Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/s2pk0OznvcYKVujbfMaxCBPZpSE.roa
File: s2pk0OznvcYKVujbfMaxCBPZpSE.roa (raw, json)
Hash identifier: RjB9UOrGpEOuAnA8pCNR0+2QKyWn79X85g9V7iO8p10=
Subject key identifier: B3:6A:64:D0:EC:E7:BD:C6:0A:56:E8:DB:7C:C6:B1:08:13:D9:A5:21
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A16F5C5A957D8359EF208CE7C9AC49ED2D
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/s2pk0OznvcYKVujbfMaxCBPZpSE.roa
Signing time: Sat 24 Oct 2026 19:21:25 +0000
ROA not before: Sat 24 Oct 2026 19:21:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 191.44.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Oct 2026 21:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:5c:5a:95:7d:83:59:ef:20:8c:e7:c9:ac:49:ed:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 24 19:21:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b36a64d0ece7bdc60a56e8db7cc6b10813d9a521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:93:44:54:41:ae:dc:21:38:87:57:68:9a:aa:
7a:a0:7d:3b:c7:dd:19:15:0d:23:a5:95:a4:8a:45:
e3:b9:a7:93:0f:f4:69:04:e6:1f:95:10:1c:cd:fa:
ed:4a:6e:63:b6:64:9e:d8:f4:85:10:e5:0c:94:f2:
16:48:a9:73:2c:e9:49:24:bf:f9:39:0a:89:54:cb:
ef:da:03:16:95:ed:52:fa:30:cd:bd:0a:aa:32:3c:
47:b1:e7:7a:72:72:8d:04:7f:17:10:fe:ec:08:ce:
e2:44:78:5f:05:51:32:90:da:ab:c4:30:82:18:b1:
54:3b:e2:d6:b8:b5:20:47:9a:91:dc:1d:71:3f:47:
ab:ca:1f:89:c9:80:7d:1d:4c:aa:1d:69:05:c7:99:
ed:f2:b0:7a:6a:8b:c5:eb:49:b9:4a:d3:a9:4a:7d:
e9:05:ff:70:26:4d:b4:d5:91:0d:3a:99:8e:33:84:
3c:1a:75:3d:5f:fe:38:17:a5:24:b5:80:81:05:05:
de:e4:2f:92:37:97:f9:42:93:f8:03:26:57:0e:71:
03:1d:3b:82:0f:6b:9a:19:c6:53:03:d1:45:b7:d4:
f3:7f:61:4d:b6:93:46:2a:8e:9a:83:75:89:f7:f7:
7e:50:ce:53:8c:49:a2:86:ca:7f:a2:4f:e6:90:c3:
2b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6A:64:D0:EC:E7:BD:C6:0A:56:E8:DB:7C:C6:B1:08:13:D9:A5:21
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/s2pk0OznvcYKVujbfMaxCBPZpSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:fc:da:1b:10:4b:37:50:6a:af:86:c1:be:cf:ab:d0:05:0e:
22:73:cd:a9:b0:37:3a:7e:a0:53:02:26:90:b7:4d:7e:1f:53:
25:40:2b:c8:98:0b:17:fe:ac:ed:ea:64:1d:58:20:de:53:a6:
9b:a4:f6:bc:ce:0a:ce:2f:a6:78:8a:12:c6:76:41:f1:88:72:
32:b2:d0:81:fd:f3:32:a2:46:66:f6:cd:8d:ca:dc:9d:24:59:
0b:d5:21:64:b4:a9:14:a6:a7:0f:f3:64:d8:79:d0:2e:48:8c:
cc:26:61:a4:43:ee:65:96:ec:69:55:d1:b4:08:6c:81:65:6a:
c4:34:62:f0:fb:9f:7f:f5:5d:3a:0e:9e:05:de:2f:fd:c7:be:
68:13:86:37:74:b8:06:42:5f:21:4c:13:f0:68:f7:42:e4:5c:
35:b4:a1:86:61:8f:14:99:eb:4d:7f:7c:d8:9a:eb:94:9b:36:
43:13:35:54:9a:9c:a0:3d:25:d9:41:03:2f:ae:c1:7e:72:d2:
47:28:f9:1c:1e:f1:af:7e:3b:df:3d:42:30:03:6a:ec:77:da:
05:cb:ba:64:f9:04:bd:f3:cf:19:3e:a0:d1:b8:e1:c1:6f:6c:
b0:42:26:a6:87:43:4c:1d:49:15:04:dc:bb:de:bb:64:47:5b:
3d:6d:c6:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFvXFqVfYNZ7yCM58msSe0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYxMDI0MTkyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzZhNjRkMGVjZTdiZGM2MGE1NmU4ZGI3Y2M2YjEwODEzZDlhNTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pNEVEGu3CE4h1domqp6oH07x90Z
FQ0jpZWkikXjuaeTD/RpBOYflRAczfrtSm5jtmSe2PSFEOUMlPIWSKlzLOlJJL/5
OQqJVMvv2gMWle1S+jDNvQqqMjxHsed6cnKNBH8XEP7sCM7iRHhfBVEykNqrxDCC
GLFUO+LWuLUgR5qR3B1xP0eryh+JyYB9HUyqHWkFx5nt8rB6aovF60m5StOpSn3p
Bf9wJk201ZENOpmOM4Q8GnU9X/44F6UktYCBBQXe5C+SN5f5QpP4AyZXDnEDHTuC
D2uaGcZTA9FFt9Tzf2FNtpNGKo6ag3WJ9/d+UM5TjEmihsp/ok/mkMMr3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLNqZNDs573GClbo23zGsQgT2aUhMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvczJwazBPem52Y1lLVnVqYmZNYXhDQlBacFNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyx5MA0G
CSqGSIb3DQEBCwUAA4IBAQCy/NobEEs3UGqvhsG+z6vQBQ4ic82psDc6fqBTAiaQ
t01+H1MlQCvImAsX/qzt6mQdWCDeU6abpPa8zgrOL6Z4ihLGdkHxiHIystCB/fMy
okZm9s2NytydJFkL1SFktKkUpqcP82TYedAuSIzMJmGkQ+5lluxpVdG0CGyBZWrE
NGLw+59/9V06Dp4F3i/9x75oE4Y3dLgGQl8hTBPwaPdC5Fw1tKGGYY8UmetNf3zY
muuUmzZDEzVUmpygPSXZQQMvrsF+ctJHKPkcHvGvfjvfPUIwA2rsd9oFy7pk+QS9
888ZPqDRuOHBb2ywQiamh0NMHUkVBNy73rtkR1s9bcbK
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:15:31 2026 by rpki-client