Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/1GUIqqaXj6bl1U-RdNY73On50CY.roa
File: 1GUIqqaXj6bl1U-RdNY73On50CY.roa (raw, json)
Hash identifier: c9iR7yCTYBOSzlpzmS5P1njMwlJfpEQKjopLxqHK8KE=
Subject key identifier: D4:65:08:AA:A6:97:8F:A6:E5:D5:4F:91:74:D6:3B:DC:E9:F9:D0:26
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A0D502095A9A54509ABF497CE755EFC762
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/1GUIqqaXj6bl1U-RdNY73On50CY.roa
Signing time: Thu 24 Sep 2026 20:01:15 +0000
ROA not before: Thu 24 Sep 2026 20:01:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 192.144.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Sep 2026 17:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:09:5a:9a:54:50:9a:bf:49:7c:e7:55:ef:c7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Sep 24 20:01:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d46508aaa6978fa6e5d54f9174d63bdce9f9d026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:cd:4a:2e:bd:1a:66:6e:76:d6:16:59:79:
9d:41:5d:81:11:14:90:56:d1:9d:39:9a:55:93:a7:
f0:68:8a:67:96:e7:a3:dd:a8:a7:9c:82:86:5e:be:
cb:70:f6:43:0c:4d:f0:3f:14:3b:d1:b1:a0:37:36:
ff:87:25:5e:e5:40:ad:71:60:1b:18:e5:45:91:9c:
8a:af:a7:2e:c4:da:38:16:02:2c:ea:0e:93:3c:79:
a1:7a:42:d9:55:d2:0e:3a:71:f1:d8:4d:2a:51:35:
ae:0a:f0:c8:cf:de:cf:19:ad:a9:13:3e:04:cb:dc:
e1:8f:1f:83:56:f7:aa:7f:41:85:dd:bc:f1:0f:40:
e1:5b:26:72:66:6d:dd:5b:a8:f7:57:b7:6c:f7:c1:
d2:16:5a:a2:a4:b5:be:bf:16:ea:b3:63:fe:87:67:
76:dc:23:e4:62:15:47:4f:e0:f6:ad:be:78:c8:3b:
a9:8e:ee:39:df:86:5a:0d:3f:a0:7e:80:9d:d2:ac:
d6:65:86:88:62:63:75:9f:ed:81:46:32:bc:23:c1:
73:1f:58:47:7c:4e:67:c9:5c:7a:44:94:47:86:c3:
ec:58:08:1d:03:94:28:fa:1c:df:ea:f8:f3:2e:24:
7d:f6:0d:8d:c5:01:b2:cf:d4:4d:e0:ca:1a:2c:f2:
0f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:65:08:AA:A6:97:8F:A6:E5:D5:4F:91:74:D6:3B:DC:E9:F9:D0:26
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/1GUIqqaXj6bl1U-RdNY73On50CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.78.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c5:cc:eb:42:27:40:d4:dd:9a:47:f0:b4:4b:10:2a:69:cd:
4f:7b:c5:3a:f5:19:2d:d7:ba:d1:df:2e:16:1f:8a:c4:15:58:
fb:91:97:63:ad:80:b5:d0:04:e3:fe:23:1d:d8:e0:2d:42:30:
11:e4:4f:d3:8f:32:44:b2:60:d6:90:ec:c6:f7:35:ba:f7:7b:
09:d2:61:12:ea:37:d2:3d:cd:1e:ef:5a:92:7e:dd:83:81:ee:
bd:3f:12:19:37:1c:74:cf:a2:14:ff:ad:0d:72:cb:15:96:88:
25:d7:8c:b4:4c:9e:0b:1f:7b:39:72:f5:3e:e8:90:b7:8c:f5:
8e:d9:cc:a2:90:4c:83:a8:cd:4d:6b:0d:64:9c:33:20:39:69:
2d:b1:7c:a3:c4:f2:78:e3:c7:b8:7c:28:70:ba:b6:c3:f9:c0:
58:e0:89:dc:87:ba:d0:bd:3a:b1:a8:8c:6b:5f:fc:76:47:e6:
f8:20:3d:a6:79:19:85:72:62:36:a2:17:73:0c:6e:e6:f7:f5:
7b:ee:e3:85:34:d8:7f:fa:f4:62:5c:04:14:ed:92:f0:24:90:
8d:6d:41:18:34:68:b3:49:a9:ee:31:be:b8:ef:12:87:c9:f4:
89:d2:02:cc:99:b3:a6:24:62:96:43:d0:c7:5a:d5:14:61:12:
fd:4f:e5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:54:58 2026 by rpki-client