Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/Z5b87R7s_-RcsfQGAF_ZYGgsb0s.roa
File: Z5b87R7s_-RcsfQGAF_ZYGgsb0s.roa (raw, json)
Hash identifier: a8OtWWXzJAHmM1efIQzoAnL8cnaJ87FuWTxL5ju6Cy4=
Subject key identifier: 67:96:FC:ED:1E:EC:FF:E4:5C:B1:F4:06:00:5F:D9:60:68:2C:6F:4B
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A10E7A931E77F5232D5464E5FE764F5E97
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/Z5b87R7s_-RcsfQGAF_ZYGgsb0s.roa
Signing time: Mon 05 Oct 2026 23:51:16 +0000
ROA not before: Mon 05 Oct 2026 23:51:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a10:fa80:3::/48 maxlen: 48
2a10:fa80:19::/48 maxlen: 48
2a10:fa80:1d::/48 maxlen: 48
2a10:fa81:1800::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 12 Oct 2026 06:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:7a:93:1e:77:f5:23:2d:54:64:e5:fe:76:4f:5e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Oct 5 23:51:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6796fced1eecffe45cb1f406005fd960682c6f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:45:9a:03:cd:56:2c:40:df:c9:8b:03:23:
80:d5:99:4e:fe:b6:66:1b:4a:1a:56:86:39:96:07:
ba:76:c4:99:68:f2:37:04:ee:22:2b:75:53:ca:32:
86:ea:fc:02:69:25:7f:68:fa:a5:2b:53:9f:6a:c1:
43:d6:12:f0:6d:c0:f2:08:06:fc:b0:52:04:08:5c:
98:6f:bf:a3:a8:da:1a:12:c2:41:09:98:03:2d:d8:
04:d1:39:8c:ec:67:03:51:2a:e6:aa:e6:ee:db:22:
af:24:34:30:c8:03:d6:6c:d7:e2:68:fd:d4:89:71:
6f:db:8d:a1:5c:50:27:73:d1:f3:c1:8d:03:4e:f4:
94:d9:57:84:98:34:bd:da:1a:d6:f1:06:02:32:3d:
5a:14:42:d5:7d:54:f6:4d:4e:f0:25:14:46:8c:f5:
84:a6:97:4f:ef:7a:66:da:c8:b0:63:75:d3:34:3b:
7b:0b:1a:53:ea:f1:f1:77:89:bc:6c:14:e5:e5:a9:
fb:02:04:cc:90:37:3b:5a:c7:f7:98:50:4e:15:1c:
27:99:1d:8f:50:f9:c9:8e:7f:6e:6c:60:bb:d4:e5:
57:8b:79:fd:d7:7e:44:47:2d:46:b7:f9:ba:d8:f6:
80:30:9f:65:64:a2:f2:90:de:7d:c4:d2:f6:cd:36:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:96:FC:ED:1E:EC:FF:E4:5C:B1:F4:06:00:5F:D9:60:68:2C:6F:4B
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/Z5b87R7s_-RcsfQGAF_ZYGgsb0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:3::/48
2a10:fa80:19::/48
2a10:fa80:1d::/48
2a10:fa81:1800::/40
Signature Algorithm: sha256WithRSAEncryption
73:f0:26:97:71:54:ba:e2:21:34:29:b3:6d:4b:92:40:7f:82:
76:c5:5d:73:0c:58:86:fc:87:26:83:ea:9e:3e:8a:7a:2f:44:
cf:64:e4:91:62:a4:70:58:28:89:38:91:7c:dc:d6:55:e1:93:
cd:7b:7a:81:6f:ce:13:16:ac:5c:c8:c6:03:4e:19:ba:ee:ec:
f8:59:c4:2e:a7:57:1a:53:d6:11:f9:3d:05:ae:d3:2f:1e:5a:
1b:5c:c0:f6:11:20:db:c2:62:2b:21:04:97:59:52:16:b8:19:
9d:eb:eb:41:9d:89:44:a8:c8:d4:b1:94:78:1a:f4:4c:92:8c:
37:5b:28:14:28:aa:21:3a:68:9c:9e:69:0c:60:56:4c:06:7c:
c2:17:17:7c:22:9f:09:82:11:2b:6e:1f:67:25:14:f7:4e:1e:
b0:e5:0b:e9:18:1e:2a:a0:3b:89:04:04:6b:a3:ad:0f:23:18:
73:32:3d:30:7a:01:44:ba:ae:55:cf:e5:71:2a:4a:b0:32:5c:
a7:67:0f:57:90:32:14:8d:fd:58:72:56:27:1a:f3:be:1b:dd:
59:d1:f7:a1:11:c6:8b:cd:76:c9:a8:4d:ce:04:17:ce:15:64:
92:dc:96:21:f7:48:81:95:66:fa:b1:fe:e0:d9:ff:6c:fa:fd:
3e:fe:23:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 13:23:44 2026 by rpki-client