Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/momvh0bXXEPfLTMzQVq3bfrzREI.roa
File: momvh0bXXEPfLTMzQVq3bfrzREI.roa (raw, json)
Hash identifier: tcwyTwCO5T4G2VZKJ1aYwlbEtZ0e2lGq5fklbHSeEqY=
Subject key identifier: 9A:89:AF:87:46:D7:5C:43:DF:2D:33:33:41:5A:B7:6D:FA:F3:44:42
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019FDC24DE4531B3DEE1CE2157093A3A658F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/momvh0bXXEPfLTMzQVq3bfrzREI.roa
Signing time: Fri 07 Aug 2026 12:13:51 +0000
ROA not before: Fri 07 Aug 2026 12:13:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146869
IP address blocks: 163.5.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Aug 2026 15:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:24:de:45:31:b3:de:e1:ce:21:57:09:3a:3a:65:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 7 12:13:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a89af8746d75c43df2d3333415ab76dfaf34442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:20:60:4c:60:cf:21:ec:3a:f8:c1:f4:d1:
32:38:63:e5:19:50:46:da:8a:14:7c:8e:35:df:8c:
11:1f:6a:60:6e:a3:ec:40:64:22:47:b8:ca:94:cb:
8c:08:12:c2:49:94:1f:22:94:d9:bc:8f:cb:fe:3a:
ae:7f:e1:17:a9:b8:d3:67:2c:61:e4:5e:9b:be:27:
f6:4a:a6:a2:1b:d6:d5:d3:9e:45:ef:ea:32:5d:4f:
d8:6f:00:39:c3:c4:a4:ac:a3:4b:b5:b3:85:3b:55:
c7:2f:e7:4d:10:0f:3d:56:0f:d5:48:a7:5f:f7:ef:
18:53:ea:e8:10:de:e4:86:0d:c6:40:56:d8:23:df:
1f:97:91:3c:88:5c:85:61:cc:7f:3a:c2:f5:e2:21:
e0:88:4b:45:53:e0:07:23:8c:ff:91:6d:f5:95:31:
67:28:55:a0:75:1f:7a:48:bb:9d:33:0d:df:d2:73:
ef:a3:83:31:cd:98:51:af:6a:63:94:d5:41:56:59:
cc:e2:61:47:06:bf:70:2c:92:ff:08:ef:70:10:de:
ca:a0:00:27:62:fb:c5:53:af:fc:72:29:68:39:38:
45:a4:df:2a:96:3f:f4:fb:cf:c0:b6:ee:bb:24:db:
53:0f:03:8e:d1:3a:0c:d6:4b:ef:66:ed:74:74:1d:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:89:AF:87:46:D7:5C:43:DF:2D:33:33:41:5A:B7:6D:FA:F3:44:42
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/momvh0bXXEPfLTMzQVq3bfrzREI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:77:32:9f:33:e4:1d:5c:75:79:7e:34:41:42:a5:b4:92:40:
c0:14:a4:a4:4c:d2:9a:65:a9:3f:13:4c:0d:16:be:19:45:0b:
16:36:e9:8a:94:66:d8:ac:f5:19:ed:a5:0c:23:8c:6e:71:6a:
7d:96:2b:c9:65:5d:30:05:c8:05:22:3b:77:20:85:28:a9:63:
aa:22:0b:d7:6e:77:e8:9b:91:27:f0:6a:8b:0d:b2:69:8b:82:
ef:f2:87:9c:87:ad:7d:60:a8:03:1c:f3:1a:e5:15:06:3c:b8:
7d:fe:10:78:2f:dd:37:56:44:ee:8a:ce:4a:e5:30:e7:22:64:
82:59:87:55:b7:f1:29:8f:f0:c3:f2:67:d2:04:73:25:58:69:
85:46:f0:2b:ac:4f:55:4d:e6:bd:2e:11:02:cc:b8:63:b6:7f:
48:f7:7a:27:f8:23:bd:7f:60:96:79:4d:ff:b0:53:be:c3:f1:
5d:bd:4e:28:fd:3b:3d:a4:a9:03:67:97:c0:59:6d:00:d6:84:
57:5e:0d:b7:e7:b8:49:95:21:c6:52:95:0e:36:d0:4f:a5:84:
99:f1:c0:bf:72:41:ab:52:8b:e5:f9:bd:53:e7:f8:98:f9:15:
38:40:26:c7:a8:c0:8c:56:61:b8:31:94:c5:d4:a2:73:7b:83:
c9:3f:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 20:29:31 2026 by rpki-client