Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-jaoTw3CU4sKBQn8yi_wMVe5AEI.roa
File: 1-jaoTw3CU4sKBQn8yi_wMVe5AEI.roa (raw, json)
Hash identifier: ZHld1nrsEwdkYFxHi70ccPskPhMRT+oI1JmchhsQiyc=
Subject key identifier: FA:36:A8:4F:0D:C2:53:8B:0A:05:09:FC:CA:2F:F0:31:57:B9:00:42
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019E16587EAD4BE8830CA437043B6847A59B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-jaoTw3CU4sKBQn8yi_wMVe5AEI.roa
Signing time: Mon 11 May 2026 09:22:38 +0000
ROA not before: Mon 11 May 2026 09:22:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209552
IP address blocks: 2a06:de01:c0::/44 maxlen: 48
2a06:de01:c1::/48 maxlen: 48
2a06:de01:c2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 12 May 2026 23:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:58:7e:ad:4b:e8:83:0c:a4:37:04:3b:68:47:a5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 11 09:22:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa36a84f0dc2538b0a0509fcca2ff03157b90042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:45:dd:06:d8:32:cc:20:22:81:f9:e8:dd:
c4:07:ef:19:3f:e2:c2:61:b1:49:d3:e5:40:81:46:
d4:90:a5:b9:9c:2f:fa:c1:40:9a:9a:44:03:f6:ab:
5f:26:aa:72:28:50:b3:77:b4:a9:c9:9b:e8:4c:6a:
5d:6c:af:8e:5c:32:c0:72:de:10:06:9a:12:66:34:
7e:c4:2f:3a:33:44:90:c1:21:98:b5:0a:76:62:75:
12:cf:4f:05:bd:74:81:67:52:7a:fa:78:a5:49:b3:
01:98:2b:90:aa:db:b1:c8:06:dd:b0:38:da:ec:6a:
2d:bb:4b:8f:2a:fe:c5:7f:1f:83:c4:72:28:12:3b:
4a:2f:e8:44:a2:1f:53:de:f3:5a:1f:23:f9:5d:f4:
99:24:11:d2:51:2a:1e:4c:a5:20:22:5c:1d:1f:7e:
7e:ee:bd:52:a5:4c:72:57:9b:56:30:39:d4:09:94:
09:f9:47:09:88:cf:62:97:54:88:9e:b8:80:aa:f5:
96:e6:62:0d:ea:45:51:2d:76:e6:fb:b2:10:c5:4d:
07:a0:a4:d6:e0:ae:c9:b3:29:9f:e3:08:1a:ec:6b:
d4:da:b5:14:5b:f2:9e:68:e6:4d:b3:5d:6e:af:e1:
f0:2c:a3:a1:38:04:2a:f1:5e:a0:db:ad:a8:ca:ed:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:36:A8:4F:0D:C2:53:8B:0A:05:09:FC:CA:2F:F0:31:57:B9:00:42
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-jaoTw3CU4sKBQn8yi_wMVe5AEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:c0::/44
Signature Algorithm: sha256WithRSAEncryption
cb:5b:65:df:71:65:85:b0:de:3f:a7:dc:23:58:65:26:d5:ce:
13:8e:85:bf:6a:64:cb:f7:a4:55:61:d8:6c:36:12:57:65:89:
d7:0b:22:bb:07:4e:bb:cb:f2:03:7f:43:b3:74:0a:76:f7:dd:
aa:90:46:68:98:ee:54:5e:68:1b:3f:55:96:ee:0d:c1:05:c7:
2b:a1:07:2a:41:af:17:9b:b2:0a:2b:29:11:cd:82:83:f3:91:
6a:7a:9b:b1:5e:9e:03:c1:f8:f3:c0:44:df:62:ff:36:d5:05:
ee:9c:2b:a6:88:f2:e3:8b:1f:c1:85:c9:c2:63:de:3f:ef:35:
5f:c5:f7:26:00:a0:3f:cf:35:ab:09:aa:cf:1d:c1:63:db:03:
99:4e:f2:76:a3:c6:0c:57:36:6e:9b:a8:51:c3:3e:f7:54:a3:
27:44:1e:6c:df:94:74:c4:fb:aa:67:07:04:22:9a:de:8b:e6:
c3:31:67:7f:73:21:bd:8e:3b:62:e0:7f:41:64:2c:98:2c:48:
25:1b:61:92:68:fb:f7:72:e2:c1:8b:75:d4:20:05:f6:58:c9:
3e:47:db:b1:c8:ae:cd:f0:bf:77:4d:cd:77:7a:df:32:5b:fd:
3a:0a:7f:6b:46:a7:23:b2:df:d4:cf:ef:d2:a8:03:75:d3:b4:
b6:c8:5b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:08 2026 by rpki-client