Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0kfx-GQO_Qt0_v58m-MOo2ykVOU.roa
File: 0kfx-GQO_Qt0_v58m-MOo2ykVOU.roa (raw, json)
Hash identifier: iA4jEDJogw23vxQu3m/bSJ96UjQTsu7ude3QcRNPJ78=
Subject key identifier: D2:47:F1:F8:64:0E:FD:0B:74:FE:FE:7C:9B:E3:0E:A3:6C:A4:54:E5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019FDC43E4C89EB45859728973A5957729C3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0kfx-GQO_Qt0_v58m-MOo2ykVOU.roa
Signing time: Fri 07 Aug 2026 12:47:44 +0000
ROA not before: Fri 07 Aug 2026 12:47:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 163.5.49.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Aug 2026 14:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:43:e4:c8:9e:b4:58:59:72:89:73:a5:95:77:29:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 7 12:47:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d247f1f8640efd0b74fefe7c9be30ea36ca454e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:92:f0:ae:b7:d3:1d:81:b1:9f:f7:e9:04:
6a:ec:95:04:e1:f4:14:14:f5:8b:8b:44:75:82:12:
7e:f6:53:77:2d:0a:69:b6:f7:63:4f:32:c5:3c:4e:
cf:72:6b:56:36:4b:ef:09:f5:85:81:3b:20:c0:5b:
0f:09:9e:00:ae:b8:0f:4e:a0:87:ad:28:6d:b7:b5:
79:11:6e:8e:c5:fe:b6:73:c8:a3:73:9f:e6:6c:f8:
5f:e1:56:d0:10:f0:df:3d:df:2b:73:bc:37:2c:e1:
ff:f9:76:66:01:30:74:d1:cf:25:10:bb:14:18:32:
c0:c7:16:06:cd:a3:f6:7a:d0:0e:ef:7f:33:db:67:
72:ea:82:88:8a:9f:30:f0:d7:84:ee:93:94:0f:3e:
d0:11:63:f4:26:25:0e:68:fd:f8:b1:85:89:7e:6d:
19:8d:d2:cb:02:95:17:bb:d1:84:1d:28:75:13:91:
38:52:15:d2:66:14:96:db:5e:88:7f:20:39:3a:68:
e0:22:e2:fd:a2:d8:94:34:a2:a5:5c:8b:3b:cb:91:
ec:b7:30:03:d3:2a:59:b1:02:fb:36:2f:7a:d5:50:
e9:e3:94:3b:5f:21:e4:1a:a0:9f:d5:14:9e:da:e6:
eb:4d:bd:ed:91:2b:01:45:fb:5c:f8:9f:8f:ed:f5:
ca:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:47:F1:F8:64:0E:FD:0B:74:FE:FE:7C:9B:E3:0E:A3:6C:A4:54:E5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0kfx-GQO_Qt0_v58m-MOo2ykVOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.49.0/24
163.5.117.0/24
163.5.119.0/24
163.5.130.0/24
163.5.161.0/24
163.5.204.0/24
163.5.206.0/24
163.5.226.0/24
Signature Algorithm: sha256WithRSAEncryption
04:fb:39:9b:3b:e0:16:fe:3c:08:a3:b0:83:6c:3c:85:5b:91:
4c:e7:45:87:66:0c:ed:fd:5f:3a:20:71:a5:84:14:25:f1:26:
f5:5e:a8:8b:3e:a8:3f:29:d0:34:b3:7c:f2:e8:e8:d0:b3:73:
95:54:9f:19:6f:76:58:c6:2a:a7:72:78:b2:83:4f:ab:7e:71:
b2:6e:b8:67:61:f1:2c:72:4e:04:8f:89:81:30:94:c1:42:03:
49:b9:a1:2d:35:94:a7:0e:99:35:ed:c3:2f:73:7a:97:dd:cb:
fa:17:e3:71:e9:0d:bc:fd:f7:13:c2:84:10:3c:1e:5d:0f:12:
e8:4e:2a:eb:8a:5b:38:f9:35:a0:df:eb:f2:b9:ed:4b:78:ff:
56:15:0a:1c:de:c4:8b:f1:4d:48:2d:9f:c2:87:f5:a9:0a:00:
9f:d0:f5:f7:3d:98:5a:ab:a4:3c:21:c9:f3:da:37:78:5d:71:
8a:51:89:06:60:dd:17:fd:12:5d:12:11:9d:be:11:68:12:bc:
5d:1a:42:ae:1b:84:d9:bd:88:00:79:12:7d:c6:9d:c5:c1:d5:
4d:83:e6:2c:24:03:e6:6f:bb:67:d5:6a:54:1a:63:5b:51:dd:
10:2f:aa:10:ab:d4:29:9b:d7:d4:35:e3:94:11:e2:6b:2b:01:
47:9d:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 20:37:17 2026 by rpki-client