Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/voVDglOFzd-p4BOp6tFTrC1CE8s.roa
File: voVDglOFzd-p4BOp6tFTrC1CE8s.roa (raw, json)
Hash identifier: NsqniyY/BH/XLSYta9p/yO/ulZrFj6i1D4whYhkZ8UU=
Subject key identifier: BE:85:43:82:53:85:CD:DF:A9:E0:13:A9:EA:D1:53:AC:2D:42:13:CB
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A17A1FC79B7952CF76BBAF57A86D9DC44C
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/voVDglOFzd-p4BOp6tFTrC1CE8s.roa
Signing time: Mon 26 Oct 2026 21:31:05 +0000
ROA not before: Mon 26 Oct 2026 21:31:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 87.232.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Oct 2026 07:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:1f:c7:9b:79:52:cf:76:bb:af:57:a8:6d:9d:c4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Oct 26 21:31:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be8543825385cddfa9e013a9ead153ac2d4213cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:24:44:a3:05:99:a2:ad:3d:fd:0e:00:05:
11:a2:38:17:f8:2f:2e:67:ef:45:8c:33:af:50:e8:
b6:53:ce:b7:5d:54:d4:2a:33:cb:06:b2:7c:86:31:
a0:32:3a:02:3f:b6:7a:63:4f:6d:fb:e7:76:aa:5d:
98:09:a2:69:1a:2a:8f:cb:cf:5f:fe:70:22:40:37:
48:06:23:b5:5f:75:25:df:85:66:65:76:25:25:a8:
b2:d5:1a:23:54:a4:f0:a7:03:83:61:f4:d5:9b:da:
00:c7:31:e2:51:46:6d:66:ce:5d:02:23:f6:39:7f:
12:fe:48:e6:d2:81:3f:7b:13:52:eb:5c:82:98:ad:
4f:ea:dd:97:61:c5:8e:e0:bf:66:81:31:cd:b2:5e:
18:b9:08:6c:4d:0c:10:c8:5b:0f:55:2d:17:5f:38:
4f:4a:32:4a:8d:3b:c7:f1:73:e5:47:16:1d:1c:51:
60:c4:6a:49:65:d8:79:e8:de:70:dd:b2:49:d9:ce:
36:89:04:e5:12:9a:af:ba:f0:93:c1:73:77:00:38:
1c:84:65:a2:d1:58:50:e9:a7:af:ea:7f:8e:ba:53:
33:60:48:86:51:8d:b9:9a:6c:62:63:81:18:12:04:
b7:93:74:0c:99:ca:5e:75:bd:04:e5:a3:47:d3:55:
88:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:85:43:82:53:85:CD:DF:A9:E0:13:A9:EA:D1:53:AC:2D:42:13:CB
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/voVDglOFzd-p4BOp6tFTrC1CE8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.112.0/24
Signature Algorithm: sha256WithRSAEncryption
69:8a:c2:3b:1a:05:5c:35:35:2d:10:6f:fe:55:91:51:91:5d:
a9:34:f3:48:b7:21:4a:e6:0a:6d:98:bf:a3:32:dd:98:b0:dd:
4c:37:64:28:9c:06:4d:d2:b5:c7:ea:d7:6d:98:b4:85:fe:c0:
2e:af:31:c9:8a:5e:b1:95:33:1b:ef:61:49:51:46:fb:5d:05:
c6:97:89:48:de:d7:c4:2f:5d:9b:9f:cd:e2:b7:e7:e4:bc:dc:
b1:9b:b6:90:88:9e:61:55:bd:68:b7:0b:75:b4:36:72:2a:23:
9e:5a:ac:ce:9f:8b:76:c3:e1:96:33:46:08:1c:6e:c4:9b:ac:
1f:87:78:b8:79:6f:74:d6:2a:51:47:f1:a6:5f:7a:7a:3e:89:
a8:1c:e4:32:0b:1c:1d:ac:85:47:1b:ab:a0:cc:01:d6:4e:aa:
10:9d:24:03:f7:5c:c0:8e:2b:64:f8:ad:38:38:06:4e:73:70:
29:68:ad:e8:e0:d0:5d:db:cf:e7:8d:86:62:eb:d3:db:19:b4:
e3:cd:a0:50:c2:89:62:17:fe:cd:c2:20:60:06:ee:ff:50:01:
94:83:47:4a:af:aa:86:3b:40:d2:4d:23:39:d1:96:5d:01:9b:
23:76:50:60:fc:4e:a3:92:fc:cd:53:15:eb:44:8d:51:bc:3c:
d1:9e:42:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF6H8ebeVLPdruvV6htncRMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3
OGE1NzkwHhcNMjYxMDI2MjEzMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTg1NDM4MjUzODVjZGRmYTllMDEzYTllYWQxNTNhYzJkNDIxM2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+wkRKMFmaKtPf0OAAURojgX+C8u
Z+9FjDOvUOi2U863XVTUKjPLBrJ8hjGgMjoCP7Z6Y09t++d2ql2YCaJpGiqPy89f
/nAiQDdIBiO1X3Ul34VmZXYlJaiy1RojVKTwpwODYfTVm9oAxzHiUUZtZs5dAiP2
OX8S/kjm0oE/exNS61yCmK1P6t2XYcWO4L9mgTHNsl4YuQhsTQwQyFsPVS0XXzhP
SjJKjTvH8XPlRxYdHFFgxGpJZdh56N5w3bJJ2c42iQTlEpqvuvCTwXN3ADgchGWi
0VhQ6aev6n+OulMzYEiGUY25mmxiY4EYEgS3k3QMmcpedb0E5aNH01WIEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL6FQ4JThc3fqeATqerRU6wtQhPLMB8GA1UdIwQY
MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt
YTM5YWMyNTM5ZmM1LzEvdm9WRGdsT0Z6ZC1wNEJPcDZ0RlRyQzFDRThzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1
LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+hwMA0G
CSqGSIb3DQEBCwUAA4IBAQBpisI7GgVcNTUtEG/+VZFRkV2pNPNItyFK5gptmL+j
Mt2YsN1MN2QonAZN0rXH6tdtmLSF/sAurzHJil6xlTMb72FJUUb7XQXGl4lI3tfE
L12bn83it+fkvNyxm7aQiJ5hVb1otwt1tDZyKiOeWqzOn4t2w+GWM0YIHG7Em6wf
h3i4eW901ipRR/GmX3p6PomoHOQyCxwdrIVHG6ugzAHWTqoQnSQD91zAjitk+K04
OAZOc3ApaK3o4NBd28/njYZi69PbGbTjzaBQwoliF/7NwiBgBu7/UAGUg0dKr6qG
O0DSTSM50ZZdAZsjdlBg/E6jkvzNUxXrRI1RvDzRnkK3
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:38 2026 by rpki-client