Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/mQACZ-AZ1CoZnbws9zlxZzTbyQ0.roa
File: mQACZ-AZ1CoZnbws9zlxZzTbyQ0.roa (raw, json)
Hash identifier: tjKXad4TgDUZum3w5aTDbXtDNdWAtBcH4jHfj8aFxnE=
Subject key identifier: 99:00:02:67:E0:19:D4:2A:19:9D:BC:2C:F7:39:71:67:34:DB:C9:0D
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A0C40354283AA583FE89E68AE1DECF9EDB
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/mQACZ-AZ1CoZnbws9zlxZzTbyQ0.roa
Signing time: Mon 21 Sep 2026 12:49:07 +0000
ROA not before: Mon 21 Sep 2026 12:49:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.140.144.0/24 maxlen: 32
2a0e:4001:100::/40 maxlen: 128
2a10:2ec0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 23 Sep 2026 15:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:03:54:28:3a:a5:83:fe:89:e6:8a:e1:de:cf:9e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Sep 21 12:49:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99000267e019d42a199dbc2cf739716734dbc90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:b3:bc:bd:cf:c0:00:67:f8:49:7e:01:b8:
88:7a:dd:c7:fa:5e:00:bd:02:c2:4b:7b:c3:fc:0a:
dd:13:99:4a:cb:bc:e0:5f:30:7c:63:0d:b4:e9:a7:
79:30:41:6a:bb:54:99:ef:ce:55:38:25:a3:ac:0b:
c3:31:5e:bd:28:47:93:fa:d5:0f:47:3f:63:df:1e:
18:24:35:a9:dc:6d:b0:9b:ad:a8:d2:fb:5c:e8:96:
02:3f:dc:ca:08:4a:af:7f:29:66:1e:07:8b:4a:bd:
9a:a6:07:24:50:f5:b6:03:70:23:2a:70:c9:14:33:
16:15:0e:05:f4:3a:cb:db:aa:44:5c:35:fb:45:b4:
c3:22:8f:32:ec:d6:60:8f:90:4c:c4:e7:91:ae:b0:
3b:7a:39:ba:82:af:83:24:39:0b:5e:92:18:23:53:
37:f1:97:11:ff:fc:56:9f:8b:cb:76:29:ae:0e:05:
2e:0a:b2:59:28:1a:6b:70:5a:f7:e2:c0:5b:f9:d8:
c6:ea:b3:ed:77:55:a0:ce:3f:cf:33:cb:46:ea:2f:
82:57:e7:f8:ba:93:53:bd:54:67:43:52:b5:8b:85:
6e:ab:ad:67:b5:20:e3:8b:70:ff:72:f7:4e:c7:53:
cf:ac:a1:8b:eb:fd:8e:c4:84:43:1d:87:a8:99:08:
bb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:00:02:67:E0:19:D4:2A:19:9D:BC:2C:F7:39:71:67:34:DB:C9:0D
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/mQACZ-AZ1CoZnbws9zlxZzTbyQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.144.0/24
IPv6:
2a0e:4001:100::/40
2a10:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
35:b9:d9:d8:45:31:22:5e:0c:05:10:fd:e0:61:cd:ea:aa:4e:
e1:41:2a:0b:8a:a4:4c:86:89:75:f1:23:bb:f4:71:8e:b9:09:
e2:47:00:d7:eb:ac:39:89:8d:bb:18:98:7b:1f:73:0c:f3:b2:
4f:e8:b1:c4:b8:87:04:dc:a8:f9:c8:46:02:81:b4:0e:49:24:
73:91:b2:0e:ab:e2:e1:e5:04:cc:f7:41:7a:20:bf:48:74:29:
0f:ab:2e:03:58:9c:7e:81:53:c2:99:ea:a9:10:3a:c8:57:1b:
9c:62:8f:bc:1f:6c:5a:2d:8d:e7:81:6b:d5:8f:be:ef:7b:04:
fa:0c:3a:20:5b:be:04:f9:19:a9:7d:48:2d:0f:35:41:07:f4:
40:1f:e4:de:fe:e2:43:22:24:f9:79:12:43:4b:ec:ba:cf:b4:
55:ee:5d:aa:fd:cb:0f:5c:e8:da:02:fc:7d:51:c7:07:18:87:
78:81:40:50:9e:1c:4e:3f:3a:6d:d3:8e:92:74:7a:18:db:88:
8b:73:24:0e:9d:65:09:ac:fe:c9:59:e9:be:db:a0:d0:6b:9c:
66:80:59:13:d2:1e:84:b1:8d:32:de:e1:86:85:02:00:52:f6:
62:51:26:1f:27:86:5b:aa:49:97:c8:b2:1d:71:fa:af:7e:d7:
2d:99:46:4b
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAaDEA1QoOqWD/onmiuHez57bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjYwOTIxMTI0OTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTAwMDI2N2UwMTlkNDJhMTk5ZGJjMmNmNzM5NzE2NzM0ZGJjOTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrezvL3PwABn+El+AbiIet3H+l4A
vQLCS3vD/ArdE5lKy7zgXzB8Yw206ad5MEFqu1SZ785VOCWjrAvDMV69KEeT+tUP
Rz9j3x4YJDWp3G2wm62o0vtc6JYCP9zKCEqvfylmHgeLSr2apgckUPW2A3AjKnDJ
FDMWFQ4F9DrL26pEXDX7RbTDIo8y7NZgj5BMxOeRrrA7ejm6gq+DJDkLXpIYI1M3
8ZcR//xWn4vLdimuDgUuCrJZKBprcFr34sBb+djG6rPtd1Wgzj/PM8tG6i+CV+f4
upNTvVRnQ1K1i4Vuq61ntSDji3D/cvdOx1PPrKGL6/2OxIRDHYeomQi7ZwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFJkAAmfgGdQqGZ28LPc5cWc028kNMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvbVFBQ1otQVoxQ29abmJ3czl6bHhaelRieVEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAMBAIAATAGAwQALYyQMBUE
AgACMA8DBgAqDkABAQMFAyoQLsAwDQYJKoZIhvcNAQELBQADggEBADW52dhFMSJe
DAUQ/eBhzeqqTuFBKguKpEyGiXXxI7v0cY65CeJHANfrrDmJjbsYmHsfcwzzsk/o
scS4hwTcqPnIRgKBtA5JJHORsg6r4uHlBMz3QXogv0h0KQ+rLgNYnH6BU8KZ6qkQ
OshXG5xij7wfbFotjeeBa9WPvu97BPoMOiBbvgT5Gal9SC0PNUEH9EAf5N7+4kMi
JPl5EkNL7LrPtFXuXar9yw9c6NoC/H1RxwcYh3iBQFCeHE4/Om3TjpJ0ehjbiItz
JA6dZQms/slZ6b7boNBrnGaAWRPSHoSxjTLe4YaFAgBS9mJRJh8nhluqSZfIsh1x
+q9+1y2ZRks=
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:47:34 2026 by rpki-client