Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/1-_IIW3dzCrf7wJP6IjGa1wEbsN4.roa
File: 1-_IIW3dzCrf7wJP6IjGa1wEbsN4.roa (raw, json)
Hash identifier: I4AacLsD6TSQcxbrAhGwnw+fXVkMpiz6VlZtxYutQvc=
Subject key identifier: FB:F2:08:5B:77:73:0A:B7:FB:C0:93:FA:22:31:9A:D7:01:1B:B0:DE
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0D28E4E2BB0900E4FC7309420F1D81B50
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/1-_IIW3dzCrf7wJP6IjGa1wEbsN4.roa
Signing time: Thu 24 Sep 2026 08:35:36 +0000
ROA not before: Thu 24 Sep 2026 08:35:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 191.44.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Sep 2026 13:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:8e:4e:2b:b0:90:0e:4f:c7:30:94:20:f1:d8:1b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 24 08:35:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbf2085b77730ab7fbc093fa22319ad7011bb0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2e:2f:f1:02:ee:f3:0e:78:60:b0:ff:8c:fb:
d1:01:85:11:b8:3d:19:3a:2c:c6:ed:d0:e2:38:04:
07:54:0f:c2:33:54:b0:04:17:48:c7:3a:80:ad:e7:
b1:02:c6:1d:25:95:bf:41:f6:18:d9:dd:0a:e2:71:
ca:5b:5e:3e:6e:34:b5:c0:b8:ce:21:e6:3f:de:0a:
d3:0e:cf:9e:02:63:7f:b3:e2:34:8a:72:e2:c4:55:
b7:a8:f2:41:92:d4:df:a9:e6:d1:c1:75:da:f3:fc:
b1:44:c4:72:05:a3:bb:7d:ae:e2:bf:d8:a9:36:f8:
70:cd:54:ac:96:46:1b:b4:cf:c6:07:28:be:8c:8f:
f0:d2:23:e4:aa:c4:70:43:38:39:cf:43:ac:cc:a4:
62:63:a5:cb:30:82:9f:c8:5c:48:7d:ea:2a:fa:ab:
57:c6:0e:a2:ed:1a:e3:62:98:ad:a3:04:9f:3e:28:
7b:64:c2:89:05:f8:5f:1e:24:13:88:13:3d:1b:03:
d0:62:a1:a3:d5:19:31:fd:19:68:7d:5d:48:4d:6e:
3d:1c:75:29:24:43:0a:7f:ea:3b:0c:8a:ba:46:21:
03:e4:c3:6c:9b:23:1f:eb:37:7e:76:05:c3:6e:01:
39:7b:64:dd:79:57:b8:d2:1c:51:0a:c9:56:70:42:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F2:08:5B:77:73:0A:B7:FB:C0:93:FA:22:31:9A:D7:01:1B:B0:DE
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/1-_IIW3dzCrf7wJP6IjGa1wEbsN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.82.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:27:1e:85:0b:3c:ed:15:1d:33:f9:e8:43:5e:05:db:6e:9a:
38:e7:89:2f:86:0d:6a:06:6b:5d:66:78:46:18:af:f2:34:50:
81:cb:b2:da:0c:b5:2b:cf:77:51:bd:9a:84:85:2d:14:89:04:
6e:7e:c1:f8:84:8f:a4:08:7b:fd:41:b1:98:2b:b3:9e:09:51:
10:21:98:cf:77:8f:f5:fa:0e:86:e7:bf:32:3f:ef:99:b2:3e:
c4:ec:78:d6:1e:31:34:95:0a:4a:85:15:bf:7c:af:96:b4:8f:
b3:8e:57:f9:c6:be:be:4a:57:f4:76:6a:bf:d3:f6:04:49:7e:
30:9a:21:0e:27:06:fd:67:ae:80:d9:93:b8:88:5e:52:f1:1e:
9a:3e:73:7c:e1:cc:c3:60:61:11:6e:e6:a4:f6:6a:7a:00:c9:
59:68:f5:13:eb:3c:55:a8:ad:72:df:0c:5d:10:d6:19:e8:eb:
ae:ae:2c:1b:9b:fa:70:d3:c4:37:39:dd:71:7d:d9:05:84:12:
14:a1:06:f9:56:d7:88:64:ac:d1:09:fd:89:b8:7c:ea:a2:af:
51:dd:b8:18:b7:62:20:ce:08:f5:2f:33:67:41:92:09:1b:b4:
a9:90:8f:d7:b3:66:1e:83:b4:50:b4:a5:83:d6:ed:7f:64:10:
d5:14:eb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:32:31 2026 by rpki-client