Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/68IFHh8ByKT0a9bFEGA0vpdbtGk.roa
File: 68IFHh8ByKT0a9bFEGA0vpdbtGk.roa (raw, json)
Hash identifier: j8EubtH0cCa4ALdAKkHZEzaYm3sDEHYFOjClTQcUZCM=
Subject key identifier: EB:C2:05:1E:1F:01:C8:A4:F4:6B:D6:C5:10:60:34:BE:97:5B:B4:69
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 01A1560E95BC36CFA2D59D20BA16159273AF
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/68IFHh8ByKT0a9bFEGA0vpdbtGk.roa
Signing time: Mon 19 Oct 2026 21:25:58 +0000
ROA not before: Mon 19 Oct 2026 21:25:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.102.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Nov 2026 10:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:0e:95:bc:36:cf:a2:d5:9d:20:ba:16:15:92:73:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Oct 19 21:25:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebc2051e1f01c8a4f46bd6c5106034be975bb469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:0a:05:b3:e6:41:db:f3:4a:ee:42:eb:34:
e0:3f:c0:a6:db:7f:a7:d4:75:4e:79:35:74:48:6e:
5e:11:4f:ab:4d:1a:a9:1b:b3:b9:c1:ec:9a:8f:8f:
04:d9:05:a1:21:dd:11:10:02:aa:fa:97:87:a3:7a:
d6:9a:2e:d6:b4:3d:aa:96:29:30:05:55:67:57:32:
fc:8b:13:a4:aa:6c:4e:dc:95:db:f8:70:97:53:ed:
a6:66:88:bb:33:63:c4:29:dd:14:19:16:94:24:2d:
38:da:5f:41:70:e2:bd:01:d0:cb:c5:d7:68:9b:5e:
a0:d2:cd:ff:45:c1:7f:3c:89:be:e8:8a:b7:cc:d4:
e5:8f:38:8d:ac:7f:83:bf:80:28:f1:17:a7:c0:1d:
59:aa:7c:78:4d:22:fb:68:c1:94:ba:47:b6:c9:53:
ca:ca:e4:a3:de:3c:52:70:de:1e:ba:8d:47:0b:b7:
e3:c6:63:69:48:1a:7b:f5:cf:c0:c4:82:06:17:20:
4e:8c:6b:07:23:08:9a:fc:d1:af:6a:d7:b2:d3:c2:
6a:86:88:31:0e:68:4d:38:a5:4b:4c:9f:a4:61:0c:
3c:43:50:6f:0d:02:09:55:c3:c4:c9:7b:ec:b2:cf:
6b:ae:b4:62:3a:45:bf:fe:a6:03:bb:da:ab:eb:ab:
d5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C2:05:1E:1F:01:C8:A4:F4:6B:D6:C5:10:60:34:BE:97:5B:B4:69
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/68IFHh8ByKT0a9bFEGA0vpdbtGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.36.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e6:7f:d6:1b:23:99:9c:32:58:b2:e9:ca:f2:33:25:96:07:
dd:e1:b5:fc:41:47:1c:9a:89:c2:4c:4c:ab:f9:0a:69:17:3d:
ec:fa:f8:41:b1:6f:10:5d:12:8a:c1:d4:da:44:37:e4:35:5a:
8c:84:f7:f7:e0:81:f7:cd:fe:5c:4b:de:e6:1e:13:3e:d7:a9:
d3:9b:1e:b7:7f:be:bd:26:e3:97:86:4b:8e:49:68:74:98:61:
9a:da:bd:e1:07:c6:ef:e0:9d:6e:6d:16:74:e6:fe:5d:df:b6:
5c:28:07:a7:4a:71:47:df:61:cc:8e:84:c5:b7:1e:da:18:c0:
f1:91:95:ff:bc:7a:8a:c9:b5:52:3f:05:52:da:80:a2:2f:f3:
43:f8:48:f2:80:9f:8e:fc:c9:1a:ed:1d:0a:69:7c:d0:c2:bb:
44:98:81:12:ab:cb:c9:a3:02:f6:09:b9:9a:d2:e4:81:21:61:
67:98:37:76:15:bb:35:2f:c8:e4:a9:19:b0:83:2d:9c:87:70:
c1:f1:a6:e9:6e:17:d8:6e:49:75:c8:df:67:28:03:14:17:ef:
80:bd:ed:27:2b:a1:f2:b2:e4:38:a9:8a:f1:50:e9:f8:47:a2:
90:ad:90:8d:79:59:7f:63:3b:66:48:35:8e:99:8b:46:6f:d1:
ae:b3:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:10:14 2026 by rpki-client