Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6V89zN1_PL9ZQkYxdxvxvKXraqY.roa
File: 6V89zN1_PL9ZQkYxdxvxvKXraqY.roa (raw, json)
Hash identifier: IdNrrpDedWMywnZOyyZxqtZ4d/5YNdqurfa4L/ER/9A=
Subject key identifier: E9:5F:3D:CC:DD:7F:3C:BF:59:42:46:31:77:1B:F1:BC:A5:EB:6A:A6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E993077BCF12274C81B8DB33FE166B369
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6V89zN1_PL9ZQkYxdxvxvKXraqY.roa
Signing time: Fri 05 Jun 2026 19:09:10 +0000
ROA not before: Fri 05 Jun 2026 19:09:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.5.41.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jun 2026 07:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:30:77:bc:f1:22:74:c8:1b:8d:b3:3f:e1:66:b3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 5 19:09:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e95f3dccdd7f3cbf59424631771bf1bca5eb6aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:ea:f1:07:fa:16:7c:e8:63:21:a1:57:ce:
5a:2b:e3:67:42:c8:58:7f:41:6b:b7:a2:63:6c:31:
dd:d9:24:dc:7b:98:26:c5:ec:72:87:8c:32:dd:25:
08:4f:79:df:31:52:1f:eb:13:62:2e:03:89:e2:a1:
af:34:c8:82:78:40:84:fa:7d:4e:7d:b8:fa:6c:3a:
22:bb:f0:b4:ac:f6:d9:60:eb:65:44:86:91:1c:b6:
7a:9d:8b:9e:1a:3e:87:a2:f4:a7:5e:fe:04:2b:dc:
89:fe:5e:6f:33:1b:c9:d4:bc:3b:d5:9d:81:77:83:
2f:63:c9:17:cb:97:81:94:5f:32:6a:0c:5b:82:b3:
ab:7f:db:a9:4c:b8:46:0b:7d:34:67:1c:c5:70:19:
f7:ea:8a:23:f5:d9:19:ee:6f:96:da:66:38:75:77:
f5:d9:15:aa:a3:ba:f7:38:03:44:7b:f6:c1:b9:6a:
b1:c5:7e:26:60:cd:b9:33:fd:db:20:f2:9f:07:6c:
87:bb:78:00:e3:ec:2c:53:04:6f:88:90:46:ac:47:
4d:df:dd:ee:2e:00:81:ce:88:66:32:3a:55:5c:4d:
35:f7:bd:5e:9d:e9:b5:2c:5e:8f:3a:9b:99:12:6b:
1e:46:09:91:b9:49:0e:cb:21:f7:6b:77:98:d8:d7:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5F:3D:CC:DD:7F:3C:BF:59:42:46:31:77:1B:F1:BC:A5:EB:6A:A6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6V89zN1_PL9ZQkYxdxvxvKXraqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.41.0/24
163.5.59.0/24
163.5.66.0/24
163.5.112.0/24
163.5.120.0/23
163.5.125.0/24
163.5.129.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.196.0/24
163.5.215.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
00:dd:e9:a9:df:bf:aa:9a:cf:5a:8b:72:bb:dc:26:9d:bb:c7:
6f:61:9d:19:e1:c5:7f:88:dd:36:04:61:d0:58:2e:a8:8c:19:
e2:34:42:1d:b7:8d:fb:d8:f9:85:4d:60:d7:07:f2:f9:7c:ce:
fb:e6:3b:46:ae:d6:b4:f4:23:98:46:41:e1:9f:c3:09:f2:51:
5c:a3:3d:6d:18:c7:e2:3f:ac:f4:0c:9a:de:51:45:13:2f:5a:
9a:9b:b4:fa:5d:dd:f6:dd:16:49:ed:b3:33:b8:f1:63:8f:52:
65:bd:05:4b:2b:0f:88:cb:92:f7:d7:16:4e:a9:6c:cb:2d:72:
e3:2b:1b:dd:f9:4d:83:de:5f:61:51:22:3c:40:8e:9a:ca:0e:
dd:9e:6d:ad:0a:a1:38:c2:7e:bb:ef:a0:dc:29:80:6d:b1:65:
c0:44:08:5e:bc:8a:bc:a8:c7:5b:34:3d:88:30:ca:3e:1e:84:
0f:3c:16:1d:be:58:a1:70:87:ed:12:53:1b:41:c4:e6:ef:ea:
3d:71:0b:fb:0d:f4:48:0b:1b:69:5a:d6:a7:46:76:5a:c0:d9:
11:52:32:fd:6e:6e:38:84:88:47:ba:44:bd:b4:7c:d4:1a:3b:
a2:c7:8f:a1:14:27:aa:d8:e9:f6:6c:b9:8f:02:75:6a:cb:f2:
d8:28:83:85
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZ6ZMHe88SJ0yBuNsz/hZrNpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNjA1MTkwOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTVmM2RjY2RkN2YzY2JmNTk0MjQ2MzE3NzFiZjFiY2E1ZWI2YWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+jq8Qf6FnzoYyGhV85aK+NnQshY
f0Frt6JjbDHd2STce5gmxexyh4wy3SUIT3nfMVIf6xNiLgOJ4qGvNMiCeECE+n1O
fbj6bDoiu/C0rPbZYOtlRIaRHLZ6nYueGj6HovSnXv4EK9yJ/l5vMxvJ1Lw71Z2B
d4MvY8kXy5eBlF8yagxbgrOrf9upTLhGC300ZxzFcBn36ooj9dkZ7m+W2mY4dXf1
2RWqo7r3OANEe/bBuWqxxX4mYM25M/3bIPKfB2yHu3gA4+wsUwRviJBGrEdN393u
LgCBzohmMjpVXE01971enem1LF6POpuZEmseRgmRuUkOyyH3a3eY2NeJAwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFOlfPczdfzy/WUJGMXcb8byl62qmMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvNlY4OXpOMV9QTDlaUWtZeGR4dnh2S1hyYXFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAKMF
KQMEAKMFOwMEAKMFQgMEAKMFcAMEAaMFeAMEAKMFfQMEAKMFgQMEAKMFiwMEAKMF
jwMEAKMFkgMEAKMFlwMEAKMFoAMEAKMFpwMEAKMFsgMEAKMFxAMEAKMF1wMEAKMF
2gMEAKMF4AMEAKMF5AMEAKMF6QMEAKMF8TANBgkqhkiG9w0BAQsFAAOCAQEAAN3p
qd+/qprPWotyu9wmnbvHb2GdGeHFf4jdNgRh0FguqIwZ4jRCHbeN+9j5hU1g1wfy
+XzO++Y7Rq7WtPQjmEZB4Z/DCfJRXKM9bRjH4j+s9Aya3lFFEy9ampu0+l3d9t0W
Se2zM7jxY49SZb0FSysPiMuS99cWTqlsyy1y4ysb3flNg95fYVEiPECOmsoO3Z5t
rQqhOMJ+u++g3CmAbbFlwEQIXryKvKjHWzQ9iDDKPh6EDzwWHb5YoXCH7RJTG0HE
5u/qPXEL+w30SAsbaVrWp0Z2WsDZEVIy/W5uOISIR7pEvbR81Bo7osePoRQnqtjp
9my5jwJ1asvy2CiDhQ==
-----END CERTIFICATE-----
Generated at Fri Jun 26 21:04:27 2026 by rpki-client