Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Wpk6NYLKDDepMMipydPd0ToNd2s.roa
File: Wpk6NYLKDDepMMipydPd0ToNd2s.roa (raw, json)
Hash identifier: S9nfSu0NcFzKXsXvRaUsXrWhK4NJkAKO3jvQIogQgaQ=
Subject key identifier: 5A:99:3A:35:82:CA:0C:37:A9:30:C8:A9:C9:D3:DD:D1:3A:0D:77:6B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019FE860E97FC71A78C03BD4A5D3ABC0BCCD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Wpk6NYLKDDepMMipydPd0ToNd2s.roa
Signing time: Sun 09 Aug 2026 21:14:53 +0000
ROA not before: Sun 09 Aug 2026 21:14:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213302
IP address blocks: 2a06:de01:800::/38 maxlen: 48
2a10:ccc7:3c00::/38 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Aug 2026 12:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e8:60:e9:7f:c7:1a:78:c0:3b:d4:a5:d3:ab:c0:bc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 9 21:14:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a993a3582ca0c37a930c8a9c9d3ddd13a0d776b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:1e:8f:f8:aa:72:91:8b:07:f2:12:53:db:
c7:15:90:27:fe:52:41:c5:de:20:56:a6:09:48:59:
cd:86:e1:54:63:0f:34:ab:bf:eb:b0:b4:f8:3d:41:
b6:95:9c:2e:e4:19:87:9d:fe:c2:4f:de:10:a8:fa:
42:e6:72:b0:7a:e9:d6:f1:ea:58:a6:ec:29:d2:39:
25:03:af:9f:7f:a7:97:9e:f6:9e:29:f9:64:ae:87:
eb:ac:29:a5:b5:31:ae:39:b1:86:22:05:b8:c3:bd:
30:b3:e8:6f:65:ab:2e:76:f3:fd:8c:2e:f4:96:35:
7c:b8:c3:34:9b:a3:84:25:85:df:17:fa:ad:ef:57:
38:7b:0c:16:4f:98:3e:4d:90:5b:06:c1:9e:70:58:
5c:4a:41:6a:e6:84:7a:19:2d:b7:f8:ca:d3:f3:59:
ae:cd:a4:0d:24:bf:30:8c:05:48:60:e5:cc:14:e5:
cd:c0:58:60:3c:52:32:ef:71:7c:01:34:46:65:89:
f1:99:0a:e3:29:78:20:60:e5:f5:04:2c:9a:8a:d7:
15:4d:5b:8c:ba:cd:fc:f3:de:56:ae:89:45:81:be:
bd:8f:14:98:3a:68:19:a2:ef:e7:e8:00:23:e8:61:
d6:f0:a4:59:05:bc:34:0e:46:1b:d2:46:bb:87:6a:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:99:3A:35:82:CA:0C:37:A9:30:C8:A9:C9:D3:DD:D1:3A:0D:77:6B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Wpk6NYLKDDepMMipydPd0ToNd2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:800::/38
2a10:ccc7:3c00::/38
Signature Algorithm: sha256WithRSAEncryption
c1:34:e6:67:7a:1e:6f:da:6a:88:5b:1f:4f:04:a1:2b:b0:7c:
38:48:6e:f2:80:7d:cb:7d:ee:a8:1a:9d:dc:9e:e7:be:ae:6a:
24:8d:18:17:6f:85:7a:e7:cd:65:75:55:ce:4b:61:90:f9:26:
54:c8:f5:79:bf:5a:cf:fd:d0:8b:b5:cb:fe:c6:8a:b9:da:2c:
12:a2:ba:54:7b:74:4a:b7:fe:fb:74:e2:84:27:6b:95:00:f7:
53:63:92:a8:cc:9d:4c:72:3b:48:cc:ba:45:11:b7:dc:b9:3d:
91:85:5e:8d:7a:df:b5:c7:6e:90:29:0a:b4:78:00:a3:22:80:
c4:f4:83:7b:2d:93:79:f8:fb:4b:bb:43:55:ed:9a:59:72:d1:
85:59:8c:fe:48:18:af:a0:6d:f3:d5:22:96:6c:55:74:2b:d6:
bb:23:43:1b:5c:7b:16:3e:cd:79:4b:75:10:3d:48:1b:5b:d8:
02:cd:4c:86:b4:2c:62:ba:b9:c8:d6:06:e3:20:7a:59:fd:2c:
dd:08:e1:00:b5:ca:7c:4b:24:80:44:bb:57:40:99:ef:a0:a6:
13:e3:b2:65:6a:be:2f:00:96:6d:af:3d:af:1d:1c:0c:a4:a8:
60:5e:eb:27:ab:fe:da:89:c9:44:65:d2:80:95:f0:ce:3d:a7:
fe:95:78:ad
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAZ/oYOl/xxp4wDvUpdOrwLzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwODA5MjExNDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTk5M2EzNTgyY2EwYzM3YTkzMGM4YTljOWQzZGRkMTNhMGQ3NzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gIej/iqcpGLB/ISU9vHFZAn/lJB
xd4gVqYJSFnNhuFUYw80q7/rsLT4PUG2lZwu5BmHnf7CT94QqPpC5nKweunW8epY
puwp0jklA6+ff6eXnvaeKflkrofrrCmltTGuObGGIgW4w70ws+hvZasudvP9jC70
ljV8uMM0m6OEJYXfF/qt71c4ewwWT5g+TZBbBsGecFhcSkFq5oR6GS23+MrT81mu
zaQNJL8wjAVIYOXMFOXNwFhgPFIy73F8ATRGZYnxmQrjKXggYOX1BCyaitcVTVuM
us38895WrolFgb69jxSYOmgZou/n6AAj6GHW8KRZBbw0DkYb0ka7h2o4/wIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFFqZOjWCygw3qTDIqcnT3dE6DXdrMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvV3BrNk5ZTEtERGVwTU1pcHlkUGQwVG9OZDJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYCKgbeAQgD
BgIqEMzHPDANBgkqhkiG9w0BAQsFAAOCAQEAwTTmZ3oeb9pqiFsfTwShK7B8OEhu
8oB9y33uqBqd3J7nvq5qJI0YF2+FeufNZXVVzkthkPkmVMj1eb9az/3Qi7XL/saK
udosEqK6VHt0Srf++3TihCdrlQD3U2OSqMydTHI7SMy6RRG33Lk9kYVejXrftcdu
kCkKtHgAoyKAxPSDey2Tefj7S7tDVe2aWXLRhVmM/kgYr6Bt89UilmxVdCvWuyND
G1x7Fj7NeUt1ED1IG1vYAs1MhrQsYrq5yNYG4yB6Wf0s3QjhALXKfEskgES7V0CZ
76CmE+OyZWq+LwCWba89rx0cDKSoYF7rJ6v+2onJRGXSgJXwzj2n/pV4rQ==
-----END CERTIFICATE-----
Generated at Tue Aug 11 12:20:09 2026 by rpki-client