Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/dLMQNSNoy3Yg1yS8kmfRfucDKeg.roa
File: dLMQNSNoy3Yg1yS8kmfRfucDKeg.roa (raw, json)
Hash identifier: 5JV59shBqFh4YXN4lIw9oJhTTek/noywBiyWTkSMXxI=
Subject key identifier: 74:B3:10:35:23:68:CB:76:20:D7:24:BC:92:67:D1:7E:E7:03:29:E8
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A0C51A8F8C60CFEA884C51D2C771BFE2A6
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/dLMQNSNoy3Yg1yS8kmfRfucDKeg.roa
Signing time: Mon 21 Sep 2026 17:54:07 +0000
ROA not before: Mon 21 Sep 2026 17:54:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213705
IP address blocks: 131.123.3.0/24 maxlen: 24
131.123.11.0/24 maxlen: 24
131.123.13.0/24 maxlen: 24
131.123.16.0/24 maxlen: 24
131.123.17.0/24 maxlen: 24
131.123.18.0/24 maxlen: 24
131.123.19.0/24 maxlen: 24
131.123.21.0/24 maxlen: 24
131.123.22.0/24 maxlen: 24
131.123.26.0/24 maxlen: 24
131.123.27.0/24 maxlen: 24
131.123.29.0/24 maxlen: 24
131.123.30.0/24 maxlen: 24
206.15.48.0/24 maxlen: 24
206.15.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 11:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:1a:8f:8c:60:cf:ea:88:4c:51:d2:c7:71:bf:e2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Sep 21 17:54:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74b310352368cb7620d724bc9267d17ee70329e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:f5:8a:81:80:42:bf:7f:f4:db:48:f3:10:
13:33:80:67:ee:b8:1f:fd:70:13:a6:6d:c1:1d:09:
91:a7:4b:ab:b4:f9:4d:33:aa:fd:79:72:f2:ff:24:
dd:bd:23:97:2d:e2:e0:1d:28:0c:ac:cc:79:a9:3c:
13:e7:e5:db:5f:21:4f:68:3d:84:2d:cc:86:f5:8a:
d8:12:c7:7a:03:9b:fb:74:00:40:5f:b0:82:89:87:
ec:b0:c1:42:16:11:90:3c:e9:52:7a:d7:98:02:c6:
42:41:e0:0e:57:97:54:1a:79:17:c1:5b:84:9c:bf:
92:3f:b7:7d:cf:f0:bd:c8:30:cb:ff:ff:f5:25:48:
13:d3:32:89:b1:30:0e:28:e4:28:87:3f:41:be:98:
d0:b4:e8:08:94:45:2f:b4:cf:8f:76:b7:ab:c2:7d:
89:51:c9:45:50:c7:64:10:8f:82:b4:8e:11:91:ab:
c5:85:99:8c:2a:69:ef:84:46:39:b0:d6:19:30:43:
ee:1e:43:28:32:1a:c6:c5:ec:75:3f:e9:42:fb:97:
6b:cd:ac:47:b2:76:c9:b5:44:6e:b1:b6:50:80:a2:
a6:1e:f1:6e:d7:02:ea:a4:78:70:6b:ee:44:15:59:
8f:2e:1d:ab:e2:68:dc:70:e5:d7:4c:a5:4a:da:82:
61:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B3:10:35:23:68:CB:76:20:D7:24:BC:92:67:D1:7E:E7:03:29:E8
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/dLMQNSNoy3Yg1yS8kmfRfucDKeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.123.3.0/24
131.123.11.0/24
131.123.13.0/24
131.123.16.0/22
131.123.21.0-131.123.22.255
131.123.26.0/23
131.123.29.0-131.123.30.255
206.15.48.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:1f:56:64:a6:e4:62:a9:05:83:7f:41:e0:92:45:0f:8d:8b:
fb:dc:9c:15:0e:5e:ab:cc:93:5c:e9:36:16:5c:8d:8a:1e:81:
70:28:16:c8:e9:0b:a3:13:eb:0f:0a:9f:40:bd:74:c0:59:68:
ba:9f:fc:dd:84:58:0c:97:7e:c0:15:74:06:82:98:11:58:9b:
2c:b5:bf:61:12:ed:e8:1e:42:9b:90:a0:a1:82:6e:58:a4:a7:
72:fd:88:17:89:ef:50:03:04:a0:46:20:2a:81:43:da:2c:36:
66:6b:08:57:f2:a2:61:72:8c:3f:7e:4f:83:39:5b:59:23:7a:
93:70:cc:4a:f7:cf:36:94:ac:63:f8:52:e9:a6:6d:9b:38:21:
10:3d:d7:c7:b2:5b:e8:f8:7e:41:5f:fb:7d:7b:fd:ba:3c:1d:
70:4a:a3:79:5b:26:dc:3b:b1:2e:1f:6e:22:2e:1b:c3:09:21:
b0:b5:3c:5e:3b:b6:06:b7:47:ea:ff:db:39:88:81:06:84:0d:
39:4f:79:e8:b2:9d:61:e9:36:2a:5d:04:91:e8:be:57:13:8a:
73:b1:f7:d9:09:6f:a1:f5:7a:01:a0:83:cf:f8:e3:e0:5e:40:
0b:a5:af:86:a4:cd:11:f7:5d:94:48:b8:3a:3b:66:66:ac:f5:
ec:e7:80:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:46:26 2026 by rpki-client