Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/KCphUOYc3R0ScAozAo3XjhlLIWI.roa
File: KCphUOYc3R0ScAozAo3XjhlLIWI.roa (raw, json)
Hash identifier: OxWGsEs6fkFDol9/B3jqNJq6VK4dWhnnS9uFw75wa40=
Subject key identifier: 28:2A:61:50:E6:1C:DD:1D:12:70:0A:33:02:8D:D7:8E:19:4B:21:62
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01A0D75196B3DD53E0B051DD31803E53EC46
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/KCphUOYc3R0ScAozAo3XjhlLIWI.roa
Signing time: Fri 25 Sep 2026 06:47:23 +0000
ROA not before: Fri 25 Sep 2026 06:47:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.233.32.0/24 maxlen: 24
46.233.34.0/24 maxlen: 24
46.233.35.0/24 maxlen: 24
46.233.42.0/24 maxlen: 24
46.233.44.0/24 maxlen: 24
46.233.45.0/24 maxlen: 24
46.233.55.0/24 maxlen: 24
46.233.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Sep 2026 07:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:51:96:b3:dd:53:e0:b0:51:dd:31:80:3e:53:ec:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Sep 25 06:47:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=282a6150e61cdd1d12700a33028dd78e194b2162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:44:df:6f:11:23:f2:e0:0e:61:38:8e:8e:
c6:fb:67:88:58:55:58:72:ff:75:0b:05:32:e3:a3:
fb:8c:1d:e3:ca:8c:73:8f:5a:80:f8:fc:a9:fa:1b:
52:df:1b:84:27:35:89:bc:9d:05:62:35:53:d1:07:
62:0d:30:5f:f8:f2:8b:45:5a:82:11:c0:3a:53:e6:
25:5b:8a:c8:fd:20:52:ad:61:88:65:a2:e3:dc:07:
74:f4:09:4f:73:7b:eb:74:70:56:c1:7b:88:ba:56:
37:a5:a7:3f:77:77:11:c3:d6:e6:c2:4c:c9:e5:04:
bd:3c:ad:c2:78:7a:74:22:a3:58:08:c0:69:c2:93:
9f:d2:35:b9:b3:f3:46:4a:e3:ff:ad:1b:67:ea:f4:
9b:f1:26:10:9b:4d:d4:c7:08:93:41:06:bd:9d:cc:
7c:4e:e4:c5:4e:12:48:54:15:f0:79:73:a2:fc:f8:
0f:32:5e:77:da:01:7c:f4:1f:ea:df:f7:bc:d4:aa:
55:78:c6:d8:44:3c:54:91:c2:82:76:e7:f1:de:f9:
e5:0d:26:e9:91:f2:aa:07:6d:f7:4f:fd:8f:55:b5:
d5:26:17:95:d6:6c:b7:f7:88:0c:09:68:31:9b:0b:
c7:de:95:0f:91:db:41:db:3c:1c:36:7d:65:02:b8:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2A:61:50:E6:1C:DD:1D:12:70:0A:33:02:8D:D7:8E:19:4B:21:62
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/KCphUOYc3R0ScAozAo3XjhlLIWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/24
46.233.34.0/23
46.233.42.0/24
46.233.44.0/23
46.233.55.0/24
46.233.62.0/24
Signature Algorithm: sha256WithRSAEncryption
37:06:81:34:fd:76:5e:0d:8a:bd:d5:0a:1a:0a:4f:ec:0f:0b:
5a:4a:f6:e2:f8:ec:de:4e:d0:a3:cb:f9:bc:3a:9e:8a:a3:e2:
b4:07:60:36:f3:a9:f5:0f:ae:f7:52:71:cc:ab:f5:8c:ee:f0:
d9:8e:cb:80:17:96:65:bc:35:98:42:57:dd:72:cd:15:26:28:
1a:e3:cc:9b:57:44:1f:e9:ef:23:f5:ae:a2:9d:c0:fe:f4:c9:
60:a4:34:ff:a4:ad:8b:b3:ee:0d:12:65:93:84:a7:b8:4c:0b:
e3:23:1d:0a:6d:4f:60:0d:e7:e7:d3:82:ce:88:ff:d1:3d:0c:
85:ea:aa:18:f6:12:47:45:85:60:57:93:74:d8:df:2c:19:b1:
a4:42:44:ee:53:43:c8:99:ab:5b:4b:e5:25:57:2f:47:02:3c:
1e:2a:f0:22:24:c1:a0:71:63:b0:18:77:a4:2f:2f:04:89:3e:
a9:ea:2d:fe:25:7f:ca:d2:30:88:f3:26:c2:85:cf:59:c8:f2:
4c:59:d1:a3:1a:b3:bc:3b:b0:11:f4:46:e9:91:f0:5c:0f:45:
35:0f:98:2d:f1:50:6c:5e:ed:0e:bb:5b:26:b3:e4:3e:51:91:
cc:1d:ae:7f:6f:2f:46:9a:f5:56:b8:67:ce:5e:f1:ae:ee:23:
96:25:ca:7e
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaDXUZaz3VPgsFHdMYA+U+xGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjYwOTI1MDY0NzIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODJhNjE1MGU2MWNkZDFkMTI3MDBhMzMwMjhkZDc4ZTE5NGIyMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHVE328RI/LgDmE4jo7G+2eIWFVY
cv91CwUy46P7jB3jyoxzj1qA+Pyp+htS3xuEJzWJvJ0FYjVT0QdiDTBf+PKLRVqC
EcA6U+YlW4rI/SBSrWGIZaLj3Ad09AlPc3vrdHBWwXuIulY3pac/d3cRw9bmwkzJ
5QS9PK3CeHp0IqNYCMBpwpOf0jW5s/NGSuP/rRtn6vSb8SYQm03UxwiTQQa9ncx8
TuTFThJIVBXweXOi/PgPMl532gF89B/q3/e81KpVeMbYRDxUkcKCdufx3vnlDSbp
kfKqB233T/2PVbXVJheV1my394gMCWgxmwvH3pUPkdtB2zwcNn1lArhNIQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFCgqYVDmHN0dEnAKMwKN144ZSyFiMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvS0NwaFVPWWMzUjBTY0FvekFvM1hqaGxMSVdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALukgAwQB
LukiAwQALukqAwQBLuksAwQALuk3AwQALuk+MA0GCSqGSIb3DQEBCwUAA4IBAQA3
BoE0/XZeDYq91QoaCk/sDwtaSvbi+OzeTtCjy/m8Op6Ko+K0B2A286n1D673UnHM
q/WM7vDZjsuAF5ZlvDWYQlfdcs0VJiga48ybV0Qf6e8j9a6incD+9MlgpDT/pK2L
s+4NEmWThKe4TAvjIx0KbU9gDefn04LOiP/RPQyF6qoY9hJHRYVgV5N02N8sGbGk
QkTuU0PImatbS+UlVy9HAjweKvAiJMGgcWOwGHekLy8EiT6p6i3+JX/K0jCI8ybC
hc9ZyPJMWdGjGrO8O7AR9EbpkfBcD0U1D5gt8VBsXu0Ou1sms+Q+UZHMHa5/by9G
mvVWuGfOXvGu7iOWJcp+
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:33:15 2026 by rpki-client