Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/07KNfrzy_u2BOQxDpMA3rVZSXCI.roa
File: 07KNfrzy_u2BOQxDpMA3rVZSXCI.roa (raw, json)
Hash identifier: tzlC7b17a7wpYUzDm5boTC842mCASkxi/OShKwpVtGw=
Subject key identifier: D3:B2:8D:7E:BC:F2:FE:ED:81:39:0C:43:A4:C0:37:AD:56:52:5C:22
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A13FC15EFB39DF46C38DDC0BB3093366A2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/07KNfrzy_u2BOQxDpMA3rVZSXCI.roa
Signing time: Thu 15 Oct 2026 13:29:59 +0000
ROA not before: Thu 15 Oct 2026 13:29:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.5.28.0/24 maxlen: 24
163.5.56.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Oct 2026 10:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:c1:5e:fb:39:df:46:c3:8d:dc:0b:b3:09:33:66:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 15 13:29:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3b28d7ebcf2feed81390c43a4c037ad56525c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:84:97:e7:6a:3c:09:b3:8e:db:ef:b4:91:
9a:7a:ab:50:05:43:6d:89:38:c1:b1:32:aa:fe:97:
32:95:33:75:cc:b5:77:e7:77:56:f6:d4:69:4d:4e:
71:16:40:5b:7a:51:ef:4b:e0:60:ee:da:b2:17:10:
1e:e1:46:27:23:78:63:d9:cd:ee:eb:7a:5f:b4:2d:
60:71:07:7b:ba:2a:ee:d3:75:03:01:5c:dd:5c:89:
02:39:88:76:52:6c:06:66:fc:d1:81:86:7f:95:f4:
4f:4c:ea:57:7d:8b:db:32:53:39:68:e0:15:aa:f4:
af:8b:25:61:e6:c1:bc:6f:e0:88:76:2d:81:5c:3c:
f9:e2:a5:d6:54:19:c3:10:80:c0:b8:42:4a:99:93:
e6:e1:db:f2:43:0b:e5:7c:83:f8:ca:fb:3e:55:c8:
61:3d:ad:09:cd:82:e9:8b:63:6a:7a:7c:98:db:87:
7a:fa:56:68:57:d7:b1:37:fe:00:54:9b:65:a0:8f:
f1:79:62:d2:2f:ce:ab:44:bf:64:3a:7b:51:77:7f:
dc:f7:a9:b6:c7:21:08:eb:ce:9b:d0:3b:f4:f8:32:
6c:28:69:a5:4e:5e:2c:bc:66:d7:61:c0:70:aa:b9:
f5:87:07:35:9d:2d:ee:7a:a1:ca:b0:88:df:b5:d2:
df:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B2:8D:7E:BC:F2:FE:ED:81:39:0C:43:A4:C0:37:AD:56:52:5C:22
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/07KNfrzy_u2BOQxDpMA3rVZSXCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.28.0/24
163.5.56.0/24
163.5.59.0/24
163.5.112.0/24
163.5.114.0/24
163.5.121.0/24
163.5.129.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.160.0/24
163.5.165.0/24
163.5.167.0/24
163.5.178.0/24
163.5.187.0/24
163.5.196.0/24
163.5.209.0/24
163.5.216.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/23
163.5.241.0/24
163.5.250.0/24
Signature Algorithm: sha256WithRSAEncryption
43:65:64:b5:1b:53:a5:0b:85:5d:8d:7d:02:01:66:b5:cd:47:
57:e4:9d:9c:70:2f:02:4b:7b:74:2a:37:b1:44:58:e2:92:80:
76:25:8b:8b:5f:cf:20:e1:4d:a0:41:c9:7a:f1:55:bb:aa:b1:
95:e0:42:d9:b6:fc:57:23:dd:1f:30:9b:1e:63:0a:f8:dd:bb:
7f:f3:84:51:6c:a4:59:ca:e8:2a:3b:ec:1b:ff:bd:cb:e9:19:
d6:e3:5b:5a:ff:71:44:0a:c4:fa:18:fd:47:9e:a6:87:0e:09:
2a:50:23:04:0c:37:55:d4:2f:e1:0e:ef:2c:e3:bc:cd:15:97:
4f:cd:a9:e8:a7:17:8e:51:70:e1:38:da:cc:81:ce:f7:30:54:
09:17:5c:39:66:f9:0b:f7:67:d7:5e:70:a0:cf:de:7b:3f:56:
79:33:35:0e:55:88:ee:8b:87:ea:f6:dc:8c:ac:d1:ed:8f:84:
0d:11:76:b8:dd:1c:fc:54:6b:b2:e2:4a:2e:e4:12:8d:95:17:
22:55:53:62:8a:2f:12:88:df:70:79:3d:91:24:4e:e1:84:9e:
a5:9b:ce:ef:d8:f9:56:8e:05:51:cd:6e:01:e2:96:56:8f:32:
1b:e2:6a:f0:57:69:ef:86:b0:21:85:72:37:8b:61:db:f0:b7:
1d:08:68:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:41:06 2026 by rpki-client