Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/5bY_5J6PydADAJTJCRVj-GN3XTk.roa
File: 5bY_5J6PydADAJTJCRVj-GN3XTk.roa (raw, json)
Hash identifier: z1DLMSvjEZIQuwjKZnUtZbBB+Q+Hv4L4y3A20iO4uZU=
Subject key identifier: E5:B6:3F:E4:9E:8F:C9:D0:03:00:94:C9:09:15:63:F8:63:77:5D:39
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0CD2FA6F8ECE3B9E9197DC5FDA6D33E0C
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/5bY_5J6PydADAJTJCRVj-GN3XTk.roa
Signing time: Wed 23 Sep 2026 07:34:07 +0000
ROA not before: Wed 23 Sep 2026 07:34:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 83.245.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 08:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:2f:a6:f8:ec:e3:b9:e9:19:7d:c5:fd:a6:d3:3e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 23 07:34:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5b63fe49e8fc9d0030094c9091563f863775d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d9:88:24:9b:f0:ae:d9:8a:55:6d:2b:44:e0:
10:50:2e:9d:1c:8e:a7:2a:75:64:19:fb:fb:aa:11:
d2:6d:e2:5e:7e:5b:7a:c6:d8:b5:52:71:b5:33:22:
28:00:f7:81:bf:b8:06:52:a2:d2:f0:b6:71:a8:ea:
f4:c0:6a:f0:44:45:0d:44:70:28:03:f1:5a:aa:18:
83:d0:43:01:c1:2b:68:88:88:93:e1:b4:e2:05:14:
88:78:41:f9:50:d5:26:bf:7f:03:7a:e0:1c:1b:67:
58:23:e6:a8:ab:b3:9b:d7:10:0b:2b:a6:cb:c1:98:
1a:d0:ad:67:08:6c:df:3a:17:93:63:d1:75:69:c9:
f1:46:7d:5b:b8:75:35:42:50:6b:d3:1f:8b:50:e0:
14:7e:10:9b:b2:bb:b3:84:fa:a2:55:ad:75:83:d5:
de:b1:8e:b7:40:27:bc:95:56:59:28:ac:42:50:64:
31:1e:27:3d:a1:85:17:f1:eb:9d:0f:4a:04:ca:ab:
b2:05:da:1d:35:1f:3f:4c:8b:6d:30:cb:93:a4:25:
52:1e:0b:66:3a:62:a1:36:e7:92:8e:00:b6:1c:09:
2f:22:11:d4:a1:98:d0:c7:68:43:e3:92:8c:e8:b5:
d1:cc:34:95:67:77:a9:95:45:f8:93:6e:03:b8:e8:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B6:3F:E4:9E:8F:C9:D0:03:00:94:C9:09:15:63:F8:63:77:5D:39
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/5bY_5J6PydADAJTJCRVj-GN3XTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.42.0/24
Signature Algorithm: sha256WithRSAEncryption
65:32:b6:45:c7:3e:39:98:e8:75:cd:2c:e1:c8:5d:e6:d9:ee:
b9:9e:f5:2d:14:d9:a4:68:d2:7a:b3:96:3a:4d:0d:d1:4c:ae:
a8:e6:6c:9b:65:5c:fe:73:db:40:73:da:33:20:3c:88:98:03:
6c:6d:fc:75:47:16:74:8c:e9:47:b5:b2:39:8c:5f:35:98:39:
25:2c:eb:a6:6a:fc:9c:1f:3c:42:92:0b:cb:f7:80:a6:db:0f:
28:93:21:b6:b4:ea:fd:c9:f7:53:83:8d:00:98:7a:ed:2b:fa:
20:09:e3:4a:03:ea:c5:90:43:65:67:e9:9f:62:99:16:75:85:
1b:45:e1:7a:3e:18:45:31:23:59:42:d9:37:69:ef:b6:97:69:
a6:1b:04:25:d8:12:13:43:b4:eb:42:f0:75:8e:1f:c9:3e:2d:
11:11:12:2e:3b:87:80:62:00:6d:43:ee:5f:42:74:b5:8e:6c:
62:6d:d0:e6:55:0b:f8:22:de:65:b3:28:c9:11:b9:ce:c4:9c:
99:57:90:3a:c8:02:ba:a0:0f:b8:80:93:3b:65:e1:2c:a0:22:
13:1e:52:b2:96:b9:5d:14:26:4f:3d:37:7c:a4:2e:f8:05:26:
82:be:5d:e3:4f:b5:76:c8:3a:bf:c4:71:77:84:8d:22:6c:c9:
7c:90:0b:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDNL6b47OO56Rl9xf2m0z4MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwOTIzMDczNDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWI2M2ZlNDllOGZjOWQwMDMwMDk0YzkwOTE1NjNmODYzNzc1ZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79mIJJvwrtmKVW0rROAQUC6dHI6n
KnVkGfv7qhHSbeJeflt6xti1UnG1MyIoAPeBv7gGUqLS8LZxqOr0wGrwREUNRHAo
A/FaqhiD0EMBwStoiIiT4bTiBRSIeEH5UNUmv38DeuAcG2dYI+aoq7Ob1xALK6bL
wZga0K1nCGzfOheTY9F1acnxRn1buHU1QlBr0x+LUOAUfhCbsruzhPqiVa11g9Xe
sY63QCe8lVZZKKxCUGQxHic9oYUX8eudD0oEyquyBdodNR8/TIttMMuTpCVSHgtm
OmKhNueSjgC2HAkvIhHUoZjQx2hD45KM6LXRzDSVZ3eplUX4k24DuOiMmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOW2P+Sej8nQAwCUyQkVY/hjd105MB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvNWJZXzVKNlB5ZEFEQUpUSkNSVmotR04zWFRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU/UqMA0G
CSqGSIb3DQEBCwUAA4IBAQBlMrZFxz45mOh1zSzhyF3m2e65nvUtFNmkaNJ6s5Y6
TQ3RTK6o5mybZVz+c9tAc9ozIDyImANsbfx1RxZ0jOlHtbI5jF81mDklLOumavyc
HzxCkgvL94Cm2w8okyG2tOr9yfdTg40AmHrtK/ogCeNKA+rFkENlZ+mfYpkWdYUb
ReF6PhhFMSNZQtk3ae+2l2mmGwQl2BITQ7TrQvB1jh/JPi0RERIuO4eAYgBtQ+5f
QnS1jmxibdDmVQv4It5lsyjJEbnOxJyZV5A6yAK6oA+4gJM7ZeEsoCITHlKylrld
FCZPPTd8pC74BSaCvl3jT7V2yDq/xHF3hI0ibMl8kAsm
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:54:55 2026 by rpki-client