Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/nAu0HqeUT7OZ_dulF1Dmh-WmG1E.roa
File: nAu0HqeUT7OZ_dulF1Dmh-WmG1E.roa (raw, json)
Hash identifier: 2VvOdm4ubZDbDtOMQTzz8WEWdBgd3dq1AqpcBaEJBYM=
Subject key identifier: 9C:0B:B4:1E:A7:94:4F:B3:99:FD:DB:A5:17:50:E6:87:E5:A6:1B:51
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A17A2370D6F054E3003A9313BFFA0CDC6C
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/nAu0HqeUT7OZ_dulF1Dmh-WmG1E.roa
Signing time: Mon 26 Oct 2026 21:35:05 +0000
ROA not before: Mon 26 Oct 2026 21:35:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 191.44.121.0/24 maxlen: 24
201.4.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Oct 2026 07:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:23:70:d6:f0:54:e3:00:3a:93:13:bf:fa:0c:dc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 26 21:35:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c0bb41ea7944fb399fddba51750e687e5a61b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b5:48:4b:dd:85:62:d6:45:26:c4:3a:f8:29:
dc:70:55:35:6f:81:21:50:82:e0:7c:8c:08:c0:39:
58:e1:17:46:02:7a:6e:7b:f2:16:18:f8:88:09:12:
c4:7a:41:0e:43:1e:b8:0d:91:2d:8b:36:4d:75:0c:
45:f5:3b:42:49:00:f4:43:3e:8b:a5:7d:b4:ba:37:
26:78:2f:0d:dc:0b:77:f2:bf:9c:39:ea:57:4a:bb:
0e:2b:ff:94:17:89:03:bf:3e:96:bb:6b:0a:f6:13:
a6:9b:86:cf:dd:85:7f:de:b4:d3:73:c9:00:0f:53:
ff:92:a9:00:a8:03:de:b3:d1:6b:b0:12:a1:ee:11:
c7:49:43:68:b8:54:df:51:a6:b0:81:58:a6:1b:87:
96:dd:ab:d9:55:06:79:fb:3b:be:85:c5:31:c4:3e:
4e:de:7b:ae:72:d6:89:e0:72:73:31:31:f2:f5:7c:
76:ad:af:73:c1:72:23:a2:8b:a6:b1:7a:b4:71:98:
64:71:ed:80:78:59:98:fa:8f:8a:1e:d1:02:62:b6:
82:83:30:0d:ed:3c:eb:7a:a1:9f:dc:4e:fa:91:04:
11:9f:c0:c5:19:ab:b2:38:54:c7:d5:fb:7f:30:6d:
f7:3d:be:7f:e9:80:10:bb:1b:d1:5d:74:b2:8a:cf:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0B:B4:1E:A7:94:4F:B3:99:FD:DB:A5:17:50:E6:87:E5:A6:1B:51
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/nAu0HqeUT7OZ_dulF1Dmh-WmG1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.121.0/24
201.4.67.0/24
Signature Algorithm: sha256WithRSAEncryption
42:9b:cd:8a:03:b6:ce:20:ae:3a:18:14:04:fb:7a:de:69:53:
a8:34:0c:95:b9:3e:3b:a1:12:5c:22:ab:53:9b:15:6c:c8:ee:
e5:63:60:14:42:eb:06:05:29:a0:7b:2c:12:c9:60:fb:5f:b7:
70:54:a4:7f:ef:96:e9:be:9a:18:82:9e:3f:f8:ba:92:0f:7a:
7f:e9:b3:cf:3e:db:30:31:bb:9e:62:b3:98:a7:5c:98:53:2e:
77:c2:43:ef:38:dd:4c:ca:ff:77:16:18:a6:1e:56:fc:3d:e5:
b5:5b:6e:5c:22:d7:4a:3b:fb:11:a6:10:09:ad:d1:f7:c5:5e:
1c:29:9c:03:63:bd:ef:e0:71:d1:46:94:c6:54:0b:aa:b5:be:
95:98:42:a5:6c:ba:52:cb:43:68:ae:34:7e:f6:6f:9d:73:10:
e8:03:c7:4f:e7:65:d7:28:a0:62:d1:df:c4:f1:e9:c1:f0:d2:
eb:29:8e:4b:a3:ac:21:5a:16:94:e4:61:e8:e8:df:9c:96:70:
a8:ad:c2:43:d5:ab:8c:07:de:ea:bb:dd:fc:b5:8f:19:40:12:
31:71:22:93:02:26:47:56:16:31:5f:e0:cd:e8:65:d6:95:cd:
b8:0a:15:3e:8c:e4:7b:b6:c1:ff:c4:cd:27:1c:dc:21:c7:38:
16:0d:8f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:51 2026 by rpki-client