Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/eILltqmlqfdrZYPs261Cu9mrYPw.roa
File: eILltqmlqfdrZYPs261Cu9mrYPw.roa (raw, json)
Hash identifier: fmNzT8KpzaZOH7p+7MyGSMaIdpaWVh/ZSVfYetBdx/Q=
Subject key identifier: 78:82:E5:B6:A9:A5:A9:F7:6B:65:83:EC:DB:AD:42:BB:D9:AB:60:FC
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A0F81B6238B9FB0FF6E3E4847E6ECA5AE5
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/eILltqmlqfdrZYPs261Cu9mrYPw.roa
Signing time: Thu 01 Oct 2026 15:35:39 +0000
ROA not before: Thu 01 Oct 2026 15:35:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42375
IP address blocks: 5.1.47.0/24 maxlen: 24
2a0a:cd40::/29 maxlen: 29
2a0b:3c00::/29 maxlen: 29
2a11:59c0::/29 maxlen: 29
2a11:5ac0::/29 maxlen: 29
2a11:70c0::/29 maxlen: 29
2a11:8340::/29 maxlen: 29
2a11:8640::/29 maxlen: 29
2a11:9c40::/29 maxlen: 29
2a11:a8c0::/29 maxlen: 29
2a11:d7c0::/29 maxlen: 29
2a11:f540::/29 maxlen: 29
2a12:4c0::/29 maxlen: 29
2a12:1f00::/29 maxlen: 29
2a12:4200::/29 maxlen: 29
2a12:4600::/29 maxlen: 29
2a12:6800::/29 maxlen: 29
2a12:9800::/29 maxlen: 29
2a12:be80::/29 maxlen: 29
2a12:db80::/29 maxlen: 29
2a12:e980::/29 maxlen: 29
2a12:f880::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 05 Oct 2026 08:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:1b:62:38:b9:fb:0f:f6:e3:e4:84:7e:6e:ca:5a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 1 15:35:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7882e5b6a9a5a9f76b6583ecdbad42bbd9ab60fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:63:3b:65:c7:2e:f1:11:9c:5f:79:f6:5e:
88:2f:90:31:8c:c7:d7:3b:2f:33:02:9f:e9:ca:0c:
5d:a8:ef:e4:c0:d6:e1:33:5d:81:94:69:c2:b4:dd:
18:9c:c7:02:e7:13:a5:2b:25:30:4d:4c:a9:62:71:
a6:ea:68:0d:96:0a:35:fb:25:75:e7:3b:ae:17:9f:
67:7d:5f:1d:97:51:86:52:c3:d7:b8:69:74:de:5d:
bf:31:0d:da:fc:f1:81:5a:31:c2:06:c2:c9:07:2c:
f3:fb:18:89:4b:1d:32:bd:ae:a7:9d:c6:08:8a:27:
54:77:e2:b0:e5:a8:9e:57:63:a3:28:1c:98:20:39:
a7:d0:a6:ab:b6:c9:23:91:d0:fb:75:32:0e:27:51:
82:ee:aa:89:fc:c2:74:e8:b2:6f:6b:8c:05:e1:46:
70:3a:76:7e:44:3c:a7:18:69:34:5d:27:b5:a8:e5:
df:47:43:f5:8d:37:ed:ba:80:5c:6a:5a:c5:d4:46:
b9:06:aa:be:ab:12:87:ce:b0:98:48:48:73:03:c1:
b7:27:0a:c2:23:71:60:1a:e6:c6:d9:65:fb:7f:92:
63:4b:a3:b6:54:c9:7e:31:f5:8c:77:3c:a4:0a:09:
e8:ad:6e:04:79:43:94:a4:f6:16:de:3a:44:d9:4a:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:82:E5:B6:A9:A5:A9:F7:6B:65:83:EC:DB:AD:42:BB:D9:AB:60:FC
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/eILltqmlqfdrZYPs261Cu9mrYPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.47.0/24
IPv6:
2a0a:cd40::/29
2a0b:3c00::/29
2a11:59c0::/29
2a11:5ac0::/29
2a11:70c0::/29
2a11:8340::/29
2a11:8640::/29
2a11:9c40::/29
2a11:a8c0::/29
2a11:d7c0::/29
2a11:f540::/29
2a12:4c0::/29
2a12:1f00::/29
2a12:4200::/29
2a12:4600::/29
2a12:6800::/29
2a12:9800::/29
2a12:be80::/29
2a12:db80::/29
2a12:e980::/29
2a12:f880::/29
Signature Algorithm: sha256WithRSAEncryption
6e:b1:28:58:62:bd:29:05:c1:bc:b4:e6:b1:3f:fc:64:d2:2f:
35:25:01:11:62:48:56:ef:74:bc:41:2d:a3:d3:92:a2:b4:69:
a2:b9:e1:43:c5:a9:e2:27:18:95:c1:b9:68:d2:0e:06:68:58:
23:09:9e:0d:7c:cd:03:78:5d:8a:d2:9d:8d:af:b5:0f:05:49:
73:2e:fd:97:22:5b:40:66:79:24:42:19:49:86:ff:49:52:5d:
89:9b:4d:bd:09:64:06:01:04:e5:cc:82:d4:14:4f:79:f4:c8:
c7:4d:8c:fc:5c:bd:20:8b:04:d5:63:33:89:32:99:29:5d:98:
56:39:c3:52:6e:9d:1f:0d:6f:45:50:14:21:c6:1b:93:ec:31:
ba:43:e6:73:3b:10:30:29:ce:f5:ed:a2:08:4b:bd:27:12:b1:
52:63:e7:d3:66:b9:94:72:38:8d:55:02:eb:64:12:3c:a6:73:
a8:62:b8:81:7d:59:8d:cb:da:d7:89:05:54:1d:bc:28:8a:28:
b0:41:9c:44:6d:db:99:03:94:99:b2:d7:ec:fd:a4:39:d8:20:
04:a6:1c:47:82:82:97:6c:cd:c6:a4:c1:d7:d2:9d:62:8c:2a:
c2:3e:53:84:e3:84:a3:9a:20:c3:82:67:0b:71:17:f6:11:bb:
93:e0:c5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:40:08 2026 by rpki-client