Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xYbCm0I-k-8BnoK3QfJNRnfN4X0.roa
File: xYbCm0I-k-8BnoK3QfJNRnfN4X0.roa (raw, json)
Hash identifier: jeNGMLeaKluC3rMTcxYid4zcRoh3eWG0aH4L4Klcc5E=
Subject key identifier: C5:86:C2:9B:42:3E:93:EF:01:9E:82:B7:41:F2:4D:46:77:CD:E1:7D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0DF7E0CEF8D678C6D4CB6738934BFBEE4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xYbCm0I-k-8BnoK3QfJNRnfN4X0.roa
Signing time: Sat 26 Sep 2026 20:52:55 +0000
ROA not before: Sat 26 Sep 2026 20:52:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219529
IP address blocks: 5.175.204.0/24 maxlen: 24
2a02:2fc0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 28 Sep 2026 17:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:7e:0c:ef:8d:67:8c:6d:4c:b6:73:89:34:bf:be:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 26 20:52:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c586c29b423e93ef019e82b741f24d4677cde17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:db:16:89:e6:c3:dc:7d:39:9f:ad:da:54:28:
aa:99:2a:77:9d:5b:4f:e8:18:e6:40:76:70:49:b0:
3f:ae:db:75:db:83:27:04:0b:5d:4b:4e:58:38:a1:
4e:cd:33:cd:47:d9:c6:80:4f:28:07:18:f2:cb:c8:
37:46:91:4d:77:af:20:66:ef:61:2d:59:2a:29:91:
b8:b2:df:e5:74:0f:51:eb:12:57:75:b1:98:79:57:
32:ef:ab:ba:ff:19:84:31:b9:f6:9c:e6:bf:53:0c:
3e:4a:19:40:97:81:10:07:7c:83:d0:09:8a:26:93:
3b:f8:58:d4:b3:70:0d:f8:01:72:92:80:43:3e:ac:
aa:f6:e7:2e:71:b6:2e:8c:f0:5d:01:39:28:bb:6e:
5d:b0:75:20:55:b2:45:1e:f6:1b:d8:db:49:2d:ef:
7c:43:3c:da:ca:80:0d:eb:d3:08:3f:58:ae:ef:30:
0f:3f:96:75:63:76:58:04:f7:82:7d:f5:b1:9a:18:
a0:69:79:85:ca:c8:57:00:ef:0e:05:15:d5:74:c3:
06:45:8a:90:7c:2d:d4:1c:60:20:3a:f0:03:76:ba:
9e:81:4f:fd:cf:d8:8a:5f:b2:ee:2a:73:e3:f9:6d:
54:c1:be:2c:9b:23:fb:01:7e:af:80:5f:df:6a:a8:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:86:C2:9B:42:3E:93:EF:01:9E:82:B7:41:F2:4D:46:77:CD:E1:7D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xYbCm0I-k-8BnoK3QfJNRnfN4X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.204.0/24
IPv6:
2a02:2fc0:2::/48
Signature Algorithm: sha256WithRSAEncryption
c0:af:f2:dc:f8:f9:6c:b2:64:fe:04:d9:40:68:95:c1:04:07:
88:ed:53:fa:ad:1c:d5:65:a2:5c:3b:b5:77:4a:7a:b3:3e:60:
a9:e4:6f:7e:dd:27:b5:be:6d:dd:d3:3c:8e:1d:cf:67:c2:0d:
c6:e1:ba:9a:29:e5:54:fa:03:9b:2b:6c:b6:9c:71:4e:fa:fa:
e2:4a:a5:85:22:b1:39:fc:f8:b0:cc:a3:cb:31:bd:ca:e3:be:
77:15:50:a4:f5:33:63:84:27:c0:88:09:7c:f2:f4:98:8e:6b:
e1:c8:6c:0f:ef:65:e1:a2:d7:59:6f:18:4e:d9:1e:0d:1a:59:
7f:dd:b5:ae:58:21:56:0f:2f:e8:79:10:43:bb:af:5f:de:cb:
0c:a6:36:da:67:9a:d2:ea:62:32:94:cb:6e:61:0b:18:6e:20:
05:48:7f:f8:7a:d1:4e:c2:38:5f:e0:af:50:15:d7:0d:0b:04:
87:06:21:8c:ad:0b:be:11:e5:43:21:ab:5d:6c:ef:33:5e:27:
bf:45:ad:a8:1a:7d:59:ed:a4:8d:d5:42:53:b2:04:81:d8:6e:
13:7a:bb:52:c6:ca:83:d4:f7:2a:f2:37:1d:fd:6c:f2:87:ed:
d0:cf:11:07:44:41:a7:43:0a:6c:a3:4a:7b:63:ba:a1:f4:c0:
8b:1b:ae:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:21:16 2026 by rpki-client