d4:c2:de:69:
37:67:5f:91:bb:e3:99:42:b1:45:7d:97:6b:ec:7b:
ce:fd:e4:54:20:60:86:06:b9:09:ef:54:3c:05:82:
bb:98:bf:95:16:de:9a:c1:4f:96:0e:ca:e8:89:21:
d9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1A:B2:3C:C1:82:48:E5:03:9B:56:DD:5D:0F:60:EA:C5:92:1F:D7
X509v3 Authority Key Identifier:
keyid:95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ChqyPMGCSOUDm1bdXQ9g6sWSH9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.51.0.0-201.51.9.255
Signature Algorithm: sha256WithRSAEncryption
2a:5a:f0:e9:df:c8:36:3f:0c:35:f6:89:11:0e:7d:23:45:37:
a9:6f:16:74:87:35:50:55:a9:0e:73:d0:e8:6b:08:78:9b:c1:
aa:f1:e3:9c:e3:b2:93:5d:33:93:62:64:82:d8:9a:1a:5c:02:
27:6f:ce:e8:b9:56:dd:89:b4:70:b7:de:72:f5:9f:9b:7c:34:
cb:41:e7:eb:3d:6e:5c:c2:cd:ca:80:e3:b5:f9:0a:d9:a8:34:
8d:df:4b:86:26:27:d3:f1:94:1d:23:a7:41:1f:41:b5:29:88:
07:81:f5:e5:e5:63:af:e3:96:91:e8:58:78:7c:73:27:b8:58:
ae:1d:b2:2a:b5:37:2e:1b:22:f8:87:d5:e6:8d:01:b0:20:d2:
8c:73:dd:fa:5c:55:3c:48:ef:b9:ec:ef:18:c6:8c:58:e2:47:
77:59:d2:db:22:08:0d:a3:20:bd:e3:3b:61:74:f3:1c:29:51:
ff:ee:d7:14:ec:78:b1:e6:ea:bc:7a:9d:d2:13:a7:61:0f:3f:
8f:a1:d0:2a:71:76:e0:81:17:60:01:6e:99:fe:58:c4:26:e8:
75:08:0c:5b:70:d9:66:43:39:6c:14:52:63:54:0f:02:4b:d5:
10:ee:55:77:d1:9e:d7:f0:6f:de:70:37:fd:6f:99:37:91:c2:
a6:7a:17:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:14:49 2026 by rpki-client