Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/k5yBk-zsrJIDNJiC00FExh7ABp0.roa
File: k5yBk-zsrJIDNJiC00FExh7ABp0.roa (raw, json)
Hash identifier: KLb3gTe0mEyBcUKtDmgnQ1zHaGSTpD4s0Y8cX0iozUk=
Subject key identifier: 93:9C:81:93:EC:EC:AC:92:03:34:98:82:D3:41:44:C6:1E:C0:06:9D
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A145536144FB3DA2BABA998B2C821F18B5
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/k5yBk-zsrJIDNJiC00FExh7ABp0.roa
Signing time: Fri 16 Oct 2026 15:27:34 +0000
ROA not before: Fri 16 Oct 2026 15:27:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a10:3c81::/32 maxlen: 32
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 18 Oct 2026 16:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:53:61:44:fb:3d:a2:ba:ba:99:8b:2c:82:1f:18:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 16 15:27:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=939c8193ececac9203349882d34144c61ec0069d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c7:ca:bb:0f:a2:1c:0a:eb:68:98:56:4b:85:
00:40:b4:0a:ec:52:25:c8:7c:fb:ae:1c:e8:ef:b6:
03:fa:78:5b:3a:18:b1:cb:8f:d2:8e:58:24:10:10:
cb:0f:eb:0e:17:1d:3d:fb:ae:5a:9f:18:7a:05:71:
d6:6f:fe:61:b0:0d:4d:7c:17:b0:36:7b:18:a9:cb:
67:60:ae:bc:2c:e3:3e:34:8f:89:33:b8:fa:55:05:
6e:74:5d:06:02:06:99:7b:66:bf:a3:ad:90:c6:b2:
0a:16:5c:db:6f:69:ec:fe:7a:80:05:d3:0b:74:f0:
ea:a9:0c:2b:d3:22:f0:ac:e5:66:ec:4a:86:91:e9:
ff:73:47:d4:27:a0:79:eb:01:a5:f8:39:54:dc:94:
32:47:03:cf:58:9a:12:ae:ae:ec:e0:20:58:74:f1:
06:a7:e9:bd:8f:93:56:ec:92:58:42:49:ef:25:d6:
1a:21:82:a1:bd:71:77:52:1f:a1:47:50:da:06:60:
1d:4c:8e:10:f2:b5:ba:20:45:6b:64:55:e2:a1:ca:
76:b7:ba:24:62:d6:c0:f6:e2:94:f2:26:8b:9e:ae:
f0:00:ec:56:5d:60:28:10:45:5c:fc:1c:7c:dd:ee:
ca:c3:95:7c:8a:85:08:0f:79:1e:bf:51:a3:68:90:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9C:81:93:EC:EC:AC:92:03:34:98:82:D3:41:44:C6:1E:C0:06:9D
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/k5yBk-zsrJIDNJiC00FExh7ABp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc0::/29
2a0b:ac00::/29
2a10:b40::/29
2a10:3c81::/32
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c0::/29
2a13:b9c0::/29
2a13:c340::/29
2a14:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:80:c1:10:84:df:f5:62:b5:c5:a2:3c:7e:1a:68:cb:5a:e4:
54:ac:ad:e9:a2:08:e1:da:27:a3:50:f5:26:a4:f8:ed:81:05:
42:5b:4c:cf:2a:0b:53:d9:99:e4:a8:c4:92:2f:9f:60:b3:3e:
60:b4:46:2d:bf:1f:3a:3c:c5:4b:35:8d:6a:cb:9a:5b:5c:c0:
46:cd:22:7c:19:8f:e1:5f:bb:43:bc:ff:68:74:15:e3:6b:98:
3d:4f:a0:fc:01:32:29:e7:51:be:98:34:82:9a:e9:89:26:4a:
91:91:ba:b4:07:d1:8e:4c:6a:a4:58:69:05:5a:af:d6:6f:3a:
c4:14:d7:38:32:6e:de:d9:4e:5f:97:38:12:4a:31:90:95:f3:
e1:8e:96:d8:6b:07:e2:76:7b:13:5e:56:e9:da:f2:89:00:21:
8a:7c:ff:dd:f4:ff:b4:c5:f7:d4:8c:de:ba:49:7b:2c:c6:28:
43:b2:34:24:db:f5:4e:ca:6b:bd:48:75:2b:64:2f:3c:12:2f:
74:9c:14:5f:62:d5:f8:66:4e:a5:f0:de:7e:fc:e2:53:b2:c1:
25:82:35:99:cb:6b:59:96:0a:4a:6c:b9:54:f3:f3:f2:28:b2:
87:1c:13:12:1e:db:ca:1f:ef:54:64:0a:35:16:15:24:70:6c:
87:73:11:9c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAaFFU2FE+z2iurqZiyyCHxi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYxMDE2MTUyNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzljODE5M2VjZWNhYzkyMDMzNDk4ODJkMzQxNDRjNjFlYzAwNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08fKuw+iHArraJhWS4UAQLQK7FIl
yHz7rhzo77YD+nhbOhixy4/SjlgkEBDLD+sOFx09+65anxh6BXHWb/5hsA1NfBew
NnsYqctnYK68LOM+NI+JM7j6VQVudF0GAgaZe2a/o62QxrIKFlzbb2ns/nqABdML
dPDqqQwr0yLwrOVm7EqGken/c0fUJ6B56wGl+DlU3JQyRwPPWJoSrq7s4CBYdPEG
p+m9j5NW7JJYQknvJdYaIYKhvXF3Uh+hR1DaBmAdTI4Q8rW6IEVrZFXiocp2t7ok
YtbA9uKU8iaLnq7wAOxWXWAoEEVc/Bx83e7Kw5V8ioUID3kev1GjaJACIwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFJOcgZPs7KySAzSYgtNBRMYewAadMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvazV5QmstenNySklETkppQzAwRkV4aDdBQnAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUDKgZfwAMF
AyoLrAADBQMqEAtAAwUAKhA8gQMFAyoQP4ADBQMqEHfAAwUDKhO0wAMFAyoTucAD
BQMqE8NAAwUDKhRowDANBgkqhkiG9w0BAQsFAAOCAQEAloDBEITf9WK1xaI8fhpo
y1rkVKyt6aII4dono1D1JqT47YEFQltMzyoLU9mZ5KjEki+fYLM+YLRGLb8fOjzF
SzWNasuaW1zARs0ifBmP4V+7Q7z/aHQV42uYPU+g/AEyKedRvpg0gprpiSZKkZG6
tAfRjkxqpFhpBVqv1m86xBTXODJu3tlOX5c4EkoxkJXz4Y6W2GsH4nZ7E15W6dry
iQAhinz/3fT/tMX31Izeukl7LMYoQ7I0JNv1TsprvUh1K2QvPBIvdJwUX2LV+GZO
pfDefvziU7LBJYI1mctrWZYKSmy5VPPz8iiyhxwTEh7byh/vVGQKNRYVJHBsh3MR
nA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 13:13:22 2026 by rpki-client