Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iZlVnz4OcSIHUOqClJiju7-d3xM.roa
File: iZlVnz4OcSIHUOqClJiju7-d3xM.roa (raw, json)
Hash identifier: uAUf9zUnfWZ71aXP5b1hQuEeLrCvBWVGAp1u36fNMCY=
Subject key identifier: 89:99:55:9F:3E:0E:71:22:07:50:EA:82:94:98:A3:BB:BF:9D:DF:13
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A0E25F0AC75146E6358F68D78DE77BA3C0
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iZlVnz4OcSIHUOqClJiju7-d3xM.roa
Signing time: Sun 27 Sep 2026 10:17:54 +0000
ROA not before: Sun 27 Sep 2026 10:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218656
IP address blocks: 5.104.74.0/24 maxlen: 24
62.233.33.0/24 maxlen: 24
212.69.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Oct 2026 08:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:5f:0a:c7:51:46:e6:35:8f:68:d7:8d:e7:7b:a3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Sep 27 10:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8999559f3e0e71220750ea829498a3bbbf9ddf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:ee:18:97:1d:ca:2b:cf:6d:d9:67:ee:c2:
71:7f:56:e6:29:05:a4:e1:c1:4e:78:b2:20:10:d8:
4d:d0:df:51:bb:3e:82:20:3c:b1:30:f9:1f:9c:2c:
1c:10:3d:56:f6:26:a2:36:7a:9f:30:49:db:ef:00:
21:69:22:2d:d3:b4:0a:92:8c:f2:87:be:51:86:b3:
aa:cd:72:c3:d6:1c:4a:65:10:84:ac:88:70:1a:cd:
b9:d0:eb:93:ac:81:62:16:38:5c:1a:f2:49:d1:7c:
e8:4b:16:06:ff:34:0c:da:90:85:92:ee:75:61:22:
bd:f1:4a:da:8d:d3:c7:e3:84:eb:58:89:f6:60:92:
ef:d4:c1:58:21:af:a1:df:8b:27:64:15:d6:b2:86:
21:d8:9a:5c:c4:25:ed:83:ac:54:5d:9e:7d:d1:84:
20:ad:83:4c:b9:3e:78:28:44:33:02:88:55:6a:85:
34:d1:2a:94:02:2a:02:0c:20:a9:1e:4d:de:3c:0b:
a3:bb:93:10:28:99:b1:3c:a7:5f:e2:c9:b9:78:b1:
af:90:05:89:69:81:83:99:27:a5:14:b6:ac:8d:35:
53:a7:80:c9:b9:5f:57:4c:c6:fd:e0:24:b1:85:a6:
c2:c0:70:0c:f2:55:bb:76:96:63:ba:c6:0e:fc:6c:
54:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:99:55:9F:3E:0E:71:22:07:50:EA:82:94:98:A3:BB:BF:9D:DF:13
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iZlVnz4OcSIHUOqClJiju7-d3xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.74.0/24
62.233.33.0/24
212.69.135.0/24
Signature Algorithm: sha256WithRSAEncryption
25:71:6a:72:37:50:aa:0e:36:40:c6:f1:26:d4:94:d2:11:b8:
e6:50:d2:84:10:93:50:8f:47:7b:89:01:ce:f7:0c:23:99:e1:
e4:3c:cd:77:05:ec:74:bd:48:23:84:19:8b:de:6d:e9:62:a1:
db:2d:30:f6:68:b3:d6:68:9d:a8:14:0b:c5:32:21:26:29:d4:
26:74:e1:3d:11:0b:f3:db:74:5a:4a:9e:9c:1a:32:14:56:89:
a5:22:6e:9c:68:f2:d6:62:79:1b:59:b9:52:63:8b:a8:b1:6a:
87:31:09:b1:08:57:3b:54:b5:5f:ec:bc:8f:47:b7:ac:81:6f:
cb:76:82:dd:2f:5d:a6:30:0f:08:06:19:25:e6:03:5f:ee:96:
b7:2f:f6:75:d0:f3:0c:b0:21:f0:05:73:04:a0:25:84:02:f8:
d2:5d:43:c3:c1:0b:bd:3f:b8:2e:2d:c4:ad:f2:f7:17:76:61:
99:c2:bd:7a:ad:e5:91:14:46:07:75:50:71:f5:77:53:12:86:
ee:21:ce:8c:13:62:17:c9:d8:b4:0d:12:fd:38:53:eb:20:d6:
cd:f4:99:18:33:e9:e2:7a:5e:bb:62:86:cb:62:03:07:64:4b:
68:e2:e5:6c:34:a8:28:5a:2f:ec:a0:27:68:a9:a2:16:0a:aa:
12:e5:9b:3d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDiXwrHUUbmNY9o143ne6PAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjYwOTI3MTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTk5NTU5ZjNlMGU3MTIyMDc1MGVhODI5NDk4YTNiYmJmOWRkZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBnuGJcdyivPbdln7sJxf1bmKQWk
4cFOeLIgENhN0N9Ruz6CIDyxMPkfnCwcED1W9iaiNnqfMEnb7wAhaSIt07QKkozy
h75RhrOqzXLD1hxKZRCErIhwGs250OuTrIFiFjhcGvJJ0XzoSxYG/zQM2pCFku51
YSK98UrajdPH44TrWIn2YJLv1MFYIa+h34snZBXWsoYh2JpcxCXtg6xUXZ590YQg
rYNMuT54KEQzAohVaoU00SqUAioCDCCpHk3ePAuju5MQKJmxPKdf4sm5eLGvkAWJ
aYGDmSelFLasjTVTp4DJuV9XTMb94CSxhabCwHAM8lW7dpZjusYO/GxUEQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFImZVZ8+DnEiB1DqgpSYo7u/nd8TMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvaVpsVm56NE9jU0lIVU9xQ2xKaWp1Ny1kM3hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABWhKAwQA
PukhAwQA1EWHMA0GCSqGSIb3DQEBCwUAA4IBAQAlcWpyN1CqDjZAxvEm1JTSEbjm
UNKEEJNQj0d7iQHO9wwjmeHkPM13Bex0vUgjhBmL3m3pYqHbLTD2aLPWaJ2oFAvF
MiEmKdQmdOE9EQvz23RaSp6cGjIUVomlIm6caPLWYnkbWblSY4uosWqHMQmxCFc7
VLVf7LyPR7esgW/LdoLdL12mMA8IBhkl5gNf7pa3L/Z10PMMsCHwBXMEoCWEAvjS
XUPDwQu9P7guLcSt8vcXdmGZwr16reWRFEYHdVBx9XdTEobuIc6ME2IXydi0DRL9
OFPrINbN9JkYM+niel67YobLYgMHZEto4uVsNKgoWi/soCdoqaIWCqoS5Zs9
-----END CERTIFICATE-----
Generated at Sun Oct 4 01:10:29 2026 by rpki-client