Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/50_zV4GWWQV4qn-OS0aPaR6qCbs.roa
File: 50_zV4GWWQV4qn-OS0aPaR6qCbs.roa (raw, json)
Hash identifier: rZpKNEcC36tt3yoy53iSJOLFS6JPkxhN+im4Y9b1b+M=
Subject key identifier: E7:4F:F3:57:81:96:59:05:78:AA:7F:8E:4B:46:8F:69:1E:AA:09:BB
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A12CB97AB81A41108A8CA0AA648FEA6CBF
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/50_zV4GWWQV4qn-OS0aPaR6qCbs.roa
Signing time: Sun 11 Oct 2026 20:48:35 +0000
ROA not before: Sun 11 Oct 2026 20:48:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 191.44.78.0/24 maxlen: 24
191.44.82.0/24 maxlen: 24
191.44.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Oct 2026 21:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:b9:7a:b8:1a:41:10:8a:8c:a0:aa:64:8f:ea:6c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 11 20:48:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e74ff3578196590578aa7f8e4b468f691eaa09bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:67:f8:33:cc:21:4b:ba:b4:7b:f7:ee:45:
1f:33:d0:7b:34:95:ac:3f:24:7d:90:3e:04:fc:1f:
e2:4c:d3:ab:61:c9:53:57:aa:f2:4c:b9:50:2f:2b:
ff:6a:20:89:4a:f0:d0:e6:d5:79:d0:3a:38:aa:42:
87:fe:e2:97:13:94:fd:68:8c:5f:fe:54:0e:4f:68:
d8:36:46:9c:ab:0d:e1:e4:cd:72:7a:6a:13:82:44:
79:9a:fe:f6:43:04:9e:70:ee:01:15:0c:1f:4f:b6:
99:73:a1:44:35:52:5c:55:82:31:db:09:2e:15:ee:
b6:8e:a0:64:d0:5e:e0:db:b1:a1:f1:d6:f1:d3:16:
8c:71:1e:72:69:1a:54:ba:aa:c5:76:79:02:53:cc:
62:82:6a:20:e8:a5:1a:d0:d5:82:6e:07:2a:ba:81:
76:8a:fd:d2:b8:dc:db:47:71:57:5b:a0:2c:33:69:
fa:81:c8:2b:ff:f8:f1:30:d7:bd:5c:88:96:17:4c:
60:48:2e:70:48:c6:ff:41:c2:ce:79:f2:21:d0:88:
90:78:00:ee:4e:7d:1b:9b:f7:7d:49:59:9a:c3:50:
0d:f5:2d:b6:0e:67:f5:ad:81:83:ee:79:74:eb:65:
a3:2f:68:f8:15:7c:65:34:9f:b9:05:cf:56:fc:9b:
f4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4F:F3:57:81:96:59:05:78:AA:7F:8E:4B:46:8F:69:1E:AA:09:BB
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/50_zV4GWWQV4qn-OS0aPaR6qCbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.78.0/24
191.44.82.0/24
191.44.85.0/24
Signature Algorithm: sha256WithRSAEncryption
68:18:ed:9f:4c:6d:8f:70:d5:07:5e:3d:e1:0e:98:fd:c9:3f:
69:43:65:0b:fb:e8:e7:15:bc:37:b6:ce:0e:d1:b1:10:44:6a:
90:d8:a4:e7:fa:77:6d:d8:f6:3a:20:cb:a4:c2:9a:48:e8:24:
8f:b6:0e:7e:b0:be:7e:75:19:f4:34:95:65:10:cd:03:99:e9:
a2:d9:b9:de:9e:0e:72:6a:11:ab:46:2d:23:b8:bb:cb:1d:84:
20:33:f8:9c:a3:6d:c5:0d:82:2a:c8:f9:09:ff:bf:cc:5d:9b:
0d:3c:28:e4:0f:fc:57:97:69:15:12:fa:df:d1:ed:9d:60:2f:
a4:8a:96:2a:64:74:f7:38:10:24:d3:02:50:4a:32:74:71:3e:
d5:82:56:3b:f2:b6:7e:4c:48:96:6d:ed:1c:86:97:c6:20:d6:
90:24:6b:70:77:45:1d:1e:b0:15:1a:6a:30:14:69:84:2b:20:
6b:e0:d4:07:50:af:bc:4f:b8:8c:87:41:f0:8b:a1:55:10:c5:
c4:59:88:2a:17:aa:07:08:4e:2b:04:b9:42:57:0c:c6:b7:a0:
da:9d:f4:bd:1d:69:e1:19:b1:a4:77:d5:0b:78:c0:b0:88:1e:
4d:ba:51:81:44:f9:38:6c:d8:55:4e:68:3b:df:39:b7:f7:ea:
7b:3a:c9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:17:49 2026 by rpki-client