Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/42YQn31oAlnOH0UUCBQ7Bz5nfF4.roa
File: 42YQn31oAlnOH0UUCBQ7Bz5nfF4.roa (raw, json)
Hash identifier: qAAXeFxi5Kg1p3CIZ7BwtEjbS0dCEQtuUVrhi/DmLhU=
Subject key identifier: E3:66:10:9F:7D:68:02:59:CE:1F:45:14:08:14:3B:07:3E:67:7C:5E
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019FE9354AD32882011B4A8C6884A9D8E399
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/42YQn31oAlnOH0UUCBQ7Bz5nfF4.roa
Signing time: Mon 10 Aug 2026 01:06:51 +0000
ROA not before: Mon 10 Aug 2026 01:06:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 5.100.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Aug 2026 15:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e9:35:4a:d3:28:82:01:1b:4a:8c:68:84:a9:d8:e3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 10 01:06:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e366109f7d680259ce1f451408143b073e677c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:b7:4c:48:66:21:16:72:f6:99:1d:d0:97:
ba:4d:81:cf:ec:5e:89:24:d5:70:02:a4:38:d4:39:
cd:0e:19:ad:6c:ef:e4:bf:c7:5c:c4:e9:51:55:0f:
cc:9c:50:b7:07:16:c3:2b:62:c8:57:70:fb:1c:aa:
2c:7e:56:4f:d7:a0:02:94:8a:9c:be:57:9a:b2:d9:
c8:7f:ac:35:fb:5d:45:05:9f:e8:c0:c7:ff:6c:8c:
88:44:2d:38:f3:ad:13:5e:18:43:b3:5f:b8:58:6f:
8c:0e:9f:38:95:19:e9:09:eb:b3:79:db:f7:63:4b:
ef:26:05:aa:d5:ef:97:26:50:e5:e2:99:aa:14:aa:
45:43:64:dc:fd:26:db:bd:df:3e:8e:23:97:74:02:
1e:5c:bc:de:f2:95:dd:e5:49:94:10:fc:aa:70:50:
26:e8:ef:8a:0b:68:f1:d6:8a:9c:79:bb:43:dd:49:
3a:ad:1a:36:57:13:f9:50:a3:e1:45:e6:36:b0:81:
5d:cf:15:07:c3:33:a0:03:82:19:1f:c2:92:79:a5:
c6:23:e9:57:73:2a:1e:29:57:b0:05:6d:3f:82:19:
0c:4e:7f:19:68:49:b9:be:3f:65:26:65:7a:f5:0d:
75:45:c9:73:ff:c2:35:32:3f:36:f1:ce:8d:b8:0e:
0e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:66:10:9F:7D:68:02:59:CE:1F:45:14:08:14:3B:07:3E:67:7C:5E
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/42YQn31oAlnOH0UUCBQ7Bz5nfF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.231.0/24
Signature Algorithm: sha256WithRSAEncryption
af:db:90:a1:df:62:ec:80:1c:84:a3:9d:1a:dc:26:a2:23:8e:
38:63:fc:1d:6d:59:5c:65:f3:86:6e:62:d1:b4:12:80:3b:ef:
24:42:e8:52:bf:7c:ff:bf:56:fc:35:f1:c2:04:de:b4:a6:0b:
27:9d:a8:b0:8b:ee:e7:a0:b5:72:54:cd:04:c4:a6:c0:a3:51:
ab:61:a0:06:c4:bc:aa:32:55:55:ae:3d:4d:39:22:7c:55:cf:
90:a1:37:58:ae:54:ee:5a:28:4b:b7:53:45:a7:78:ab:20:a1:
aa:1c:19:c5:67:b9:1c:b3:06:26:f9:81:75:25:e9:b5:c8:8c:
97:f0:3c:42:79:83:0f:67:f3:37:83:d1:33:fb:8d:47:0b:22:
6d:65:83:d7:5b:3f:9c:da:72:e6:a5:3a:38:a8:48:9c:0d:d0:
91:0a:31:42:a5:30:26:42:86:74:2f:ad:ec:64:0d:84:33:fa:
84:ca:79:2d:70:ab:2d:f1:83:b7:5c:5a:cb:45:52:95:78:0f:
d9:28:61:cb:e4:2c:68:b2:4a:16:64:a4:87:d1:90:f9:f1:bb:
0f:96:ae:0e:d8:ac:bf:57:e3:80:d7:83:70:86:0c:21:e3:40:
38:09:02:6b:ab:70:ca:e1:b0:d6:ec:c6:8c:70:3a:09:fc:bb:
2e:14:da:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:55:37 2026 by rpki-client