Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/UqOqL5vJazBfT9P2IH_GyRn3Zcc.roa
File: UqOqL5vJazBfT9P2IH_GyRn3Zcc.roa (raw, json)
Hash identifier: 1+DqeYUSgycCM5tYtw0tg2PgOKOH/hlLTHgCoy6uS7E=
Subject key identifier: 52:A3:AA:2F:9B:C9:6B:30:5F:4F:D3:F6:20:7F:C6:C9:19:F7:65:C7
Certificate issuer: /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial: 019ECC027699FE6541FCC0898E4CE20BE55D
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/UqOqL5vJazBfT9P2IH_GyRn3Zcc.roa
Signing time: Mon 15 Jun 2026 15:59:33 +0000
ROA not before: Mon 15 Jun 2026 15:59:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.151.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jun 2026 09:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cc:02:76:99:fe:65:41:fc:c0:89:8e:4c:e2:0b:e5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
Validity
Not Before: Jun 15 15:59:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52a3aa2f9bc96b305f4fd3f6207fc6c919f765c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5f:41:9d:b7:16:d5:69:a9:ed:4d:d9:4f:54:
f6:52:ed:ce:0a:cc:1d:87:91:25:ba:39:3b:82:83:
af:e3:8f:31:b4:6f:4e:be:2a:e6:f0:3b:48:6d:25:
eb:5a:12:18:90:24:cd:a5:c4:0b:73:f2:ee:bc:1a:
07:a8:dd:50:3a:bd:3e:39:91:11:6c:23:b4:af:bc:
e0:9f:dc:bf:62:12:c6:26:6b:b5:e6:34:f7:6d:05:
9d:3b:77:34:36:11:48:e1:10:8e:35:5a:6e:ae:2a:
d0:e5:d5:52:68:14:86:b5:9b:a5:2d:04:b3:e1:78:
bf:be:ba:62:80:8a:1f:55:78:09:26:a0:d4:b9:a0:
4e:35:83:8c:1e:11:5e:f0:0a:3e:53:f0:2e:d5:bf:
e8:75:a3:64:62:bd:a6:e5:e5:9d:04:2d:26:08:76:
3d:d9:4e:04:f0:9b:60:c0:be:d1:00:be:56:f4:92:
19:a5:b2:83:d7:50:e1:21:6a:2e:ee:7d:5d:83:0f:
40:09:4f:50:00:34:5e:7b:d7:3e:b0:45:d7:bf:09:
94:ea:a8:1a:89:3d:92:12:d8:f8:1f:e8:68:01:85:
08:f2:da:ae:e7:0e:4c:a3:02:6f:89:e5:91:70:4d:
2a:de:b9:83:13:2e:e5:dc:27:80:4f:81:44:e9:a2:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A3:AA:2F:9B:C9:6B:30:5F:4F:D3:F6:20:7F:C6:C9:19:F7:65:C7
X509v3 Authority Key Identifier:
keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/UqOqL5vJazBfT9P2IH_GyRn3Zcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.71.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:20:d8:33:9a:95:eb:ff:3c:80:df:84:00:06:b9:41:33:cc:
ad:aa:5e:9b:90:86:19:5c:28:72:41:71:87:ab:7a:f8:b2:07:
dd:f1:f0:ec:e8:76:e7:cb:e8:95:6d:51:1e:cd:b7:d2:57:b7:
7f:38:fa:d4:f0:7b:de:ba:76:1d:7d:05:18:9a:73:eb:ec:7b:
8d:7e:5b:e4:1b:e1:6b:46:1b:00:6f:76:ae:21:ac:77:c5:53:
b6:41:af:77:3b:97:c8:ee:09:ff:b2:49:8f:a8:17:10:c8:0b:
92:12:66:6d:14:28:f0:91:c2:c5:2b:15:91:9d:23:62:e6:da:
0b:aa:50:e7:88:1c:df:83:41:58:14:98:d2:be:ba:48:4f:c1:
e9:68:11:fb:60:52:d9:23:b1:0c:bf:c1:5e:d6:23:bb:b4:e3:
8f:4d:43:1d:b1:30:a6:c1:85:de:e4:12:4c:ce:3c:bd:81:c5:
24:36:18:bd:a0:40:5e:f7:ca:3f:ed:bf:90:c3:0f:1a:69:1f:
46:aa:c4:f2:f3:0c:be:bd:38:a8:e6:98:bf:cb:07:f3:81:80:
b8:ef:d4:de:5d:a8:d3:73:38:b4:69:6d:34:42:6c:1f:13:0c:
81:cf:51:fa:5e:b1:c2:aa:99:10:28:48:2a:3f:1e:4e:a9:62:
12:97:05:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 16:00:14 2026 by rpki-client