Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/1-svAPnmljbbb_Krd7AvudDIqwlw.roa
File: 1-svAPnmljbbb_Krd7AvudDIqwlw.roa (raw, json)
Hash identifier: Wvw833Rko2Z6uuMjUZ7h7KRYQpQ2fAXbZzDODcwqLOY=
Subject key identifier: FA:CB:C0:3E:79:A5:8D:B6:DB:FC:AA:DD:EC:0B:EE:74:32:2A:C2:5C
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0EC86479FA5867A9E2B979FD947748831
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/1-svAPnmljbbb_Krd7AvudDIqwlw.roa
Signing time: Tue 29 Sep 2026 09:36:58 +0000
ROA not before: Tue 29 Sep 2026 09:36:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.44.228.0/22 maxlen: 24
37.44.228.0/24 maxlen: 24
194.15.32.0/24 maxlen: 24
194.15.33.0/24 maxlen: 24
194.15.34.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 02 Oct 2026 13:36:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:86:47:9f:a5:86:7a:9e:2b:97:9f:d9:47:74:88:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 29 09:36:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=facbc03e79a58db6dbfcaaddec0bee74322ac25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:c5:ac:ff:98:69:f2:01:64:44:6c:0e:ea:
69:db:5f:12:c6:bb:fb:3b:3b:75:08:8f:69:d5:17:
f0:0b:ea:e1:20:d1:2d:5a:14:30:45:e6:61:93:9a:
eb:9b:9d:e1:24:42:67:63:6a:56:a3:a0:68:54:82:
57:0e:48:b5:8e:de:42:ba:ba:d5:29:89:aa:38:a9:
e2:a0:98:81:20:0d:92:02:20:93:d3:c7:bc:f7:64:
b9:5f:2e:06:84:15:b8:91:33:8b:e0:77:2d:74:a3:
05:bf:ee:76:9a:89:a2:7b:ec:4e:33:54:1d:60:04:
55:75:60:f4:0f:ae:c2:46:93:44:54:01:38:0b:50:
fd:14:a5:c2:5e:6a:95:67:34:3c:0c:2a:ae:4e:8f:
a8:73:cd:57:ef:da:d0:0c:1a:b5:71:52:9c:d6:fb:
b3:8d:d1:60:07:3a:5a:73:86:c4:d0:a1:0e:71:21:
ef:5f:a1:be:bc:24:c6:9b:86:44:b6:d7:4b:0b:75:
7a:a7:d2:cb:d5:60:df:ed:6c:9b:b7:79:46:3b:dd:
19:38:15:1d:02:60:16:e2:e9:2e:6a:9f:ac:8b:a7:
9d:5a:da:81:ae:62:47:50:e3:81:9d:de:87:38:1f:
e4:c1:42:62:c5:e3:3c:eb:72:54:a8:9a:7e:dc:30:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CB:C0:3E:79:A5:8D:B6:DB:FC:AA:DD:EC:0B:EE:74:32:2A:C2:5C
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/1-svAPnmljbbb_Krd7AvudDIqwlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
194.15.32.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:28:49:dd:49:0f:dc:00:b7:02:7f:98:14:0c:8f:92:cd:d4:
2a:03:c7:e5:70:8a:70:77:2d:0b:c4:f6:f0:52:86:97:87:92:
99:84:6e:94:17:33:94:fa:50:b6:e7:00:5c:cb:2a:6f:b5:5d:
9d:c6:a8:9a:fb:a6:83:5d:07:48:e9:78:08:7f:b3:0b:c4:7f:
d5:9c:98:dc:80:fd:56:12:ef:16:d0:27:49:fe:e4:65:75:34:
b3:02:43:99:d5:cc:6f:cc:c2:f3:dd:84:b3:25:4d:f1:cb:16:
83:27:64:39:3e:d2:16:f5:84:1b:98:bc:f4:6f:e7:52:e2:da:
8b:20:d0:dd:fd:25:b5:0b:5f:ed:a1:5b:4d:c3:87:fa:4b:1f:
40:e7:63:3a:8e:4e:14:56:26:c1:bd:98:c9:a4:a1:be:76:a3:
7b:47:81:1c:75:5a:da:10:dd:2a:95:d4:3f:81:89:dc:82:da:
0c:98:80:4f:14:6f:cd:42:d7:4a:30:b5:a3:7e:7c:fe:3c:7d:
c8:49:29:97:db:40:70:81:65:1e:31:c7:74:40:43:61:45:40:
e4:9d:e8:d5:09:47:e1:e9:62:43:59:53:6e:5e:5f:d5:5c:3c:
0c:a6:c9:08:6d:fe:35:63:b1:87:45:4b:28:65:c5:38:9c:06:
a8:bc:cf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:21:22 2026 by rpki-client