Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/xeczM0VRRey68JMfj1lHfq4os5c.roa
File: xeczM0VRRey68JMfj1lHfq4os5c.roa (raw, json)
Hash identifier: IXLZ9siB0qdK2Sui0N8KU53hbDkb/ZmmjdLcwEik08k=
Subject key identifier: C5:E7:33:33:45:51:45:EC:BA:F0:93:1F:8F:59:47:7E:AE:28:B3:97
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D215C2167BB805E2CC326731A63A644AA
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/xeczM0VRRey68JMfj1lHfq4os5c.roa
Signing time: Tue 24 Mar 2026 19:39:39 +0000
ROA not before: Tue 24 Mar 2026 19:39:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:19c0::/32 maxlen: 32
2a11:ec3::/32 maxlen: 32
2a12:2804::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 26 Mar 2026 20:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:5c:21:67:bb:80:5e:2c:c3:26:73:1a:63:a6:44:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 24 19:39:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5e73333455145ecbaf0931f8f59477eae28b397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:02:87:da:8c:12:66:f5:78:2b:96:32:53:
ef:03:17:5d:31:3d:12:8e:7b:1f:d0:72:69:d9:96:
05:e6:ee:40:b1:24:55:cc:89:76:8d:a7:a0:44:68:
34:18:1c:61:6d:bb:5e:27:b1:62:bb:fc:1a:31:33:
cd:0e:95:b9:c2:f2:5d:d4:10:66:18:75:aa:b4:80:
ef:b8:bb:81:26:86:e8:2a:7d:73:86:91:cf:3f:a1:
9b:04:8c:ca:14:0c:65:dc:e9:d5:54:2b:2f:31:39:
7a:58:d3:ec:09:37:07:73:5e:33:a6:71:cd:22:3e:
2a:aa:ca:7e:33:41:54:0e:df:53:63:70:83:8f:07:
c2:9c:7d:55:ba:0b:30:7c:3d:0e:2a:ca:2e:74:b7:
4d:f1:a6:53:aa:e6:af:83:8c:f3:4d:5e:a4:6c:f0:
b7:97:1b:49:4e:33:d4:ab:31:04:5b:03:dd:4a:fc:
95:51:6e:b3:9f:57:65:f8:f1:10:76:bd:cd:c6:c2:
ab:4e:5b:8a:bf:c8:94:17:d8:f7:4b:fc:a2:89:45:
67:c8:46:bc:05:c3:57:93:00:05:16:71:cd:47:97:
b5:11:39:f0:6f:a2:41:eb:37:94:df:51:d8:d9:14:
89:5e:da:fc:63:a5:ea:0c:f3:43:15:ab:80:ac:cb:
14:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E7:33:33:45:51:45:EC:BA:F0:93:1F:8F:59:47:7E:AE:28:B3:97
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/xeczM0VRRey68JMfj1lHfq4os5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:19c0::/32
2a11:ec3::/32
2a12:2804::/32
Signature Algorithm: sha256WithRSAEncryption
8d:eb:d9:e4:25:10:72:26:61:85:21:6c:cf:21:d8:0e:ac:b2:
4c:84:7c:42:19:ba:5d:2f:f3:22:c6:9d:05:af:1a:8b:33:34:
c8:8a:28:31:7c:d6:f1:d3:d0:99:89:fe:ff:7c:4d:56:06:df:
d5:01:47:f7:80:75:3d:09:11:3c:57:59:4b:95:e8:71:b3:01:
fb:ee:5e:30:8a:68:51:cd:59:e0:f4:f0:7e:f5:39:38:97:9c:
8e:db:f2:b2:0b:b5:a6:7a:12:8d:0c:24:ed:e1:81:91:0c:e9:
00:73:d9:20:f5:1b:35:31:e5:5e:86:ed:45:f1:c0:85:ff:17:
88:a2:ca:1e:d3:80:74:8e:1c:af:46:89:c9:24:71:6a:e0:0d:
23:7a:7c:bf:92:43:cf:eb:84:69:0f:84:c3:2b:cd:b6:33:a9:
c7:fc:7d:7a:fe:db:48:79:31:27:3a:9f:59:86:b0:49:f3:33:
89:13:f0:de:c8:f7:6b:34:2e:b2:2e:15:80:da:8f:c9:d7:6c:
a8:a5:62:54:14:e7:29:26:bc:94:3f:00:ba:8f:12:70:e2:84:
7a:7c:3c:51:29:e0:0a:0d:78:3b:44:7d:43:2a:7a:ce:6c:7e:
ad:f4:2a:8b:98:5b:99:12:ac:a1:3f:99:85:ae:78:ba:c7:e7:
ea:cd:d7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:53:59 2026 by rpki-client