Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/C9K1zDOrWivu0i4RJNU_JzXkJ4c.roa
File: C9K1zDOrWivu0i4RJNU_JzXkJ4c.roa (raw, json)
Hash identifier: bu28QNRasHCLUh3QPNYSsubXRbLfQuCNJVxwI8RV21A=
Subject key identifier: 0B:D2:B5:CC:33:AB:5A:2B:EE:D2:2E:11:24:D5:3F:27:35:E4:27:87
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0CD8EDD7253C01647F907EDAD332CE32B
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/C9K1zDOrWivu0i4RJNU_JzXkJ4c.roa
Signing time: Wed 23 Sep 2026 09:18:07 +0000
ROA not before: Wed 23 Sep 2026 09:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219284
IP address blocks: 153.52.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 09:04:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:8e:dd:72:53:c0:16:47:f9:07:ed:ad:33:2c:e3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 23 09:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bd2b5cc33ab5a2beed22e1124d53f2735e42787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:e2:bf:f3:78:9d:b6:89:5f:f4:5c:a7:0c:
34:ab:b3:83:92:73:96:96:69:2a:75:e2:ce:ef:64:
7d:17:98:b3:82:42:78:22:73:43:58:5d:a7:c8:d8:
6c:24:bc:69:13:a1:e9:0e:da:47:6d:48:78:ed:4e:
f0:d6:e3:2c:c6:85:7d:6d:bd:1e:ed:70:a6:04:a1:
d3:47:e8:7f:c5:a5:5b:97:07:21:71:81:5b:c1:52:
89:91:8d:83:b5:1b:d4:01:5f:4b:68:51:48:36:bc:
bb:26:0b:b2:7e:51:d2:e0:3c:a0:92:64:a3:45:42:
ad:f7:97:82:66:24:a3:37:31:98:f7:5a:cd:d7:34:
35:4d:57:db:d8:2e:62:3b:c6:1d:1f:a9:7c:1b:1f:
d5:31:92:78:2a:28:30:de:7a:8e:8d:dc:cf:a5:a3:
5b:10:9e:a5:ce:7a:b5:6a:50:a1:59:41:45:85:4d:
a0:30:e8:d3:10:e6:0f:93:fa:2b:62:cb:da:1e:2b:
64:53:83:f8:58:39:a7:a1:1b:b7:9a:57:67:63:7d:
5f:15:a0:ba:86:a3:70:d9:af:83:4b:a3:5b:5a:3b:
a9:55:34:fd:9c:be:a3:3d:ad:94:90:7d:af:1d:df:
a3:46:cb:ab:94:ce:2d:52:5b:6f:ca:5b:0c:11:53:
23:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D2:B5:CC:33:AB:5A:2B:EE:D2:2E:11:24:D5:3F:27:35:E4:27:87
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/C9K1zDOrWivu0i4RJNU_JzXkJ4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.68.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f8:62:82:5f:25:64:d1:90:5d:54:31:ef:e9:83:57:32:56:
7a:58:b0:9f:4c:73:70:7f:80:22:07:c9:49:3b:ba:1e:40:85:
02:78:6a:60:ba:cb:93:d0:4a:6a:fe:53:e7:d2:3a:b2:03:20:
1d:61:2c:54:d0:7d:75:76:10:df:80:b3:89:b4:06:64:30:cd:
8b:0b:10:e3:ad:89:a5:d1:e5:86:bb:ed:48:ed:f9:42:cd:13:
8e:d7:9e:e4:fc:56:3f:73:3c:33:9b:1c:74:90:33:ab:3b:bb:
ec:e9:30:64:2b:c8:70:8b:a7:dd:c7:c7:10:05:0a:69:5b:a3:
a1:8a:cb:29:07:5d:1f:15:69:85:b1:d7:de:69:8d:e2:65:16:
73:22:df:4c:7a:93:b4:28:c1:0c:6b:fe:cc:35:05:b8:b2:18:
c1:19:db:5d:e3:55:b9:01:bb:f4:10:4d:e8:c1:69:d8:2b:2d:
a3:57:ec:21:bb:d9:07:f6:0c:a9:9e:9f:c1:25:34:89:34:c0:
aa:5c:58:aa:b9:9d:10:06:d3:53:ad:03:73:b9:c7:ab:55:d7:
36:23:87:43:b9:61:c8:01:56:a7:b4:9c:f6:f9:a1:c3:4d:54:
d3:e0:a9:97:41:16:21:86:f3:2c:21:1b:83:7b:b4:29:e2:89:
0d:52:7b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:25:02 2026 by rpki-client