Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Cbud30yzl9qcbTPi1eP57fFwYF4.roa
File: Cbud30yzl9qcbTPi1eP57fFwYF4.roa (raw, json)
Hash identifier: /VUnwe4QvSLmDWZkt5vUHHTvgEW6n7Oh6Qs6787K0QU=
Subject key identifier: 09:BB:9D:DF:4C:B3:97:DA:9C:6D:33:E2:D5:E3:F9:ED:F1:70:60:5E
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A186C608B8684B157DDAEA7A0DDB22337D
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Cbud30yzl9qcbTPi1eP57fFwYF4.roa
Signing time: Thu 29 Oct 2026 08:28:07 +0000
ROA not before: Thu 29 Oct 2026 08:28:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 191.44.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Nov 2026 13:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:c6:08:b8:68:4b:15:7d:da:ea:7a:0d:db:22:33:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 29 08:28:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09bb9ddf4cb397da9c6d33e2d5e3f9edf170605e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:e8:b5:85:1a:dd:48:df:ab:43:31:e5:62:
db:00:f3:8c:ec:dd:f5:f6:08:1f:70:2a:12:a2:ed:
b5:54:91:04:d8:2a:4d:3a:5e:56:a7:3a:04:87:f0:
1d:23:b7:14:b1:90:3c:8a:e6:c3:ab:c3:6f:16:78:
e5:40:86:3f:aa:eb:63:23:72:73:e8:7f:5d:2b:5e:
7d:2f:0c:96:f8:c5:2e:60:d6:4c:6f:6c:6b:fc:b6:
35:79:51:34:51:bd:67:87:38:25:df:31:ae:c6:42:
5d:8d:dd:ee:87:ac:a4:42:8f:60:10:08:f8:a1:b4:
fb:95:f8:99:3a:e1:4c:98:64:4a:ba:d3:f1:ea:38:
74:7e:86:79:f8:3a:1c:c7:20:6f:7b:1d:a4:74:96:
b9:9f:b3:f9:03:a8:60:71:4b:77:2b:e5:36:eb:7b:
6a:87:dd:a1:48:aa:0d:30:b6:4c:43:ba:69:3e:3e:
d5:63:c2:7d:0a:e1:54:e9:78:08:d1:43:41:6d:e7:
4f:7a:95:d8:e0:ca:e8:a7:a0:75:ec:39:af:c1:ce:
93:0c:f2:f0:38:3c:cd:51:f4:a5:81:8e:7b:ad:9a:
77:8f:d0:60:3b:38:98:34:e2:ae:cd:01:69:a2:99:
c4:fa:fb:89:12:d2:97:a4:6d:4e:9e:21:1c:a0:a8:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BB:9D:DF:4C:B3:97:DA:9C:6D:33:E2:D5:E3:F9:ED:F1:70:60:5E
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Cbud30yzl9qcbTPi1eP57fFwYF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.121.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:cf:09:fb:48:f4:52:dd:69:92:43:ad:99:66:7c:cc:8f:05:
40:fb:d2:b3:28:60:4f:eb:43:5f:8a:fe:28:27:c4:2b:d9:95:
6b:c3:1b:2e:ee:d8:7e:21:6d:d7:e8:99:f7:3a:11:95:7e:9b:
ac:7b:dd:80:35:15:66:2f:21:5b:e2:ca:0f:17:41:70:a8:aa:
60:54:07:f1:aa:c6:f0:7a:aa:82:f8:f2:cf:ee:39:e2:ae:8e:
ee:d9:f8:24:6d:15:6a:df:22:c0:af:bc:57:9c:61:86:bb:d1:
86:58:b8:4f:e9:77:3b:06:a5:b2:32:e4:98:d7:f6:5c:9e:a0:
af:fb:04:bf:ae:75:81:79:76:2c:4b:04:0c:88:ea:47:08:7f:
7c:57:9f:d5:e4:56:c5:3a:1b:57:b8:6b:84:59:2b:9e:93:73:
d3:5a:73:23:c2:4c:68:bb:8e:cb:77:48:d1:a6:d5:8b:53:98:
6d:2d:29:72:24:74:b6:fc:6b:53:66:ff:2f:57:d0:17:83:0e:
e5:af:61:e9:c1:2e:a4:8f:a3:23:83:c9:6f:32:37:42:6e:7e:
91:94:3c:ea:99:98:64:a9:4a:e7:c8:bb:5b:a2:e3:0a:22:63:
c4:97:fc:17:ad:a5:2e:c0:cb:7a:77:0d:d6:fe:a3:95:7c:29:
41:5f:ea:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 23:34:10 2026 by rpki-client