Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HF3jL7DEgur9JDqME0MJ96UwDZA.roa
File: HF3jL7DEgur9JDqME0MJ96UwDZA.roa (raw, json)
Hash identifier: oAwCPeYWfVZWI1LChvTRyzbDDg70U+QExmFme59wBxI=
Subject key identifier: 1C:5D:E3:2F:B0:C4:82:EA:FD:24:3A:8C:13:43:09:F7:A5:30:0D:90
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A139157B6A2AD58ED8A3A13CB3CB802116
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HF3jL7DEgur9JDqME0MJ96UwDZA.roa
Signing time: Wed 14 Oct 2026 06:24:31 +0000
ROA not before: Wed 14 Oct 2026 06:24:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213495
IP address blocks: 5.175.183.0/24 maxlen: 24
5.175.188.0/24 maxlen: 24
5.175.234.0/24 maxlen: 24
5.231.56.0/24 maxlen: 24
5.231.106.0/24 maxlen: 24
77.90.40.0/24 maxlen: 24
85.93.31.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Oct 2026 04:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:15:7b:6a:2a:d5:8e:d8:a3:a1:3c:b3:cb:80:21:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 14 06:24:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c5de32fb0c482eafd243a8c134309f7a5300d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:ee:6c:2e:83:3d:25:35:5f:c8:1c:c4:69:
0e:52:a2:a1:e9:d8:87:10:95:e9:3b:7a:b1:c9:fb:
a0:7f:e9:b7:f6:a8:03:71:ef:fe:e6:8e:e1:25:ea:
5b:16:ae:2c:cc:7e:2a:a0:ac:9a:e5:e0:4f:e8:49:
01:c7:d8:8c:70:a3:49:fc:4f:e2:87:e1:c5:bb:22:
8f:13:f0:a4:d0:a8:cb:6d:5d:80:62:2c:1b:3f:a6:
8d:65:13:a2:15:d9:f3:0c:a3:85:ae:8d:e3:bd:e4:
17:85:e9:29:e8:dc:ce:0b:e9:b3:32:f4:f5:7f:6b:
32:d6:62:ec:14:24:c8:96:0f:a3:77:97:7c:cc:44:
0b:e5:e6:56:a8:4f:4d:3d:2f:59:2e:7b:d0:9a:e2:
e6:32:9f:5d:ad:0e:fd:c5:3e:5c:2c:2e:0e:fe:cd:
51:8f:9e:e0:a4:44:28:8b:bd:52:26:cc:3f:5c:85:
1d:3b:e2:78:bc:a9:91:63:32:91:7e:20:0c:3d:05:
d5:ae:37:dd:ee:73:9e:42:e3:a4:44:ab:c8:ad:21:
b7:6b:36:fc:81:7d:24:79:cf:3e:24:59:72:2e:23:
ef:cd:d2:07:07:f4:3d:2a:43:b9:29:52:99:25:10:
3a:aa:92:a3:49:c2:6d:ae:71:08:32:63:a6:5f:c4:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5D:E3:2F:B0:C4:82:EA:FD:24:3A:8C:13:43:09:F7:A5:30:0D:90
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HF3jL7DEgur9JDqME0MJ96UwDZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.183.0/24
5.175.188.0/24
5.175.234.0/24
5.231.56.0/24
5.231.106.0/24
77.90.40.0/24
85.93.31.0/24
89.144.47.0/24
94.249.207.0/24
Signature Algorithm: sha256WithRSAEncryption
18:9d:7c:f6:89:19:96:e0:24:1f:1f:67:c5:f5:5a:0a:ee:ba:
9b:64:ad:f3:78:c3:21:5a:8c:1f:91:18:d2:f5:b7:38:7c:87:
cc:1a:d9:79:47:81:15:94:d0:07:09:06:80:67:d7:07:ea:d6:
d1:77:b7:e9:18:1d:3d:11:e8:89:c6:32:de:ad:68:a3:c5:ff:
88:4b:95:0d:7d:c3:9f:18:11:eb:96:68:a5:4a:2e:bf:9c:47:
ee:2a:68:5b:fd:1f:6e:b5:99:71:67:f0:02:f0:5e:49:94:e4:
1c:73:45:7a:84:4d:6e:c6:eb:2b:3e:4c:e3:86:47:d0:e7:7b:
ca:01:19:e3:b9:8f:25:b3:31:b3:d8:ae:51:a1:c3:3d:2e:73:
88:26:96:4f:64:b9:9f:e4:2b:95:41:74:0e:95:78:6f:17:02:
80:c2:3c:39:35:02:b8:86:62:32:b8:82:c0:98:04:81:7d:97:
77:50:78:f7:12:9c:76:b1:ea:a7:51:b3:df:09:b9:d4:ef:9f:
26:3e:f0:46:f3:4b:36:ec:1a:a7:21:70:23:f4:23:c6:0d:b0:
5b:4b:c2:a2:41:bd:1c:04:50:40:f0:76:08:51:90:a4:6e:87:
75:e4:da:65:e4:29:3c:84:87:6a:e9:81:8f:66:88:fe:ad:20:
de:a9:80:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 11:28:07 2026 by rpki-client