Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uiWc6W6B8DAwRJHHGBMmt29jf6w.roa
File: uiWc6W6B8DAwRJHHGBMmt29jf6w.roa (raw, json)
Hash identifier: JRJFcVKyj5HSE/6r5gs1ADUToURZKN7vjBBjQLo8L0w=
Subject key identifier: BA:25:9C:E9:6E:81:F0:30:30:44:91:C7:18:13:26:B7:6F:63:7F:AC
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0E0267FC28AA3855931D480811235088E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uiWc6W6B8DAwRJHHGBMmt29jf6w.roa
Signing time: Sat 26 Sep 2026 23:56:54 +0000
ROA not before: Sat 26 Sep 2026 23:56:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40244
IP address blocks: 200.102.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Oct 2026 21:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:26:7f:c2:8a:a3:85:59:31:d4:80:81:12:35:08:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 26 23:56:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba259ce96e81f030304491c7181326b76f637fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:80:5f:ec:56:ad:57:f4:eb:8c:e7:46:c6:
b5:3f:19:00:89:2d:7e:2e:dc:5f:da:0d:46:51:9c:
f0:43:91:41:95:5f:91:3e:f6:1c:be:f4:81:93:11:
b9:b7:05:b3:eb:d8:f0:9a:70:de:be:fe:23:b3:c7:
8e:94:54:b7:50:e7:e3:c0:12:a4:0a:c3:24:75:60:
9e:54:19:05:af:e5:74:bc:60:cd:95:d5:6c:c7:80:
66:71:cd:77:5c:a0:03:24:29:c7:4a:58:a9:33:ac:
d8:17:06:d1:c9:7f:04:65:9b:52:64:33:9c:f3:23:
53:59:22:fb:b3:eb:e7:f5:00:2b:ea:ce:54:50:ae:
5e:9d:28:5c:a6:7d:af:79:e7:88:a6:3c:12:d8:12:
d9:d8:82:7f:6e:5d:37:4e:be:20:05:de:0d:55:00:
aa:65:21:6f:9d:f5:b7:17:be:41:1e:b2:fb:47:e6:
34:0e:91:01:d9:8c:a4:2d:d6:69:e3:96:56:8c:ef:
46:ce:52:44:e5:93:6f:ac:f5:ea:8a:a7:ea:9f:07:
3d:95:ab:10:f7:26:e4:22:1d:c9:50:4e:83:ea:50:
da:89:c8:d1:4e:cc:8f:3a:61:61:df:09:4b:b2:de:
5f:6d:1f:3f:a4:19:b4:ab:ac:4f:71:8e:25:b0:93:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:25:9C:E9:6E:81:F0:30:30:44:91:C7:18:13:26:B7:6F:63:7F:AC
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uiWc6W6B8DAwRJHHGBMmt29jf6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.102.91.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6c:d4:97:2e:ec:c2:58:b0:bd:ef:e8:62:65:7d:6e:80:4b:
5d:85:53:5a:48:77:27:de:b4:76:cf:a6:4d:66:2c:74:77:25:
3e:fd:6c:3c:47:43:34:eb:cc:67:ec:ef:e4:1f:5a:35:11:d0:
80:5e:85:6d:23:f8:2b:22:a5:d3:65:75:41:38:19:65:09:c0:
8d:f6:b1:32:3d:f2:3f:f8:84:64:cd:55:c5:bc:03:86:60:9c:
c7:1f:d6:ea:b5:4f:a9:2f:d6:d2:af:aa:9b:63:d3:4a:7f:37:
41:c5:2d:25:78:dc:26:76:44:53:a3:ad:be:b2:24:2a:18:62:
bc:69:08:b4:56:d5:a6:a5:1c:36:0d:ed:0a:17:95:f5:cd:48:
2f:28:26:84:01:fc:09:bc:af:89:a4:68:66:b0:03:96:a8:b6:
82:07:e4:7a:9f:fa:c7:28:49:fd:95:56:6d:44:1d:92:cc:04:
65:ae:7e:c0:c4:2f:b3:2f:fd:39:72:f2:0b:c2:3e:29:36:92:
45:b3:54:0d:44:60:0e:44:dd:24:cb:f6:a9:bb:d8:bb:a4:51:
4a:1d:eb:8a:97:3f:dc:b7:e4:3a:b9:5c:8e:05:bd:ef:5a:48:
14:07:7c:8b:18:0f:34:c5:3a:06:ba:5b:0d:44:c1:f3:91:27:
0f:e2:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:51:59 2026 by rpki-client