Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/z7_S4F_dzwHqHaMx-h4A1toM2F8.roa
File: z7_S4F_dzwHqHaMx-h4A1toM2F8.roa (raw, json)
Hash identifier: kTeSEyeRidIBOHEJQciUCbD1kKW3InrrFx7b+0C4G7E=
Subject key identifier: CF:BF:D2:E0:5F:DD:CF:01:EA:1D:A3:31:FA:1E:00:D6:DA:0C:D8:5F
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A10E7A93CBB2D480CAAAEA496E7627F5C7
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/z7_S4F_dzwHqHaMx-h4A1toM2F8.roa
Signing time: Mon 05 Oct 2026 23:51:16 +0000
ROA not before: Mon 05 Oct 2026 23:51:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a10:fa80:3::/48 maxlen: 48
2a10:fa80:e::/48 maxlen: 48
2a10:fa80:f::/48 maxlen: 48
2a10:fa80:17::/48 maxlen: 48
2a10:fa80:19::/48 maxlen: 48
2a10:fa80:1d::/48 maxlen: 48
2a10:fa81:1800::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 12 Oct 2026 06:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:7a:93:cb:b2:d4:80:ca:aa:ea:49:6e:76:27:f5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Oct 5 23:51:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfbfd2e05fddcf01ea1da331fa1e00d6da0cd85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:cd:a6:be:c3:da:da:21:23:5a:5e:cd:c5:
12:98:2e:da:89:27:6a:04:f3:6b:2c:75:d2:a7:8e:
dd:8b:7d:8d:b7:03:7e:ab:e5:c4:09:14:95:0e:89:
32:a7:03:a9:ac:b2:b6:f1:d0:2d:b0:2c:7b:5c:a9:
4f:a3:ed:4b:e0:40:95:71:2d:4d:55:ab:77:54:60:
50:90:45:7e:2e:a8:f6:7c:eb:7b:88:8f:e9:93:5e:
82:91:bd:d3:9d:c3:07:7b:cc:52:ac:48:d6:23:42:
cf:30:4c:0c:07:e5:b4:f8:08:f8:fc:f2:a0:28:90:
f2:bb:cb:e4:a0:f0:81:45:46:9d:ef:26:40:f7:b1:
da:84:c8:25:bf:cf:ff:f8:6b:ec:c8:87:3b:ff:71:
d3:d2:89:61:4b:c5:a1:e4:3e:e0:33:35:dc:4d:b0:
75:d7:9d:4a:3a:6c:2a:a5:0c:99:47:71:d6:45:5d:
14:ac:f0:19:d9:bf:37:ab:13:c3:bb:2f:7c:a3:42:
30:0f:99:b5:27:20:3d:79:e5:a5:80:cd:cb:18:60:
df:0e:a0:2a:5e:e1:d2:ea:90:06:c1:54:fc:9b:c3:
c4:d4:3d:45:50:60:f3:b6:c4:3a:07:62:55:27:7e:
12:b9:99:09:35:28:f0:0a:00:77:2b:fd:87:09:8f:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BF:D2:E0:5F:DD:CF:01:EA:1D:A3:31:FA:1E:00:D6:DA:0C:D8:5F
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/z7_S4F_dzwHqHaMx-h4A1toM2F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:3::/48
2a10:fa80:e::/47
2a10:fa80:17::/48
2a10:fa80:19::/48
2a10:fa80:1d::/48
2a10:fa81:1800::/40
Signature Algorithm: sha256WithRSAEncryption
06:5a:1b:9b:0f:fd:f9:6d:26:f3:54:01:0c:99:80:9c:3a:e4:
e5:8c:d3:e9:35:fc:77:55:bf:46:9c:f4:f2:40:37:8b:38:3f:
3b:6a:79:16:1e:a4:b3:c6:85:c3:73:9d:3a:78:d8:36:ce:cb:
84:85:49:f9:9b:fd:04:8b:3c:bf:c5:f8:24:e0:0b:50:5e:0a:
64:80:c5:8f:e5:aa:8a:95:7f:ca:66:ae:b8:24:98:75:ab:c1:
9d:58:23:54:64:fc:85:fd:58:e7:08:2c:90:e2:c1:89:a9:69:
6c:af:d7:8f:83:6a:60:0f:91:1c:05:20:64:57:34:48:69:b1:
b0:9e:c3:c6:0b:8e:67:8a:c1:4a:ea:9c:cf:a3:5a:6b:01:d1:
da:f0:79:6a:1f:6a:a9:0e:5c:4b:62:46:cb:84:96:88:12:96:
9d:f4:32:22:61:87:98:c7:50:a1:29:29:73:70:2a:4d:80:29:
af:ca:1c:06:30:e4:46:fe:98:17:e2:9a:bd:dc:b5:60:ba:26:
40:c7:09:22:e0:8a:ed:f7:00:13:4f:93:51:31:8f:ba:34:26:
8a:2d:3d:50:16:37:a2:67:85:70:f6:87:fd:c8:f0:05:e7:0f:
04:23:de:e7:cb:8e:73:60:22:7d:ce:61:b5:b0:85:f2:a5:3e:
f2:b1:b6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:37:19 2026 by rpki-client