Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FN7MWMEZ7S6CQ_O2Ze-NMTonWPY.roa
File: FN7MWMEZ7S6CQ_O2Ze-NMTonWPY.roa (raw, json)
Hash identifier: H7D4zPGxkU8hY6fLvvTmnvdhirH92tnK4Edr96+0lKg=
Subject key identifier: 14:DE:CC:58:C1:19:ED:2E:82:43:F3:B6:65:EF:8D:31:3A:27:58:F6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D1E7F1BC868463B6FD33D703C07469E87
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FN7MWMEZ7S6CQ_O2Ze-NMTonWPY.roa
Signing time: Tue 24 Mar 2026 06:18:59 +0000
ROA not before: Tue 24 Mar 2026 06:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200636
IP address blocks: 5.175.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Mar 2026 15:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:7f:1b:c8:68:46:3b:6f:d3:3d:70:3c:07:46:9e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 24 06:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14decc58c119ed2e8243f3b665ef8d313a2758f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:e7:c9:b4:d9:72:7e:03:b7:6f:8c:55:03:
ab:df:4d:26:5e:7f:de:18:42:09:89:1e:1e:90:e1:
f8:0a:81:39:a3:ce:fb:6b:f9:3b:ab:cd:2b:90:4e:
1e:10:53:45:5a:72:f5:a1:22:1b:1c:8e:64:07:c4:
c6:98:7f:02:a3:e4:5a:53:bb:f8:f5:52:3f:f9:79:
2d:31:23:ed:e4:a0:3e:72:96:39:dc:0e:4a:78:24:
0e:33:65:e0:da:b8:f4:55:63:d4:dd:30:81:5a:84:
77:28:10:9c:2c:91:49:ef:a5:49:09:39:66:37:96:
67:fc:c4:79:fe:c4:49:23:1d:bb:30:f4:be:eb:ff:
03:d3:1a:b2:72:ae:a1:53:7b:b2:92:68:76:fd:db:
3d:94:b3:96:d4:d1:89:38:54:84:3d:c7:c9:e1:b7:
fa:11:c7:63:c0:99:29:43:04:c3:9e:ef:4a:c5:c6:
ee:45:44:3f:a8:59:31:c4:c3:19:55:2b:a4:7d:67:
cc:15:07:73:1c:85:38:17:d6:bb:ea:9f:f2:26:fe:
d8:5a:66:57:85:75:f6:6e:b3:0b:96:98:5e:c6:00:
31:93:86:3f:23:c3:37:d5:67:5b:1a:10:fe:b9:01:
aa:40:f0:52:3f:66:77:59:6a:fa:48:d2:7b:e1:a6:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DE:CC:58:C1:19:ED:2E:82:43:F3:B6:65:EF:8D:31:3A:27:58:F6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FN7MWMEZ7S6CQ_O2Ze-NMTonWPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.215.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:e1:62:df:f6:90:5d:64:76:12:f2:f7:ba:3d:a3:2f:bb:a7:
09:9f:c2:61:22:58:4e:d7:cf:e3:23:28:df:05:fe:07:0a:e9:
9a:37:cc:4c:3d:3f:18:84:a0:1a:b9:63:4b:09:96:d6:09:9e:
72:60:21:df:3d:bf:0f:59:00:2c:e4:01:2e:17:c8:33:bd:a9:
f3:59:f7:07:d8:a6:a2:9d:35:7d:12:61:3b:1e:bf:ce:d0:91:
a3:41:12:8e:0a:33:23:e3:06:50:8e:ad:b6:5b:7d:88:81:ce:
19:8b:b7:9e:30:83:46:a0:a6:5e:e8:ac:ce:71:20:cc:5b:d6:
56:9a:87:95:69:31:c1:df:aa:d1:58:64:7a:3b:f5:a1:fb:57:
84:3c:d8:b2:b5:d5:d1:c9:99:fe:8b:2e:e3:25:88:f0:58:2d:
d2:35:49:e3:af:97:55:8b:27:0a:98:72:e8:57:5b:97:82:31:
e2:5d:16:d2:ac:38:f2:e7:3f:3a:48:9f:5b:6a:8a:ff:0d:96:
aa:23:af:bb:67:af:d2:40:fb:77:d4:9f:74:e6:14:a3:f8:dc:
49:31:bf:9a:1c:c8:26:56:90:34:4a:15:b4:52:6e:1c:b6:e8:
3b:a6:cc:77:e2:d6:c9:6b:c9:e6:6f:27:33:b4:63:06:42:0f:
4f:59:70:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:50:33 2026 by rpki-client