Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/8LF087BDuq0YCtqABhvZDhJuKgE.roa
File: 8LF087BDuq0YCtqABhvZDhJuKgE.roa (raw, json)
Hash identifier: vUokScueY05xBAfXIPwFjPkCcf+xEy6sQiCMIDxpohs=
Subject key identifier: F0:B1:74:F3:B0:43:BA:AD:18:0A:DA:80:06:1B:D9:0E:12:6E:2A:01
Certificate issuer: /CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Certificate serial: 019E6B3B45D668164A66DB07E1A102C98D96
Authority key identifier: 95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/8LF087BDuq0YCtqABhvZDhJuKgE.roa
Signing time: Wed 27 May 2026 20:58:27 +0000
ROA not before: Wed 27 May 2026 20:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 201.51.0.0/24 maxlen: 32
201.51.1.0/24 maxlen: 32
201.51.2.0/24 maxlen: 32
201.51.3.0/24 maxlen: 32
201.51.4.0/24 maxlen: 32
201.51.5.0/24 maxlen: 32
201.51.6.0/24 maxlen: 32
201.51.7.0/24 maxlen: 32
201.51.8.0/24 maxlen: 32
201.51.9.0/24 maxlen: 32
201.51.10.0/24 maxlen: 32
201.51.11.0/24 maxlen: 32
201.51.12.0/24 maxlen: 32
201.51.13.0/24 maxlen: 32
201.51.14.0/24 maxlen: 32
201.51.15.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 08 Jun 2026 14:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6b:3b:45:d6:68:16:4a:66:db:07:e1:a1:02:c9:8d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Validity
Not Before: May 27 20:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0b174f3b043baad180ada80061bd90e126e2a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:57:b9:35:12:da:2d:3e:60:3c:ef:30:40:
de:d0:70:ef:88:7e:74:6f:f2:9d:2c:0a:20:ff:2a:
53:45:28:a8:06:e5:5c:1c:2d:7b:05:15:f2:7b:b0:
e3:a7:88:2a:63:80:b7:05:2c:d4:72:87:da:9a:7b:
20:f2:3d:c3:62:77:e6:0a:7b:11:cd:4f:35:c3:9a:
a1:c2:32:a2:ce:9a:83:4d:22:2b:90:40:17:27:75:
28:17:a1:d6:21:7e:19:ba:1b:c2:91:ee:74:81:35:
fd:4e:9e:ef:0c:36:df:87:76:d9:0f:62:f0:b4:0b:
6f:6b:34:e4:0f:8b:a8:8d:03:6a:9a:39:5d:4c:b5:
d8:73:55:e7:2a:87:ee:d3:8b:28:16:f0:34:aa:da:
6e:ca:68:f9:77:0d:be:1e:60:6c:3b:33:5e:0d:56:
b5:00:00:8e:e6:ef:7d:8e:dc:8b:c1:b5:90:3d:be:
e9:21:19:8a:da:a2:09:50:e7:d4:dd:e1:14:e2:1e:
06:53:89:f3:06:77:9a:d0:b0:17:09:28:13:6a:70:
6f:89:aa:6c:f2:68:5a:0f:90:f3:f4:73:64:ef:06:
77:ac:46:d1:ad:87:87:8e:0c:98:74:24:8c:f8:87:
e6:a7:0f:9b:50:de:f9:3c:63:26:4f:4a:3c:4f:c5:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B1:74:F3:B0:43:BA:AD:18:0A:DA:80:06:1B:D9:0E:12:6E:2A:01
X509v3 Authority Key Identifier:
keyid:95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/8LF087BDuq0YCtqABhvZDhJuKgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.51.0.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:1c:54:77:71:69:0b:b2:49:c7:68:b9:dd:31:d1:8f:6b:ad:
d6:df:b4:c7:b8:69:ba:93:8f:eb:2b:48:ba:3e:97:71:f5:04:
d8:7f:79:4a:33:5f:c0:33:81:99:6c:9f:d0:5f:3b:60:8c:06:
05:a7:b3:79:b6:5a:16:79:86:6d:87:58:e6:19:21:8f:2d:03:
66:3e:7a:64:10:10:f9:38:f5:d6:09:97:d2:40:c2:5d:95:f2:
5b:ef:4a:82:8c:06:90:c9:7b:6d:8d:b2:93:a7:46:83:70:cf:
a1:cf:a2:0d:17:b3:19:4e:42:2c:57:fe:4d:07:7f:82:20:51:
a4:9e:f4:30:54:8c:5f:32:93:cc:24:c5:76:56:0c:75:dd:45:
e0:3b:a2:af:bc:f1:9f:35:2e:34:74:72:b7:90:de:b8:b4:9b:
12:0a:f2:ae:8e:a7:1b:c2:87:85:c8:94:e9:ee:a0:68:4d:ed:
44:11:99:db:82:3c:af:22:5e:c5:4d:5a:2f:2b:f7:bb:7c:6e:
79:58:cb:59:b2:2b:a6:09:09:aa:25:0c:10:d3:ab:f1:b0:84:
b1:d4:aa:8d:0a:1e:70:4d:cf:98:93:64:a1:e6:f5:90:3b:24:
0f:36:60:5b:bd:73:34:17:7e:4f:b6:8f:b3:91:17:fd:9f:7c:
76:5b:b4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:39:08 2026 by rpki-client