Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NPWrh5QeuopgXzY9Lg7GEEEnaQ0.roa
File: NPWrh5QeuopgXzY9Lg7GEEEnaQ0.roa (raw, json)
Hash identifier: V1XJzgeWsBUHHx44unbU+/uSu1VNQGeoJuP7wIGbmLQ=
Subject key identifier: 34:F5:AB:87:94:1E:BA:8A:60:5F:36:3D:2E:0E:C6:10:41:27:69:0D
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A0F9913A888276A21A775FDA113061F5DA
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NPWrh5QeuopgXzY9Lg7GEEEnaQ0.roa
Signing time: Thu 01 Oct 2026 22:23:59 +0000
ROA not before: Thu 01 Oct 2026 22:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13886
IP address blocks: 45.43.165.0/24 maxlen: 24
64.137.51.0/24 maxlen: 24
104.167.11.0/24 maxlen: 24
104.233.48.0/21 maxlen: 21
104.238.29.0/24 maxlen: 24
104.239.15.0/24 maxlen: 24
104.239.112.0/21 maxlen: 21
104.249.0.0/21 maxlen: 21
204.52.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Oct 2026 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:91:3a:88:82:76:a2:1a:77:5f:da:11:30:61:f5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 1 22:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34f5ab87941eba8a605f363d2e0ec6104127690d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:5f:d7:62:6d:e0:06:94:c6:86:ca:08:24:
fb:17:c4:1d:17:0d:a0:de:0b:5e:db:ff:c7:c0:bc:
78:26:bd:ae:80:1b:82:30:99:d2:e2:3a:7a:65:5a:
e0:d0:26:66:fb:68:86:e7:bc:e5:9d:7c:22:25:33:
6c:ce:1c:41:31:bf:4a:ed:36:63:42:e8:f2:a3:33:
7d:05:2b:ed:b0:bd:d5:34:b3:15:eb:38:b9:a4:78:
8b:5e:58:be:70:df:5c:27:2a:83:5c:b1:99:77:04:
ca:b4:9c:11:58:a9:42:b1:73:66:36:41:40:53:85:
c5:59:dc:b4:63:e9:38:7d:d3:ab:25:57:5c:ca:54:
eb:00:40:c8:9c:c6:9d:46:47:e1:f5:ac:82:e3:9a:
44:8d:dd:c0:6b:65:43:31:d7:57:7f:bd:1b:61:ec:
0a:35:35:48:a1:b9:ad:f6:dd:27:f3:62:6c:f0:58:
b9:cd:9d:2c:f6:60:bb:06:98:9e:71:31:88:c7:80:
ef:e1:50:08:71:92:e6:17:5a:19:75:56:3a:72:1f:
ef:90:4a:77:da:be:d9:61:fb:41:36:c8:e9:7d:cd:
ac:bf:38:dc:46:f6:3f:e7:06:a1:3f:81:ea:e8:aa:
71:85:e7:ab:8c:b6:76:b7:54:34:ba:6c:bb:5c:ff:
ee:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F5:AB:87:94:1E:BA:8A:60:5F:36:3D:2E:0E:C6:10:41:27:69:0D
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/NPWrh5QeuopgXzY9Lg7GEEEnaQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.165.0/24
64.137.51.0/24
104.167.11.0/24
104.233.48.0/21
104.238.29.0/24
104.239.15.0/24
104.239.112.0/21
104.249.0.0/21
204.52.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:8b:99:fd:dc:68:09:82:73:e6:2b:b1:fe:46:84:b8:50:e1:
2b:81:8d:b5:7c:3b:0b:40:89:85:91:88:6a:c3:b4:63:ca:a8:
ae:84:d9:63:2e:03:0d:f6:06:56:3d:a3:0b:5a:b4:be:ea:ee:
66:ce:9a:9e:65:97:db:d4:e6:e7:5f:c6:aa:9f:d6:2c:06:6c:
02:b0:07:fe:3d:06:36:10:12:ea:00:38:85:30:69:c4:12:0e:
a7:f4:d4:54:af:51:f2:1c:f9:7d:b0:88:fc:f5:68:01:67:a5:
e2:79:cc:8a:52:8b:72:37:33:af:10:9d:0e:0a:e3:87:a8:15:
f5:5a:91:98:f1:39:3c:07:76:75:8f:28:d2:1e:95:90:82:c2:
8f:e7:a6:12:9b:89:7f:b9:da:82:73:1f:31:34:11:e6:8b:6e:
ab:71:5c:e9:02:51:e2:37:07:6b:7f:a5:df:30:d3:e7:4b:3f:
0a:f3:58:f3:ae:2c:54:2d:af:d5:1b:b1:e6:40:66:b2:ef:a2:
76:3d:49:0c:3c:70:59:b7:ec:4a:12:49:68:b0:09:87:ca:15:
b4:65:19:47:8e:b7:04:a9:01:c9:01:c9:a5:ac:77:44:ba:cb:
53:5b:9a:f8:50:da:dd:e7:ee:a3:7b:80:ad:6b:3f:8c:19:df:
51:c7:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:13:49 2026 by rpki-client