Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/XZUSFN0ZQkh0yG6wsRasNCZb2js.roa
File: XZUSFN0ZQkh0yG6wsRasNCZb2js.roa (raw, json)
Hash identifier: OaqV+U26+yY0PDCrzwfVUjcWYp2r9NJh3b1AqBq7znM=
Subject key identifier: 5D:95:12:14:DD:19:42:48:74:C8:6E:B0:B1:16:AC:34:26:5B:DA:3B
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019D1F3F0DCD8F9EB6BD02C315A03AE1E4D3
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/XZUSFN0ZQkh0yG6wsRasNCZb2js.roa
Signing time: Tue 24 Mar 2026 09:48:39 +0000
ROA not before: Tue 24 Mar 2026 09:48:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19793
IP address blocks: 91.92.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Mar 2026 05:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:3f:0d:cd:8f:9e:b6:bd:02:c3:15:a0:3a:e1:e4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Mar 24 09:48:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d951214dd19424874c86eb0b116ac34265bda3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:68:a3:44:d2:db:18:d4:31:a9:cc:69:c7:
0b:fc:c9:dd:00:6e:91:9c:41:59:d7:72:03:5b:f7:
08:a2:dd:17:b0:78:42:3f:dd:76:eb:b4:ed:59:2d:
45:17:10:d7:57:42:d9:d2:0c:04:41:f4:e0:41:1c:
e0:e8:66:dc:72:82:dc:d8:82:4a:72:38:f4:c3:32:
72:4e:e3:bb:09:71:a3:77:85:0c:f5:20:54:0c:3e:
dc:5a:1e:0f:7c:e2:83:d3:bf:b5:d8:f1:2a:90:f5:
6a:0e:b7:a4:67:2c:3b:9c:52:ae:d0:1e:02:e2:d1:
b0:46:9c:e1:e0:b3:87:59:37:2f:55:59:80:37:09:
69:df:91:78:a8:d8:74:0b:3f:8a:a4:cc:ec:c0:69:
12:85:92:0d:be:a0:5a:d0:d2:f0:7b:a6:99:dc:d9:
89:7d:92:ec:0e:cf:ed:46:61:83:b7:53:12:54:38:
01:60:8e:3d:01:7e:c6:11:2c:3c:81:f2:d4:5b:9b:
d5:23:89:d3:bb:9b:ba:f6:0f:76:78:57:08:b0:e9:
57:b1:3c:c5:ee:16:28:4e:c0:39:b5:45:64:a3:fe:
cd:a1:c3:92:83:60:8d:32:f2:cc:33:45:88:c0:4c:
b1:6b:d8:8d:35:01:78:c4:58:14:16:81:6b:28:d8:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:95:12:14:DD:19:42:48:74:C8:6E:B0:B1:16:AC:34:26:5B:DA:3B
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/XZUSFN0ZQkh0yG6wsRasNCZb2js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.35.0/24
Signature Algorithm: sha256WithRSAEncryption
52:3d:1c:9c:c7:65:7b:74:e7:b2:13:4d:d1:79:38:b1:56:65:
3e:c9:4b:b4:0e:1e:53:94:c8:f2:ff:73:29:34:8e:65:2c:1c:
76:9c:1f:97:82:26:0a:74:8d:c7:5b:ef:13:ae:ff:c4:17:ba:
36:ae:11:6a:eb:01:d2:83:77:e5:ce:1e:10:73:31:42:7f:98:
b3:5d:d9:8a:6e:19:e5:c3:7b:51:3e:ae:b7:14:8b:84:4a:08:
c8:a7:19:f0:95:14:9c:70:7c:47:20:80:6c:9c:f2:ec:b5:35:
a5:c1:f8:77:b3:54:cb:08:42:0b:9d:8c:26:8e:8c:41:a3:a8:
c5:4c:55:96:cb:34:25:d1:fb:8c:85:58:42:b5:91:fb:0d:02:
23:86:8d:bf:d0:fc:23:0d:4f:dd:d7:3e:92:51:bd:2d:40:f2:
72:4a:0d:68:f9:4f:77:b0:6b:43:6b:0f:d7:ef:f9:1f:af:6f:
47:d8:73:b2:62:fe:13:2d:94:3b:9d:e0:b3:28:26:f5:83:18:
c3:ee:ee:04:fb:22:9f:94:10:6a:ee:df:46:71:c1:fa:ad:d2:
60:32:b7:13:16:8b:6b:bb:05:5d:a8:ae:02:33:2d:0c:39:7c:
7e:14:c9:c1:2c:8d:a2:70:b1:05:49:e7:cc:f4:ef:fe:aa:2f:
07:44:25:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:28 2026 by rpki-client