Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/d0R51BvZANPH1rhe_vQQ_W0jUfQ.roa
File: d0R51BvZANPH1rhe_vQQ_W0jUfQ.roa (raw, json)
Hash identifier: OQKWC9BSlS5WQikr1WgOpOIuhbshTElzX6M/nHbLp6g=
Subject key identifier: 77:44:79:D4:1B:D9:00:D3:C7:D6:B8:5E:FE:F4:10:FD:6D:23:51:F4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019B8EC9EC4552C233BD84EB0B5EF8CDF4E4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/d0R51BvZANPH1rhe_vQQ_W0jUfQ.roa
Signing time: Mon 05 Jan 2026 15:32:36 +0000
ROA not before: Mon 05 Jan 2026 15:32:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202794
IP address blocks: 2a0f:df44::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 16 Jan 2026 20:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:8e:c9:ec:45:52:c2:33:bd:84:eb:0b:5e:f8:cd:f4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 5 15:32:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=774479d41bd900d3c7d6b85efef410fd6d2351f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:d1:64:6d:81:dd:52:ee:ef:2f:e1:a9:76:
c6:a5:4b:5f:56:c5:dc:58:b2:aa:f4:b9:ad:88:1d:
64:93:cc:32:25:d2:39:12:ca:fa:2e:4f:65:fd:4f:
c1:db:1a:15:3a:9c:31:b1:22:30:f9:1a:f4:f6:a1:
f5:07:d4:91:bf:96:0c:6a:c8:21:73:8a:47:80:44:
a6:0d:09:ef:a5:b7:94:04:8a:88:aa:a5:4b:5a:36:
4f:db:c8:8a:4d:72:35:e0:95:8c:9c:3a:ce:73:77:
06:f5:1b:7a:c1:3d:3d:96:7e:2f:8a:8f:ac:6f:de:
ea:38:ed:6c:a7:26:73:e7:11:6b:59:f0:ba:46:8f:
6c:de:d8:e4:75:ea:ec:a1:5e:42:9d:ef:e6:76:fa:
ca:da:b4:59:8f:1e:65:39:97:74:00:53:8f:21:a3:
7a:a1:34:29:fa:8f:7d:c0:0b:43:8d:0a:68:bc:a3:
69:a6:76:db:81:ab:b0:95:8d:4e:79:16:51:d4:8d:
ec:69:fa:68:f3:2c:e8:4b:0e:53:8c:d9:44:3b:75:
8e:b2:78:fa:6c:4e:01:17:5c:65:c3:b0:1e:20:f9:
bc:a3:a0:37:6e:cd:5b:04:4e:1c:61:20:99:81:c4:
31:1a:e4:b0:6d:60:cb:04:d9:c3:1d:67:ed:67:75:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:44:79:D4:1B:D9:00:D3:C7:D6:B8:5E:FE:F4:10:FD:6D:23:51:F4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/d0R51BvZANPH1rhe_vQQ_W0jUfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:df44::/32
Signature Algorithm: sha256WithRSAEncryption
5c:5b:4a:6f:c4:9f:66:be:22:19:3d:75:9e:b7:fe:93:5b:40:
92:44:70:93:2a:94:77:f2:06:6f:2a:06:41:97:bc:a8:0f:e2:
a0:f7:e5:2b:ba:54:1e:4c:23:da:b5:1a:80:4c:fb:14:ad:e5:
2d:11:e3:1c:0e:81:16:4c:2c:5f:d9:76:b6:ad:98:fc:cb:10:
c7:bc:ff:21:23:30:f1:79:7b:5f:74:6a:37:73:2f:cf:10:87:
7c:ae:6c:a9:d3:2c:6d:54:4e:44:2a:8e:21:84:72:86:a1:3f:
d5:f9:8b:3d:fd:62:62:ac:eb:c4:42:bc:9a:d9:e9:5b:65:4c:
18:70:c3:60:f5:02:1a:d2:93:72:15:01:d9:bd:0e:96:3c:6a:
1f:07:08:89:03:a8:06:7b:9e:2e:63:1e:a3:83:8b:63:44:a8:
30:6d:74:6f:60:c8:e2:60:b7:d3:07:59:64:80:17:97:f1:b6:
b5:3a:b2:82:e3:3c:ee:ca:94:0e:d7:e1:aa:65:7b:b1:6b:b2:
02:a2:67:3a:99:e1:0f:95:aa:cb:63:e6:57:8b:82:eb:c6:97:
04:a5:e9:c2:57:3d:31:51:99:0d:66:dc:35:4e:5b:cf:aa:27:
6b:fb:a3:87:31:de:b3:f6:6b:db:5d:6d:fd:44:6d:90:9b:eb:
40:fd:41:2e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZuOyexFUsIzvYTrC174zfTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwMTA1MTUzMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzQ0NzlkNDFiZDkwMGQzYzdkNmI4NWVmZWY0MTBmZDZkMjM1MWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQzRZG2B3VLu7y/hqXbGpUtfVsXc
WLKq9LmtiB1kk8wyJdI5Esr6Lk9l/U/B2xoVOpwxsSIw+Rr09qH1B9SRv5YMasgh
c4pHgESmDQnvpbeUBIqIqqVLWjZP28iKTXI14JWMnDrOc3cG9Rt6wT09ln4vio+s
b97qOO1spyZz5xFrWfC6Ro9s3tjkdersoV5Cne/mdvrK2rRZjx5lOZd0AFOPIaN6
oTQp+o99wAtDjQpovKNppnbbgauwlY1OeRZR1I3safpo8yzoSw5TjNlEO3WOsnj6
bE4BF1xlw7AeIPm8o6A3bs1bBE4cYSCZgcQxGuSwbWDLBNnDHWftZ3UN0QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHdEedQb2QDTx9a4Xv70EP1tI1H0MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvZDBSNTFCdlpBTlBIMXJoZV92UVFfVzBqVWZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg/fRDAN
BgkqhkiG9w0BAQsFAAOCAQEAXFtKb8SfZr4iGT11nrf+k1tAkkRwkyqUd/IGbyoG
QZe8qA/ioPflK7pUHkwj2rUagEz7FK3lLRHjHA6BFkwsX9l2tq2Y/MsQx7z/ISMw
8Xl7X3RqN3MvzxCHfK5sqdMsbVRORCqOIYRyhqE/1fmLPf1iYqzrxEK8mtnpW2VM
GHDDYPUCGtKTchUB2b0OljxqHwcIiQOoBnueLmMeo4OLY0SoMG10b2DI4mC30wdZ
ZIAXl/G2tTqyguM87sqUDtfhqmV7sWuyAqJnOpnhD5Wqy2PmV4uC68aXBKXpwlc9
MVGZDWbcNU5bz6ona/ujhzHes/Zr211t/URtkJvrQP1BLg==
-----END CERTIFICATE-----
Generated at Fri Mar 20 06:03:34 2026 by rpki-client