Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dazdTshwRNKn-878VV68YEdx78c.roa
File: dazdTshwRNKn-878VV68YEdx78c.roa (raw, json)
Hash identifier: 4AH7nSc3ZBiCG2zPKbpTfxNaM6LtHTgdXOL97oALeeU=
Subject key identifier: 75:AC:DD:4E:C8:70:44:D2:A7:FB:CE:FC:55:5E:BC:60:47:71:EF:C7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A14A82E493705255D62C9237274F95FDBA
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dazdTshwRNKn-878VV68YEdx78c.roa
Signing time: Sat 17 Oct 2026 15:37:34 +0000
ROA not before: Sat 17 Oct 2026 15:37:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199186
IP address blocks: 200.165.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Oct 2026 21:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:82:e4:93:70:52:55:d6:2c:92:37:27:4f:95:fd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 17 15:37:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75acdd4ec87044d2a7fbcefc555ebc604771efc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:e6:58:c9:e9:1d:02:00:e2:5b:b8:13:ba:
15:43:ab:33:b5:b0:43:22:91:9c:af:ab:4c:27:f9:
8b:fe:2d:a0:60:9d:79:74:76:4f:6f:63:9e:6a:36:
a6:9c:8d:e0:88:06:a1:d2:91:2e:ee:e0:a2:77:06:
08:59:17:25:84:6c:db:06:b0:f4:fb:6b:5e:b7:c5:
72:db:e1:5a:4b:8e:0a:57:e4:6c:16:e4:4f:40:9e:
d2:4a:ef:79:1b:6c:10:09:9a:1c:d7:94:8b:2c:16:
4a:87:d0:43:05:b7:cf:20:39:ab:0e:93:2f:d4:de:
80:01:36:a0:80:b5:49:c0:e4:13:c2:5d:aa:0c:1a:
8b:33:76:a7:a1:0f:7e:3b:1a:10:bc:0f:08:51:55:
29:e9:09:ed:27:b8:03:9e:89:8a:94:1c:7c:88:7a:
ed:11:a7:04:ea:09:e6:0e:38:5d:a9:56:1e:b4:4e:
f7:41:07:4f:fc:ac:50:82:6a:8a:2e:4c:9b:a9:32:
a2:8f:8a:56:e5:e0:86:18:3e:02:71:ce:b4:a7:4e:
f7:b7:8b:4b:54:05:de:65:ce:bd:d9:dd:76:ac:45:
45:ad:be:7d:01:0f:61:db:46:f9:76:34:6f:ac:11:
d4:c7:13:e0:ab:4c:2a:97:00:23:48:2a:0d:8f:83:
a3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AC:DD:4E:C8:70:44:D2:A7:FB:CE:FC:55:5E:BC:60:47:71:EF:C7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dazdTshwRNKn-878VV68YEdx78c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.165.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:7c:fa:0c:01:9f:c5:d8:5f:25:5b:ab:c2:cb:71:1a:c5:ce:
95:8f:46:24:e3:1f:74:ec:5b:a5:9a:91:82:b0:d5:7f:a7:38:
f2:2e:12:d2:9a:91:52:2e:10:4d:7d:16:6c:7f:d3:3f:2a:57:
ab:b0:5d:04:c8:5e:16:e0:d8:cd:d4:8d:33:0a:39:6d:9f:a7:
be:ec:55:5b:48:59:0e:5c:58:f7:62:01:92:62:67:b5:2e:db:
11:53:33:74:b4:cf:7a:02:c4:f6:a7:21:7a:30:9d:28:b1:27:
ef:ba:5c:ed:96:b3:96:a0:4c:50:13:c1:6d:a6:28:a6:24:cc:
37:af:43:e1:0e:ac:c3:45:c6:8d:32:93:5f:d1:76:1a:a2:6c:
29:96:1c:41:fe:0d:12:6e:24:34:e6:86:ff:dc:0f:ba:e8:fe:
8b:bd:c8:85:fe:cb:7d:3d:fe:a7:0f:65:86:7b:a5:f0:e2:5d:
90:1c:53:35:44:0a:35:6f:04:bd:0b:36:f3:ee:aa:2d:b3:5c:
73:31:36:7e:57:ab:22:6f:01:d6:e2:8f:10:20:a1:56:ab:09:
2a:fe:81:e2:26:f7:49:b0:f4:d7:35:cb:8e:a2:f2:d5:46:17:
66:31:7b:03:02:40:c3:54:6c:68:b4:95:ed:3f:3a:c0:28:41:
c8:20:2d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:38:38 2026 by rpki-client