Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UgJf5OBiY9NmZ6DFFRHEsQ376TI.roa
File: UgJf5OBiY9NmZ6DFFRHEsQ376TI.roa (raw, json)
Hash identifier: VUg0bjshk+sMWfNqrcuT8YzoAvt6hIYipaYmuM/jB8U=
Subject key identifier: 52:02:5F:E4:E0:62:63:D3:66:67:A0:C5:15:11:C4:B1:0D:FB:E9:32
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A154C240E03D74E605D8CF70BD59EC1403
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UgJf5OBiY9NmZ6DFFRHEsQ376TI.roa
Signing time: Mon 19 Oct 2026 15:22:59 +0000
ROA not before: Mon 19 Oct 2026 15:22:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213438
IP address blocks: 163.5.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Oct 2026 10:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:c2:40:e0:3d:74:e6:05:d8:cf:70:bd:59:ec:14:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 19 15:22:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52025fe4e06263d36667a0c51511c4b10dfbe932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:18:2f:cb:ba:ec:e7:e6:b1:11:ff:de:d9:
8c:e3:ce:09:6b:d0:8d:63:19:46:20:ca:b4:07:b7:
69:26:7d:ee:a3:c1:4e:79:fb:89:63:db:58:d7:47:
84:29:f9:74:fe:17:f9:78:dc:18:b4:b5:7d:d5:a3:
c4:d8:97:9c:38:93:09:87:95:b2:20:9e:11:7c:41:
9f:48:b6:98:3e:45:fe:38:30:b5:c8:f5:12:ab:d4:
e8:30:3c:f1:b1:97:bd:d7:02:50:bc:e8:e7:22:34:
74:da:0a:16:61:b7:53:35:5d:62:9c:ab:3a:72:0c:
cc:aa:f0:1a:1f:91:fc:55:7c:d6:67:9b:a8:6f:c1:
12:30:47:5a:eb:2b:5f:54:18:05:fc:c0:05:1c:0f:
52:6c:49:58:7c:3e:b5:55:21:34:4f:24:85:b1:65:
10:b8:bb:1b:b7:6c:e6:45:e3:26:31:56:56:38:f2:
1c:51:1c:7d:87:1c:c6:c7:ba:6d:79:89:31:1f:ec:
2e:26:76:e1:33:96:8f:35:8a:bb:1c:e2:b3:bf:49:
27:2a:7a:d4:01:ab:9a:76:04:4a:6b:35:d0:78:44:
01:cd:ba:96:8b:fc:44:0c:23:fa:07:75:e0:3e:ee:
d9:05:63:8f:18:26:18:5a:a8:33:79:10:e8:de:49:
6f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:02:5F:E4:E0:62:63:D3:66:67:A0:C5:15:11:C4:B1:0D:FB:E9:32
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UgJf5OBiY9NmZ6DFFRHEsQ376TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.200.0/24
Signature Algorithm: sha256WithRSAEncryption
17:9f:13:23:ac:0e:61:2a:dc:c3:01:0d:3d:9b:4f:a5:47:fd:
67:97:8a:9f:5a:7c:12:79:33:32:39:aa:e5:2c:65:35:28:67:
db:e5:3c:91:c5:a1:7a:f2:3f:73:5e:78:83:ed:6f:85:92:0e:
73:50:33:98:bf:4b:ea:d1:69:17:52:47:e0:00:45:f8:26:00:
2c:e7:5d:e8:ba:cc:ee:cb:5d:1b:eb:9c:77:de:4b:ef:85:18:
c8:1a:49:98:26:b9:19:17:fd:70:cd:b8:cd:da:0c:be:f7:87:
f2:f7:cc:1a:e2:ac:6d:19:20:63:b5:69:6d:0f:38:82:6e:e8:
6d:50:fb:75:33:59:a9:a4:0d:4b:75:3a:60:0e:fe:3e:e0:e1:
cd:62:27:ce:28:1e:ae:50:64:68:6b:64:bf:4e:db:50:8b:fd:
01:52:30:26:4a:89:89:c6:6d:59:36:ce:ff:4a:99:62:b4:40:
5c:e0:de:23:d8:96:79:35:c3:4f:a1:95:66:b2:7f:a9:4d:16:
c2:a7:80:66:d8:9a:0d:73:49:fc:47:37:4e:8a:7d:73:b1:22:
95:19:ed:56:1b:a9:13:d5:40:79:10:85:e1:20:f5:bf:11:37:
f2:e4:d0:21:43:48:54:3a:c6:a4:21:ac:23:b2:c7:95:f2:84:
89:8f:36:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:16:35 2026 by rpki-client