Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/fLFS2TPRfz4KFSehs1mQ3mrXP88.roa
File: fLFS2TPRfz4KFSehs1mQ3mrXP88.roa (raw, json)
Hash identifier: ZCI7BjGDPq4qWf/tIHnH22p3ovNBweDc79FLoLhtDpo=
Subject key identifier: 7C:B1:52:D9:33:D1:7F:3E:0A:15:27:A1:B3:59:90:DE:6A:D7:3F:CF
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A1729454D1423B74B108A2142A0054C091
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/fLFS2TPRfz4KFSehs1mQ3mrXP88.roa
Signing time: Sun 25 Oct 2026 10:21:26 +0000
ROA not before: Sun 25 Oct 2026 10:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 191.44.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Oct 2026 16:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:94:54:d1:42:3b:74:b1:08:a2:14:2a:00:54:c0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 25 10:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cb152d933d17f3e0a1527a1b35990de6ad73fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:59:cc:77:f5:b6:45:2c:9e:6d:c6:94:f2:
a8:59:a6:0c:b5:3a:1a:69:f7:0f:f1:2d:f5:91:44:
83:69:eb:47:f9:fb:a1:d9:db:a8:65:c3:3a:4a:83:
f0:a3:91:c9:79:0b:5d:29:28:f3:aa:02:6f:9c:60:
25:29:ca:4e:3b:94:ae:ad:ab:04:90:84:7f:6d:b2:
9a:6d:01:e6:d1:1f:9f:01:24:2f:87:f7:73:23:23:
ec:5e:36:c6:9f:d4:8a:7f:16:64:fd:5e:40:fb:52:
e4:95:1f:a8:83:b7:81:5d:b5:20:0f:ac:0f:41:4f:
68:94:6e:3c:ce:6a:85:af:23:a4:06:31:19:d7:ae:
b2:4f:00:f2:f6:a5:04:c7:85:1e:35:5c:ca:f2:1e:
49:68:42:d0:db:3a:0b:31:de:b4:1f:74:51:fb:8a:
fd:dd:a1:85:c5:90:c3:40:fc:16:9f:fe:54:36:95:
3b:a1:bc:7a:3a:e3:80:44:7c:fc:e5:82:27:6e:5d:
a2:47:d5:37:b9:27:56:42:20:8f:9f:f8:59:aa:f7:
16:04:89:7d:42:59:9c:ce:a0:9f:4e:ea:79:ab:2e:
ee:70:2c:e4:16:ce:e2:19:61:1f:d7:2a:4b:ca:f1:
ab:2c:5f:8f:9e:29:d5:79:c0:88:ca:34:31:b6:bb:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B1:52:D9:33:D1:7F:3E:0A:15:27:A1:B3:59:90:DE:6A:D7:3F:CF
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/fLFS2TPRfz4KFSehs1mQ3mrXP88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.83.0/24
Signature Algorithm: sha256WithRSAEncryption
16:94:3a:5b:a7:86:ad:34:74:73:c2:f0:74:e9:88:83:2a:7e:
34:c8:e8:cc:ce:e5:55:6c:d4:8b:2d:34:39:80:26:03:0d:9f:
19:61:f2:d1:66:e8:9f:40:e5:7e:a7:fc:0b:49:f0:b0:1a:fc:
23:7f:b3:4e:e4:e9:10:b0:df:16:5b:5e:27:26:78:c1:32:71:
6f:f8:1f:0b:e5:d5:a6:18:63:14:4d:1d:f2:9b:27:e0:b3:d9:
de:ec:ac:02:e1:4b:4e:01:65:06:6c:0b:9a:9c:81:bc:ab:d2:
c7:27:a0:46:a2:26:bd:0a:f3:de:a2:17:d0:dc:e1:ef:74:49:
cf:e0:0a:ee:a5:5d:f1:59:1c:83:15:83:08:45:70:7a:6a:b8:
1b:13:49:3e:37:d2:cb:b3:f8:81:cd:a1:39:b3:33:28:59:af:
63:f6:27:3d:fb:e1:cf:36:21:13:40:df:10:8b:65:d6:4d:6f:
4d:d5:9f:2d:c2:5b:12:7e:7c:35:99:d7:b0:a9:a6:06:7a:f8:
67:ab:31:43:de:b2:d9:4e:1c:52:5a:8c:ab:c9:95:fb:1a:c4:
61:09:74:ab:01:85:6a:79:f4:49:3b:fa:23:23:9b:37:c3:7b:
32:c5:e8:56:25:28:9b:4d:5b:11:03:48:24:7d:3c:8b:fe:a7:
f4:55:e0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:09:23 2026 by rpki-client