Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/518ZhOvkdvUpVaRg_-hIfAaFKpQ.roa
File: 518ZhOvkdvUpVaRg_-hIfAaFKpQ.roa (raw, json)
Hash identifier: +pBDpd6PZ9JkdPLxYzGpD143adYJhFPUm/vIM7Kil9I=
Subject key identifier: E7:5F:19:84:EB:E4:76:F5:29:55:A4:60:FF:E8:48:7C:06:85:2A:94
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019FDC06A8C6ABEAF1C73FA52F9EB96185B8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/518ZhOvkdvUpVaRg_-hIfAaFKpQ.roa
Signing time: Fri 07 Aug 2026 11:40:51 +0000
ROA not before: Fri 07 Aug 2026 11:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 163.5.46.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Aug 2026 13:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:06:a8:c6:ab:ea:f1:c7:3f:a5:2f:9e:b9:61:85:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 7 11:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e75f1984ebe476f52955a460ffe8487c06852a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:f4:c3:82:f6:a5:cc:3e:00:fa:d3:a4:9a:
d7:37:33:09:36:30:8a:7c:b9:c5:ce:a1:b5:ca:39:
9f:58:d7:27:4a:57:b0:13:67:a4:6f:e2:10:c1:a1:
7d:f2:e4:65:9c:53:d2:d2:0a:3e:61:f6:ca:f9:a6:
56:bb:f2:7b:31:58:8f:99:71:be:aa:68:07:56:cc:
45:fc:51:08:37:db:a5:f0:f9:41:ee:d3:39:26:6e:
12:9b:b7:0e:08:ac:97:f5:87:28:4c:fd:0e:63:c0:
ee:18:ec:32:98:fd:f7:db:e6:b0:71:4f:e1:f1:9d:
72:36:a1:bc:3b:6e:3c:09:8d:12:df:b5:c4:68:e0:
a6:fd:56:9a:3a:56:e4:36:6c:c1:3f:0d:96:f4:fe:
1c:04:b8:55:f7:e6:47:bb:7b:02:f1:04:1e:41:72:
c6:1c:a5:35:0b:a9:db:a0:1b:d2:ac:ba:63:2a:6c:
d4:e5:d7:1b:ce:a6:be:1a:98:6d:cd:d1:71:24:40:
b1:70:00:85:6e:0b:9e:8c:09:3c:40:80:d1:ff:22:
ef:eb:c9:2a:f9:c1:10:34:bb:79:15:48:13:03:b0:
0e:62:6f:12:08:b4:ab:a8:ce:a2:cb:d7:ba:0f:ba:
e7:fc:9a:0f:c5:b0:d9:0b:40:80:5c:08:a3:d5:89:
dd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5F:19:84:EB:E4:76:F5:29:55:A4:60:FF:E8:48:7C:06:85:2A:94
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/518ZhOvkdvUpVaRg_-hIfAaFKpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.46.0/24
163.5.71.0/24
163.5.82.0/24
163.5.101.0/24
163.5.223.0/24
163.5.227.0/24
163.5.247.0-163.5.248.255
Signature Algorithm: sha256WithRSAEncryption
a6:51:37:3f:0e:7d:e2:ec:2b:d2:5d:10:e5:91:d2:33:34:47:
6f:2a:06:ba:0d:93:51:62:05:0b:a1:b5:39:8d:c8:27:64:52:
77:f8:5c:90:d3:32:a9:22:97:44:c0:7d:b4:1e:87:09:56:d9:
a1:7f:ef:35:f9:d7:0a:49:af:37:e1:8c:c9:d0:f7:8e:e9:b7:
29:5a:92:18:b4:94:b8:ef:ba:b4:04:28:21:6d:9d:9b:4c:42:
b8:c4:fb:e3:15:79:52:3e:8e:0f:a6:a7:4a:58:ad:84:7b:7f:
c0:ae:42:9a:a4:f4:d6:2b:4b:ef:f5:b9:8f:02:83:8d:b7:41:
28:83:01:1c:5e:e1:6f:43:10:2a:ef:e3:94:52:1b:75:8b:5d:
d9:1e:31:40:17:5d:47:8c:7a:75:7e:95:3b:0b:3b:9b:db:b1:
a2:50:db:db:e2:50:86:e2:69:e5:4f:b1:60:55:9d:88:0e:c7:
93:a6:00:ab:79:66:4e:2d:42:34:8c:db:60:ca:51:06:08:52:
92:e5:ad:40:e6:e1:57:9a:ca:c5:12:c1:72:34:c2:64:9e:e6:
68:7c:c9:c1:31:d3:0a:01:d9:73:02:a0:d1:5e:3f:ec:bf:b3:
7a:1e:7e:e5:39:c7:3f:39:92:03:b5:d4:b4:96:ac:e9:71:08:
d9:82:74:85
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZ/cBqjGq+rxxz+lL565YYW4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwODA3MTE0MDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzVmMTk4NGViZTQ3NmY1Mjk1NWE0NjBmZmU4NDg3YzA2ODUyYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG70w4L2pcw+APrTpJrXNzMJNjCK
fLnFzqG1yjmfWNcnSlewE2ekb+IQwaF98uRlnFPS0go+YfbK+aZWu/J7MViPmXG+
qmgHVsxF/FEIN9ul8PlB7tM5Jm4Sm7cOCKyX9YcoTP0OY8DuGOwymP332+awcU/h
8Z1yNqG8O248CY0S37XEaOCm/VaaOlbkNmzBPw2W9P4cBLhV9+ZHu3sC8QQeQXLG
HKU1C6nboBvSrLpjKmzU5dcbzqa+GphtzdFxJECxcACFbguejAk8QIDR/yLv68kq
+cEQNLt5FUgTA7AOYm8SCLSrqM6iy9e6D7rn/JoPxbDZC0CAXAij1YnduQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFOdfGYTr5Hb1KVWkYP/oSHwGhSqUMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvNTE4WmhPdmtkdlVwVmFSZ18taElmQWFGS3BRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAowUuAwQA
owVHAwQAowVSAwQAowVlAwQAowXfAwQAowXjMAwDBACjBfcDBACjBfgwDQYJKoZI
hvcNAQELBQADggEBAKZRNz8OfeLsK9JdEOWR0jM0R28qBroNk1FiBQuhtTmNyCdk
Unf4XJDTMqkil0TAfbQehwlW2aF/7zX51wpJrzfhjMnQ947ptylakhi0lLjvurQE
KCFtnZtMQrjE++MVeVI+jg+mp0pYrYR7f8CuQpqk9NYrS+/1uY8Cg423QSiDARxe
4W9DECrv45RSG3WLXdkeMUAXXUeMenV+lTsLO5vbsaJQ29viUIbiaeVPsWBVnYgO
x5OmAKt5Zk4tQjSM22DKUQYIUpLlrUDm4VeaysUSwXI0wmSe5mh8ycEx0woB2XMC
oNFeP+y/s3oefuU5xz85kgO11LSWrOlxCNmCdIU=
-----END CERTIFICATE-----
Generated at Tue Aug 25 19:44:16 2026 by rpki-client