Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/5s_4QV2UM9ZBjAmRTt3Nx6n1IEU.roa
File: 5s_4QV2UM9ZBjAmRTt3Nx6n1IEU.roa (raw, json)
Hash identifier: VfElkgjQLkuNvnQBLC7GXAAuKi8V0yRaGHfr79WRgkA=
Subject key identifier: E6:CF:F8:41:5D:94:33:D6:41:8C:09:91:4E:DD:CD:C7:A9:F5:20:45
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0CD4B1DF6560009C0BF738CA99502C2B0
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/5s_4QV2UM9ZBjAmRTt3Nx6n1IEU.roa
Signing time: Wed 23 Sep 2026 08:04:07 +0000
ROA not before: Wed 23 Sep 2026 08:04:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 83.245.40.0/24 maxlen: 24
83.245.41.0/24 maxlen: 24
83.245.43.0/24 maxlen: 24
83.245.46.0/24 maxlen: 24
83.245.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Sep 2026 08:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:4b:1d:f6:56:00:09:c0:bf:73:8c:a9:95:02:c2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 23 08:04:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6cff8415d9433d6418c09914eddcdc7a9f52045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f3:1b:b9:7c:67:7b:09:fa:74:30:cd:4a:6e:
34:e2:32:d0:d0:29:64:cd:a9:be:c3:db:f2:15:f7:
7e:e1:fe:b9:de:f1:d0:88:92:d0:a8:81:b3:cc:38:
6e:ad:5c:fd:d2:99:b5:1c:6e:5b:cf:bd:47:26:0a:
c8:3e:5c:f1:d5:a0:0e:90:49:f1:f6:c9:d8:9a:c1:
d2:15:2f:62:60:00:f0:42:a9:ff:b1:d5:62:68:ce:
15:9f:d9:ed:b1:99:bc:6e:42:1a:d7:4c:33:9e:18:
88:e8:dd:ce:28:86:1a:ff:71:90:8f:a0:71:fb:52:
d2:39:ab:5c:a0:09:de:ee:2d:0d:a2:76:c0:c4:d8:
86:a1:7b:eb:1a:3e:66:b8:40:a5:2f:d1:3d:95:4e:
7f:9c:81:93:da:fa:eb:50:d6:d3:1f:d2:85:68:eb:
71:fb:3e:30:d8:93:e7:9e:b0:1c:f0:6f:65:6c:7b:
10:47:aa:e7:97:0b:16:07:e9:07:b6:57:b8:b4:8b:
b2:c7:18:8f:9c:85:b7:8b:b0:5e:00:f0:d8:1a:68:
c4:49:77:dd:0b:a6:8d:96:84:1b:ab:cc:0e:8a:ef:
b0:b8:c1:0e:f7:69:55:ce:f3:7c:67:73:e5:a4:90:
a7:b8:3d:20:5b:b1:f0:02:44:a2:29:e0:67:81:69:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CF:F8:41:5D:94:33:D6:41:8C:09:91:4E:DD:CD:C7:A9:F5:20:45
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/5s_4QV2UM9ZBjAmRTt3Nx6n1IEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.40.0/23
83.245.43.0/24
83.245.46.0/24
83.245.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:bd:bb:40:a5:5e:4f:33:12:a6:dc:73:a2:03:b6:67:7e:84:
dc:37:85:58:f7:30:6b:27:fa:d2:6a:c3:ec:3f:b4:fc:2a:a2:
ed:b0:21:78:b8:b6:e3:d7:04:b8:af:92:65:38:e1:41:a1:07:
a3:c2:e8:e8:e1:24:17:c8:36:6e:68:b3:b1:b7:6a:48:82:70:
34:24:27:f2:df:e2:0c:a0:d1:93:18:3c:6f:89:12:6b:fa:67:
1e:c8:ee:5f:45:6e:6a:00:7c:37:dd:f9:b9:73:b9:28:e7:b7:
e1:42:cc:d2:7b:5e:83:7a:20:37:82:b2:34:61:f0:70:36:e1:
b3:db:7e:fe:b3:43:da:82:4f:83:81:71:7e:9d:3d:27:4e:ee:
ea:72:31:17:81:30:9d:5e:14:06:92:51:df:85:96:c8:ad:8e:
de:79:44:6b:91:19:27:79:7e:fc:05:6e:d6:52:8e:d3:78:3e:
3e:05:6b:ba:13:20:f3:66:81:44:b4:4e:3b:42:a5:bb:a7:08:
7d:e4:a0:19:42:e2:16:16:66:93:93:7a:3f:32:8e:f3:2c:bb:
eb:86:40:51:60:96:d5:50:c3:cf:68:36:92:d0:58:2a:58:79:
cd:dd:86:96:4c:61:1d:98:41:ec:12:7d:87:c6:73:1b:7a:5c:
ee:0c:f9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:17:55 2026 by rpki-client