Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/tXOYIJMGLYCJWVhm5BqnulsetXg.roa
File: tXOYIJMGLYCJWVhm5BqnulsetXg.roa (raw, json)
Hash identifier: +5CDe7/msnVQ2z/Oqs8VOYDgpptfRaCDgdymX2H6M2g=
Subject key identifier: B5:73:98:20:93:06:2D:80:89:59:58:66:E4:1A:A7:BA:5B:1E:B5:78
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A15078C1047807AA1ABBEF80B698C5522D
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/tXOYIJMGLYCJWVhm5BqnulsetXg.roa
Signing time: Sun 18 Oct 2026 19:24:13 +0000
ROA not before: Sun 18 Oct 2026 19:24:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.239.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Oct 2026 15:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:78:c1:04:78:07:aa:1a:bb:ef:80:b6:98:c5:52:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Oct 18 19:24:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b573982093062d8089595866e41aa7ba5b1eb578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:5f:52:b7:44:75:86:66:56:ff:31:ed:7d:
67:03:7e:a4:04:96:1c:48:89:58:a1:8c:6b:55:d0:
22:a9:43:a8:c6:7f:1a:26:53:18:bd:96:d2:66:8c:
30:ed:be:97:17:c6:45:a7:91:cd:81:da:e7:da:b5:
34:cf:fa:56:93:7e:d3:d9:72:4d:32:01:60:71:30:
f3:f8:44:d5:4b:86:20:36:41:70:25:93:da:03:89:
4c:42:b5:db:88:76:54:56:55:12:e8:a9:23:b4:5d:
c6:b6:fc:bd:1a:0d:8f:c6:7f:d2:cd:c3:c0:61:f4:
9a:26:4a:4a:6c:d4:90:97:2b:7f:1f:64:38:a1:21:
06:9b:53:e9:09:45:0c:d8:1c:dd:b9:f9:64:b6:6d:
2a:c9:07:e1:56:be:e9:83:d0:a7:27:72:2b:9f:9d:
0c:ac:03:11:0e:0c:99:0e:42:1c:e9:28:51:a5:4d:
1e:d1:71:37:65:a4:de:b3:63:6d:4a:06:e3:8d:79:
de:d2:9c:b1:8a:c2:3a:83:04:13:a2:05:b6:62:9e:
8a:28:5f:27:c9:eb:43:51:ff:43:06:b3:00:e2:ef:
52:bc:11:22:32:be:a6:26:64:d8:91:45:92:26:1c:
a3:fc:81:c8:8f:45:89:1f:24:d5:a2:f7:af:1e:e0:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:73:98:20:93:06:2D:80:89:59:58:66:E4:1A:A7:BA:5B:1E:B5:78
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/tXOYIJMGLYCJWVhm5BqnulsetXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2e:39:f6:39:fa:bf:1a:ad:ff:f9:47:d1:8c:37:84:96:ac:
de:b7:5f:9c:76:89:55:8f:13:30:b4:c5:a3:ff:c6:ac:69:12:
e0:71:91:ec:13:f7:99:44:50:00:f6:d2:fc:5b:87:59:1f:9d:
29:18:08:18:85:a1:a4:33:d8:a7:c7:87:bd:71:86:04:b8:c8:
ea:1d:6a:42:00:83:94:00:91:3e:e5:eb:43:ba:02:d8:64:e7:
b5:04:c6:d4:00:16:5d:08:10:32:ed:ba:b4:b9:49:a6:2c:73:
a1:55:8e:02:d6:17:12:63:77:1a:54:af:2c:af:43:f9:3b:a0:
b2:1c:e4:7d:47:eb:af:6e:bb:88:09:c4:fc:5e:43:62:b1:e3:
a6:f8:ab:98:fe:94:36:a3:9f:ba:a3:fd:1a:d8:60:e0:34:97:
af:33:7b:96:56:d1:47:7a:fd:ae:c5:e3:48:91:ce:19:78:13:
c4:65:3c:0a:8f:4d:d5:e9:c5:dd:5c:2f:65:41:b1:1b:a3:7b:
75:3a:f7:9e:15:3b:4d:5d:b1:cf:ea:e1:c6:53:62:1c:88:23:
2f:c8:c7:89:12:14:65:f6:83:06:f2:9d:1b:99:e7:f0:da:f6:
8e:46:55:9d:27:7c:8b:8d:cc:de:d4:79:b8:fb:2d:55:2a:a1:
06:dd:05:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:21 2026 by rpki-client