Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/brzwhlIngQPeOWOAGqGnh0dWVoM.roa
File: brzwhlIngQPeOWOAGqGnh0dWVoM.roa (raw, json)
Hash identifier: l6cyccQrqCO64RaTNoUXh0+AIgjwLm5oHZLoxD7WBz4=
Subject key identifier: 6E:BC:F0:86:52:27:81:03:DE:39:63:80:1A:A1:A7:87:47:56:56:83
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 01A0D60C2152C66B1F52E693B1C3E1635B58
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/brzwhlIngQPeOWOAGqGnh0dWVoM.roa
Signing time: Fri 25 Sep 2026 00:51:54 +0000
ROA not before: Fri 25 Sep 2026 00:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.187.13.0/24 maxlen: 24
89.187.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 12:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:0c:21:52:c6:6b:1f:52:e6:93:b1:c3:e1:63:5b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Sep 25 00:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ebcf08652278103de3963801aa1a78747565683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:d9:14:89:c1:92:55:bd:48:0a:0c:e4:67:
1b:6e:61:44:fe:e4:f1:a0:5a:a8:77:b6:ec:7b:dd:
ce:7d:d1:32:d0:72:0e:9f:bd:71:7c:60:f8:84:0c:
9b:06:17:48:29:18:f7:c7:55:78:9b:e6:fd:84:2f:
c0:a7:f6:e4:db:19:22:fb:35:6b:a5:ca:2c:a0:f4:
90:f8:39:e8:dc:57:07:c5:aa:3b:1d:32:9e:32:2f:
e4:2e:1e:48:42:a3:1c:f8:10:8d:c8:3b:3c:27:16:
e9:7b:46:1d:34:97:9f:26:71:3a:03:cd:64:9c:95:
46:2c:14:c5:7e:4c:4e:3c:9f:56:3a:da:fb:57:83:
39:f7:54:37:40:fa:0d:33:1d:bb:b3:ac:27:91:be:
7c:53:e1:1f:58:80:c9:bf:7a:b6:3b:b5:fb:e3:e5:
e1:e6:e7:40:72:09:b5:a9:9d:c9:77:34:db:70:8b:
26:95:35:a7:e7:50:60:14:12:5b:93:1c:5e:8a:b1:
fb:f1:29:c8:52:91:94:c6:48:95:a7:04:93:ad:f8:
db:a5:ca:7a:e7:f1:c4:9d:92:76:e5:ae:68:91:a0:
96:9b:3e:36:d7:13:8f:b9:d2:37:6c:89:ee:0c:cc:
86:94:4b:bb:59:bf:f1:7b:76:d4:a4:94:bc:aa:9a:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BC:F0:86:52:27:81:03:DE:39:63:80:1A:A1:A7:87:47:56:56:83
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/brzwhlIngQPeOWOAGqGnh0dWVoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.13.0/24
89.187.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:8b:ac:85:4c:52:57:92:ad:fc:23:ce:72:73:44:77:d9:3f:
11:8f:07:67:32:5a:a5:81:3c:6a:dd:91:46:bf:fd:19:b8:8d:
13:50:d3:87:84:57:29:8a:81:55:ae:eb:0e:ca:f4:f9:de:56:
ef:ae:c6:ee:c5:18:60:df:72:ec:47:3d:95:7b:6b:26:cd:bc:
7f:ab:ec:3e:f1:4a:69:bf:40:ed:77:3d:bf:38:b0:53:15:10:
af:72:21:3d:be:36:ab:c8:92:16:59:3f:03:29:4f:57:a0:b3:
fe:c3:1f:0d:1a:d5:1c:9e:7c:61:c4:86:04:d8:7e:69:65:8b:
13:01:eb:e2:d5:c7:20:35:43:f8:22:da:0c:c1:63:b6:9f:d1:
cd:df:3f:67:9d:39:64:68:08:03:1c:a3:14:08:56:a1:57:36:
84:83:1e:82:5b:d3:29:dc:8a:83:15:a7:69:26:c4:40:4f:25:
e3:74:ed:d8:a0:54:4e:f4:d0:e5:31:e5:82:92:50:69:11:85:
c6:34:9f:1e:ba:ec:ea:c4:c5:3c:3c:a3:9d:12:ab:49:0e:f3:
f4:71:04:86:ae:a0:54:cc:ad:bb:2e:30:84:4a:98:5d:76:39:
43:2b:f5:0c:19:93:65:6e:68:08:83:48:2f:2e:d1:d1:59:14:
ea:d2:b6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:55:27 2026 by rpki-client