Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/nKCm2dCFbT7CWau06LBD8OTUw3c.roa
File: nKCm2dCFbT7CWau06LBD8OTUw3c.roa (raw, json)
Hash identifier: QJBo7Vd9IHHvRBBqT8vEu9KakeWQi5SePg2A5yjiF4g=
Subject key identifier: 9C:A0:A6:D9:D0:85:6D:3E:C2:59:AB:B4:E8:B0:43:F0:E4:D4:C3:77
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019E9843A5CA017401B57937A215A4D3072C
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/nKCm2dCFbT7CWau06LBD8OTUw3c.roa
Signing time: Fri 05 Jun 2026 14:50:30 +0000
ROA not before: Fri 05 Jun 2026 14:50:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.232.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jun 2026 09:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:43:a5:ca:01:74:01:b5:79:37:a2:15:a4:d3:07:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Jun 5 14:50:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ca0a6d9d0856d3ec259abb4e8b043f0e4d4c377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:e5:a2:df:18:8b:ce:aa:60:4b:d6:1a:51:
a0:68:5a:c1:8b:5b:bb:48:f4:47:14:64:82:eb:6c:
9b:c1:a8:23:af:1e:b0:be:76:3c:39:d6:56:b8:49:
78:4b:b0:c1:25:d7:29:42:c8:50:2b:10:52:7c:e0:
14:25:5a:1a:3c:e6:e1:10:b0:b6:de:a2:15:2d:6d:
d0:6e:d1:bf:64:97:d3:46:df:5f:26:81:ef:c7:c5:
65:ba:b7:fb:21:c2:35:1d:9f:11:80:f6:73:a3:71:
66:87:83:25:ac:8f:59:ba:fa:cf:c8:1d:75:20:16:
39:b3:8a:6c:64:99:a6:43:b1:01:c0:89:a4:a8:99:
a1:f3:be:f1:81:c4:9e:d3:41:00:a8:a9:d3:52:da:
09:ed:1e:99:df:ea:ad:a3:85:55:b5:f2:e2:8a:08:
3b:c2:79:2e:0d:a6:77:13:5d:25:c3:4d:76:90:15:
2e:03:a1:3b:02:94:7c:bc:df:2c:1d:30:77:dc:4f:
24:d3:9a:6b:2b:83:10:ed:60:e4:2d:3c:84:05:00:
c5:a2:28:e5:c8:4e:cd:19:a9:dc:00:67:a5:11:48:
3e:30:d8:83:b7:91:b1:ed:90:ea:aa:39:8d:91:f2:
e3:94:59:06:09:0d:41:3a:1f:88:1e:0d:b9:3e:db:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A0:A6:D9:D0:85:6D:3E:C2:59:AB:B4:E8:B0:43:F0:E4:D4:C3:77
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/nKCm2dCFbT7CWau06LBD8OTUw3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.95.0/24
Signature Algorithm: sha256WithRSAEncryption
59:06:b5:3c:0d:16:cd:f4:29:f0:de:bd:4a:d3:28:0e:c9:08:
69:5f:7d:e7:95:0a:e6:f6:11:0d:3b:ba:1e:53:2b:0a:59:c1:
d5:e2:87:1c:87:78:cd:47:66:69:57:4e:39:d0:d9:0e:6a:0b:
73:f7:6b:98:25:7b:81:5a:4d:b8:e7:d5:f2:fd:ef:d6:79:dc:
a6:8d:62:6c:23:55:77:b9:ac:b0:18:f1:0e:a5:7f:62:43:d3:
99:32:27:7e:6a:de:22:8a:0e:7e:b7:16:cf:f8:44:ef:3e:75:
54:ec:75:6e:e1:f0:72:5f:ae:76:e5:da:5f:a9:39:41:ac:ec:
0a:b0:ab:5c:77:85:e9:ab:0d:63:9e:81:e1:ed:98:e9:fe:c0:
e7:bf:22:18:7d:47:16:a2:38:f0:a6:28:ca:d5:f7:9f:e7:8f:
5e:85:fc:c4:6e:1d:f7:b5:46:b9:f4:8b:65:ba:a8:2d:ce:1e:
89:64:db:84:8f:72:c7:c0:46:a6:af:d3:e9:d4:0d:1d:ad:81:
e9:5e:55:9d:95:b0:53:d7:51:c0:c6:b0:06:6d:d3:95:b3:c3:
98:d9:23:90:fc:f8:d7:89:c1:76:2f:2e:e6:83:48:cd:c7:7f:
ba:e0:68:a3:e9:03:c2:23:fc:20:e9:cc:ad:3a:83:d8:cf:00:
36:d6:f7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:04:56 2026 by rpki-client