Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/JQhGXa1GbW70a6zD5omLe2FIAeo.roa
File: JQhGXa1GbW70a6zD5omLe2FIAeo.roa (raw, json)
Hash identifier: e16MFsbuAjccXdkhofvYNR+VLSTl6I0Nn9qk8O3HoUI=
Subject key identifier: 25:08:46:5D:AD:46:6D:6E:F4:6B:AC:C3:E6:89:8B:7B:61:48:01:EA
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A07FE4DEBCE27040E6E6EDE60D2FD85D19
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/JQhGXa1GbW70a6zD5omLe2FIAeo.roa
Signing time: Tue 08 Sep 2026 07:21:40 +0000
ROA not before: Tue 08 Sep 2026 07:21:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 191.44.82.0/24 maxlen: 24
191.44.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Sep 2026 08:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:e4:de:bc:e2:70:40:e6:e6:ed:e6:0d:2f:d8:5d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 8 07:21:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2508465dad466d6ef46bacc3e6898b7b614801ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:3e:7b:76:ac:57:24:03:07:85:78:c9:64:
35:5f:df:9f:8e:86:88:53:a1:a7:11:98:17:5b:8e:
6a:30:a9:a7:80:fa:82:39:64:26:f0:95:7b:bc:cd:
ca:78:13:e6:92:15:23:a3:8a:f4:5d:3d:ea:8f:8d:
86:eb:ab:5a:11:ef:68:51:65:f6:7e:bc:3a:67:64:
37:d7:00:d6:f2:9a:37:a3:54:28:80:06:6d:41:9d:
f4:cf:19:e8:d5:9e:96:3c:ba:d6:07:df:f9:74:c4:
a9:b5:43:e3:57:58:2f:f2:35:f5:9e:76:26:8d:23:
9b:8b:42:36:c9:4b:2b:01:ce:dd:60:a3:be:2e:41:
b6:f8:49:de:71:0d:8e:ca:da:89:ec:40:91:3e:75:
03:ec:9b:34:9e:c7:cc:d8:52:89:de:83:0c:17:36:
87:5d:33:28:cc:c3:60:74:08:cf:9b:7f:bf:ef:f9:
02:6c:8c:8a:fe:a4:3e:66:26:fd:35:d3:9d:8d:5d:
23:d2:61:a2:71:5d:82:27:c5:9a:73:55:b7:36:d9:
87:b0:19:b4:65:d5:6d:a4:a7:f4:3f:ad:fa:03:53:
61:ad:b1:5d:b0:05:5d:8c:1d:34:0b:31:2c:57:b3:
ff:87:e5:95:0c:6b:4b:5b:73:1e:fb:81:43:64:41:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:08:46:5D:AD:46:6D:6E:F4:6B:AC:C3:E6:89:8B:7B:61:48:01:EA
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/JQhGXa1GbW70a6zD5omLe2FIAeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.82.0/24
191.44.103.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b7:5d:77:c7:99:d6:a3:c2:09:d8:76:57:8b:4d:c6:34:1f:
63:47:ee:73:68:88:c9:22:26:f6:2b:77:32:f3:25:e8:f4:64:
fc:49:f5:6e:7b:d1:f9:f0:02:92:f6:fe:9b:21:6a:88:65:8a:
dd:c2:97:80:38:4b:6d:06:13:5d:30:c3:08:c6:fd:14:08:a2:
b4:29:0c:82:12:5a:16:a3:11:8a:71:52:82:e7:3f:fe:1a:6e:
5b:40:59:af:25:08:f1:3b:50:aa:78:60:e9:ac:61:6e:8a:23:
de:dd:42:7c:95:52:1e:84:45:ff:b2:9e:ca:37:12:b2:02:2e:
51:ac:64:3d:76:74:ab:8d:60:9e:35:99:43:51:91:fe:79:31:
e7:3b:a3:78:b8:63:1c:71:ce:49:5f:67:e6:43:1e:0d:c6:09:
75:e1:ef:be:51:2b:c6:b9:b5:0e:59:55:b1:6d:ed:29:89:b0:
47:37:81:17:4b:bd:89:8f:5b:c8:16:38:b3:8d:96:03:8a:4d:
2b:af:7e:11:57:2f:8b:68:86:78:6d:77:c0:3f:8b:ce:70:f6:
b8:33:5b:95:6b:99:6e:6a:61:2b:19:2a:93:0d:92:d3:f3:07:
0c:87:c3:21:51:29:6e:e3:aa:49:8e:66:f3:c4:c6:10:2d:3e:
b8:59:a3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:17:58 2026 by rpki-client