Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/bd9meoVRVsoGRpmrtv6r2FY6vUs.roa
File: bd9meoVRVsoGRpmrtv6r2FY6vUs.roa (raw, json)
Hash identifier: QKSqFz83HLFoMWuJv5WI4OLjuPDDcqe3jRtpz3GGoXs=
Subject key identifier: 6D:DF:66:7A:85:51:56:CA:06:46:99:AB:B6:FE:AB:D8:56:3A:BD:4B
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0821D68B73478B718980336D90BF7BC0A
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/bd9meoVRVsoGRpmrtv6r2FY6vUs.roa
Signing time: Tue 08 Sep 2026 17:42:40 +0000
ROA not before: Tue 08 Sep 2026 17:42:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 5.100.231.0/24 maxlen: 24
85.92.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Sep 2026 09:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:1d:68:b7:34:78:b7:18:98:03:36:d9:0b:f7:bc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 8 17:42:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ddf667a855156ca064699abb6feabd8563abd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ff:3e:59:57:9a:3d:48:d2:f6:77:e6:cc:5d:
50:cc:68:55:bb:a3:ad:da:ea:c5:ba:1c:7c:73:b1:
bd:67:50:72:1e:aa:5b:c0:a0:79:cf:c9:f8:a3:b0:
73:d2:34:80:51:0e:ee:ea:17:b3:93:39:0a:f5:ca:
08:42:0e:73:ba:5e:b1:83:4e:ea:ef:61:68:de:80:
2b:23:10:9f:bb:d1:cd:5b:e2:d6:07:37:cc:68:b7:
f5:d0:2d:9d:b4:e4:88:95:c1:5c:cc:a6:d6:52:e8:
83:6e:e6:0e:88:74:b9:2f:b6:0b:3d:86:d9:6a:f2:
87:f9:29:e1:44:d8:2c:39:f2:8d:f3:5b:e0:80:d9:
37:15:d0:41:cc:03:63:b2:a8:94:c3:13:1e:48:b3:
c9:35:92:5e:23:a3:4f:7f:d0:98:db:46:e2:47:87:
31:af:d1:15:b5:9a:22:9a:2e:78:41:4e:4c:86:64:
53:42:ed:61:5b:6b:a9:fe:d2:66:12:0f:a9:2b:d6:
bc:3a:1b:69:87:79:6c:95:2f:0b:5b:27:b7:d6:f8:
39:7b:7b:e6:3d:78:ec:3a:83:8c:f7:f1:50:fe:0f:
cf:f9:a1:fc:8a:00:35:30:8c:95:0f:fd:df:9b:12:
f8:e3:a2:e2:76:75:a8:7b:5a:50:10:3b:42:fd:6d:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DF:66:7A:85:51:56:CA:06:46:99:AB:B6:FE:AB:D8:56:3A:BD:4B
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/bd9meoVRVsoGRpmrtv6r2FY6vUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.231.0/24
85.92.142.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f3:18:e1:4a:71:4f:a1:dc:f1:31:db:a2:6d:1e:06:60:4c:
fc:4a:1e:4a:5c:f7:1d:aa:34:a3:46:ff:f3:9d:2b:b3:ce:19:
0a:54:b6:b1:6c:3b:5e:b3:7a:44:7d:33:3e:d3:0c:62:43:e0:
89:ec:89:83:5f:d4:db:58:73:5e:68:7a:3a:e9:d0:ed:fd:60:
f4:54:cd:42:19:7f:c6:05:e3:57:8b:14:69:c8:ed:29:54:af:
fa:88:4e:52:27:f5:3b:74:45:13:5b:7b:54:a3:bb:b1:a4:88:
da:5b:bf:cb:4f:70:41:58:de:ec:b8:de:7a:ea:ad:0f:bd:ee:
09:cb:a3:ab:4e:4d:18:69:bb:5c:89:c9:e4:a2:66:6b:df:53:
e5:0d:d2:2d:8d:14:d2:4a:ac:bf:cb:ea:5f:51:fe:6e:94:49:
5c:aa:7c:22:97:75:1c:bf:2e:b5:ac:80:64:15:42:21:c3:a8:
63:39:6b:09:6c:98:e7:5f:6b:f8:6a:a9:4c:ff:ff:87:14:e8:
af:95:46:2c:60:05:78:4a:a4:28:10:89:ea:28:9e:f3:51:53:
9e:3a:8c:54:fb:de:1c:89:1d:4d:cd:f0:f5:06:d3:6f:4f:8b:
e0:e6:04:5c:3f:e0:a4:80:5e:78:25:9a:72:c8:a5:58:90:6c:
b5:a8:b0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:02:51 2026 by rpki-client