Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Si-sJEXTIWp5U2CcAahZRYQjDVY.roa
File: Si-sJEXTIWp5U2CcAahZRYQjDVY.roa (raw, json)
Hash identifier: zdKH/T/gtskLEM0f7a4CLZ9MkKpB2cMd+KHtS71kwxE=
Subject key identifier: 4A:2F:AC:24:45:D3:21:6A:79:53:60:9C:01:A8:59:45:84:23:0D:56
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A1393586503E32EF5BD5282B68BD0F56A3
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Si-sJEXTIWp5U2CcAahZRYQjDVY.roa
Signing time: Wed 14 Oct 2026 06:59:31 +0000
ROA not before: Wed 14 Oct 2026 06:59:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6206
IP address blocks: 45.88.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Oct 2026 05:37:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:35:86:50:3e:32:ef:5b:d5:28:2b:68:bd:0f:56:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 14 06:59:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a2fac2445d3216a7953609c01a8594584230d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:8c:30:bd:d2:14:f4:09:f2:37:e8:f1:89:
17:4a:47:50:9f:fa:6a:06:39:1d:a8:6f:df:2d:d0:
53:e0:1f:b9:18:39:83:a2:4c:28:fb:0d:9e:b8:7d:
8f:28:9e:fb:60:bc:18:38:9b:9c:4a:68:47:6e:dc:
b3:2d:6c:78:32:6a:06:45:07:1e:fd:15:f1:98:fe:
af:20:d6:cc:62:16:62:d2:bd:09:9c:fc:07:b9:4e:
f9:64:cd:1a:35:83:90:f0:b8:70:d6:e2:65:c2:f6:
42:4c:50:e4:d3:18:92:8d:0c:cc:8b:25:f4:2b:d0:
77:ea:36:e1:54:62:d8:07:e5:9f:15:88:18:fd:be:
86:5e:76:76:6f:72:8f:38:11:d4:5b:20:c1:17:93:
03:32:b3:58:9c:67:5c:39:72:b9:ce:8c:0f:cd:4b:
8c:53:13:41:b1:6b:59:0e:49:62:d4:7a:1d:7f:65:
41:91:d4:0e:40:63:a8:90:29:4d:ed:7d:2c:5b:f0:
79:8a:6a:e2:3c:6a:f9:27:21:b0:79:77:cc:27:7e:
f5:4f:57:bb:02:c3:ad:19:cd:5c:26:cd:ca:27:a3:
88:fe:06:b3:1c:3a:3f:a7:59:a7:49:d1:24:bb:0b:
6d:82:f9:ad:35:85:03:ee:5a:fb:61:16:cc:98:26:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2F:AC:24:45:D3:21:6A:79:53:60:9C:01:A8:59:45:84:23:0D:56
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Si-sJEXTIWp5U2CcAahZRYQjDVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.144.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:69:74:c6:ba:f9:c4:a0:d2:c1:59:c8:e0:56:be:1f:95:04:
b4:08:4c:66:f6:cb:6d:9c:a9:bb:d2:34:68:ce:69:54:85:f0:
21:5e:f7:18:7d:15:52:f8:92:4d:fc:bc:ef:b5:8f:0c:32:4a:
af:43:2d:06:d7:47:51:d2:3e:ee:c5:a9:37:62:8a:d5:f0:f3:
0b:2a:74:a3:8f:d0:8e:fd:c4:4b:48:7f:cd:90:24:1a:1b:8c:
2d:76:14:36:37:22:d3:53:86:4b:6b:7c:be:08:9d:b9:68:0c:
92:cd:b1:31:c1:09:33:0b:f4:d8:91:e6:fa:90:7a:43:c4:9e:
6f:22:cc:b6:81:24:0c:ee:8e:44:7a:eb:0c:0a:c6:83:75:ae:
c2:f1:65:84:6b:15:ac:50:89:28:6b:b9:82:a4:89:4b:da:85:
81:67:4d:5b:a5:96:e4:b8:cd:73:09:e8:5b:0b:87:7d:1b:12:
ad:69:48:3b:3e:38:93:0b:39:2f:58:70:e2:38:44:d6:a2:ff:
86:87:69:74:40:6d:87:09:f3:25:3e:29:47:59:51:2d:f6:e8:
94:fa:2f:9b:ec:a0:4c:33:ad:54:aa:bd:45:18:b9:11:97:2f:
f1:8e:2f:86:1a:a4:37:2b:35:d7:1b:6b:cc:15:89:80:30:23:
49:8c:84:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE5NYZQPjLvW9UoK2i9D1ajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYxMDE0MDY1OTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTJmYWMyNDQ1ZDMyMTZhNzk1MzYwOWMwMWE4NTk0NTg0MjMwZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaKMML3SFPQJ8jfo8YkXSkdQn/pq
BjkdqG/fLdBT4B+5GDmDokwo+w2euH2PKJ77YLwYOJucSmhHbtyzLWx4MmoGRQce
/RXxmP6vINbMYhZi0r0JnPwHuU75ZM0aNYOQ8Lhw1uJlwvZCTFDk0xiSjQzMiyX0
K9B36jbhVGLYB+WfFYgY/b6GXnZ2b3KPOBHUWyDBF5MDMrNYnGdcOXK5zowPzUuM
UxNBsWtZDkli1Hodf2VBkdQOQGOokClN7X0sW/B5imriPGr5JyGweXfMJ371T1e7
AsOtGc1cJs3KJ6OI/gazHDo/p1mnSdEkuwttgvmtNYUD7lr7YRbMmCZoGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEovrCRF0yFqeVNgnAGoWUWEIw1WMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvU2ktc0pFWFRJV3A1VTJDY0FhaFpSWVFqRFZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALViQMA0G
CSqGSIb3DQEBCwUAA4IBAQCdaXTGuvnEoNLBWcjgVr4flQS0CExm9sttnKm70jRo
zmlUhfAhXvcYfRVS+JJN/LzvtY8MMkqvQy0G10dR0j7uxak3YorV8PMLKnSjj9CO
/cRLSH/NkCQaG4wtdhQ2NyLTU4ZLa3y+CJ25aAySzbExwQkzC/TYkeb6kHpDxJ5v
Isy2gSQM7o5EeusMCsaDda7C8WWEaxWsUIkoa7mCpIlL2oWBZ01bpZbkuM1zCehb
C4d9GxKtaUg7PjiTCzkvWHDiOETWov+Gh2l0QG2HCfMlPilHWVEt9uiU+i+b7KBM
M61Uqr1FGLkRly/xji+GGqQ3KzXXG2vMFYmAMCNJjIRN
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:00:16 2026 by rpki-client