Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5gLxq2wCjrS8vZXvRQVAhRFzHqA.roa
File: 5gLxq2wCjrS8vZXvRQVAhRFzHqA.roa (raw, json)
Hash identifier: CeYK/juH8je1/b2ZDbD2DG9vCejICjXpZe/+zGMcHUY=
Subject key identifier: E6:02:F1:AB:6C:02:8E:B4:BC:BD:95:EF:45:05:40:85:11:73:1E:A0
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C2365A86C5ACD020B1AE253A69A872BDB
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5gLxq2wCjrS8vZXvRQVAhRFzHqA.roa
Signing time: Tue 03 Feb 2026 12:06:30 +0000
ROA not before: Tue 03 Feb 2026 12:06:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.80.156.0/24 maxlen: 24
62.106.89.0/24 maxlen: 24
2a10:7403::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 16 Feb 2026 12:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:23:65:a8:6c:5a:cd:02:0b:1a:e2:53:a6:9a:87:2b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 3 12:06:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e602f1ab6c028eb4bcbd95ef4505408511731ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:81:3b:30:40:5d:e2:2f:61:af:57:3e:4f:3e:
68:18:93:2f:14:fa:82:dd:00:a8:2f:e5:a7:74:b6:
4c:55:a3:b9:3b:82:8b:1d:b9:5c:77:d0:26:2e:e1:
39:4b:d0:6a:93:03:e8:9e:a2:4b:b3:f2:42:7c:a1:
80:75:52:7d:23:6f:4f:80:05:aa:db:03:44:90:07:
f8:12:44:db:16:93:59:e6:0a:72:f7:ba:69:9c:59:
e4:85:cd:be:0f:8c:5a:45:d1:12:7b:d2:ca:b7:16:
f2:a3:19:82:0a:54:c1:64:81:37:e6:30:dc:c9:2c:
65:dc:a3:9b:78:fb:56:82:2b:18:27:f3:d1:7d:bb:
63:b1:f6:9b:03:d6:ce:fa:57:e5:97:1d:b9:ed:bb:
b1:39:19:74:26:56:6d:d1:c1:2f:cf:bc:13:46:ab:
58:31:b3:56:ef:4a:b6:9c:2c:23:b2:67:14:7a:87:
ff:82:3d:d4:57:60:01:31:31:60:d3:2e:1a:a1:7c:
08:93:40:af:d7:f5:f5:57:c6:11:db:27:46:fd:8f:
70:3a:00:79:ec:1e:73:90:b1:1b:38:8a:73:40:bb:
f8:66:26:ba:03:d0:46:59:f1:35:f2:cb:c2:c0:04:
89:a2:ea:cf:f9:c6:46:b8:da:b1:df:95:dd:6d:d9:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:02:F1:AB:6C:02:8E:B4:BC:BD:95:EF:45:05:40:85:11:73:1E:A0
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5gLxq2wCjrS8vZXvRQVAhRFzHqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.156.0/24
62.106.89.0/24
IPv6:
2a10:7403::/32
Signature Algorithm: sha256WithRSAEncryption
58:11:94:d3:13:88:87:44:21:80:04:af:b5:dd:30:87:3d:41:
64:78:be:04:64:40:fe:93:8b:87:c5:d8:51:df:49:fc:66:1d:
6f:d4:77:b3:03:ab:9a:66:29:46:bc:22:f4:87:08:30:92:1b:
25:d1:22:a6:03:12:e2:f9:01:85:52:a9:61:fb:75:0f:82:79:
92:15:38:44:1d:6f:52:07:6f:97:6a:3a:36:48:73:53:3a:8c:
a3:e7:25:7d:7c:fe:69:c8:fc:7c:2a:7f:13:32:60:b4:f5:5a:
79:3e:65:03:98:7a:e3:21:e5:d1:83:1a:0e:9f:f1:e9:81:7f:
36:37:e5:c9:ea:fd:2a:4f:e6:89:7e:73:d4:c3:9c:80:48:18:
f7:06:b7:c3:01:69:3d:af:5e:a6:b3:31:d3:13:d5:c6:5a:98:
67:ba:40:53:45:5b:ca:e7:d6:39:ff:87:4c:e2:72:86:b1:c0:
b7:d8:20:34:89:4b:0f:e5:c1:66:92:75:cd:cf:9b:fa:b2:a7:
be:6a:18:48:26:ca:2c:60:eb:c9:80:f2:74:0e:f6:a5:f0:66:
79:4b:d6:4a:94:3e:43:f0:02:18:0a:46:f6:0d:3f:5c:86:eb:
2d:5e:19:64:7e:04:3a:2c:f0:d7:bc:ad:3e:fd:74:f1:72:10:
a5:56:fd:7e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZwjZahsWs0CCxriU6aahyvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjYwMjAzMTIwNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjAyZjFhYjZjMDI4ZWI0YmNiZDk1ZWY0NTA1NDA4NTExNzMxZWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IE7MEBd4i9hr1c+Tz5oGJMvFPqC
3QCoL+WndLZMVaO5O4KLHblcd9AmLuE5S9BqkwPonqJLs/JCfKGAdVJ9I29PgAWq
2wNEkAf4EkTbFpNZ5gpy97ppnFnkhc2+D4xaRdESe9LKtxbyoxmCClTBZIE35jDc
ySxl3KObePtWgisYJ/PRfbtjsfabA9bO+lfllx257buxORl0JlZt0cEvz7wTRqtY
MbNW70q2nCwjsmcUeof/gj3UV2ABMTFg0y4aoXwIk0Cv1/X1V8YR2ydG/Y9wOgB5
7B5zkLEbOIpzQLv4Zia6A9BGWfE18svCwASJourP+cZGuNqx35XdbdmBqwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOYC8atsAo60vL2V70UFQIURcx6gMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvNWdMeHEyd0NqclM4dlpYdlJRVkFoUkZ6SHFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALVCcAwQA
PmpZMA0EAgACMAcDBQAqEHQDMA0GCSqGSIb3DQEBCwUAA4IBAQBYEZTTE4iHRCGA
BK+13TCHPUFkeL4EZED+k4uHxdhR30n8Zh1v1HezA6uaZilGvCL0hwgwkhsl0SKm
AxLi+QGFUqlh+3UPgnmSFThEHW9SB2+Xajo2SHNTOoyj5yV9fP5pyPx8Kn8TMmC0
9Vp5PmUDmHrjIeXRgxoOn/HpgX82N+XJ6v0qT+aJfnPUw5yASBj3BrfDAWk9r16m
szHTE9XGWphnukBTRVvK59Y5/4dM4nKGscC32CA0iUsP5cFmknXNz5v6sqe+ahhI
JsosYOvJgPJ0Dval8GZ5S9ZKlD5D8AIYCkb2DT9chustXhlkfgQ6LPDXvK0+/XTx
chClVv1+
-----END CERTIFICATE-----
Generated at Wed Mar 18 08:07:18 2026 by rpki-client