Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/YvQ34rDatseTQ8Ukscra32nPNv8.roa
File: YvQ34rDatseTQ8Ukscra32nPNv8.roa (raw, json)
Hash identifier: HLkQecTqehqjoHo99puTd3tYpNe/KMm1lRH/yq69aPE=
Subject key identifier: 62:F4:37:E2:B0:DA:B6:C7:93:43:C5:24:B1:CA:DA:DF:69:CF:36:FF
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0927AAA060ADD8E5E3FA940C8587CE8E6
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/YvQ34rDatseTQ8Ukscra32nPNv8.roa
Signing time: Fri 11 Sep 2026 21:58:27 +0000
ROA not before: Fri 11 Sep 2026 21:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 191.44.67.0/24 maxlen: 24
191.44.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 14:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:7a:aa:06:0a:dd:8e:5e:3f:a9:40:c8:58:7c:e8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 11 21:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62f437e2b0dab6c79343c524b1cadadf69cf36ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:d3:90:3b:c3:81:19:dd:c5:a0:9c:8c:e1:
be:af:ac:70:a3:d1:31:86:fb:e6:d3:a0:1d:d4:c2:
e6:e7:0b:d0:cf:05:63:ee:66:79:59:6c:ad:ab:af:
a3:c9:bb:b1:a3:40:63:d9:30:25:ce:6d:1f:79:bc:
b9:da:00:4a:7a:1c:26:9f:b8:9b:16:47:08:8b:04:
33:95:01:ce:aa:78:e0:45:f3:f6:54:36:79:bd:2f:
24:d1:a3:6e:07:86:9a:3d:ab:3f:8c:b9:cc:95:6c:
d5:d2:92:85:05:8b:a4:41:14:59:f8:f4:aa:a5:5d:
4b:d0:09:49:ea:fe:7b:d4:03:c0:e0:8a:70:10:e2:
cb:7c:4c:96:85:ba:d7:3a:b1:93:d3:d9:80:1b:ae:
59:91:a0:34:d0:ef:a0:1f:b3:25:46:4a:40:2f:d1:
d2:4e:17:59:03:81:3e:dc:fd:81:02:4f:3f:9d:ed:
ad:12:c2:25:3e:04:dd:7d:d7:10:48:f4:61:57:60:
d8:57:f8:99:d4:91:97:f7:14:dc:c9:9b:e6:2c:12:
5e:61:59:af:48:bc:be:0e:4e:56:a5:a3:73:a0:42:
43:c7:95:75:d1:90:3f:c4:b4:49:82:88:e3:d8:ab:
b5:44:25:bb:21:0f:16:8b:f1:06:62:8c:46:9f:00:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F4:37:E2:B0:DA:B6:C7:93:43:C5:24:B1:CA:DA:DF:69:CF:36:FF
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/YvQ34rDatseTQ8Ukscra32nPNv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.67.0/24
191.44.83.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ae:a4:15:6c:2a:d9:60:96:ab:b1:29:62:ff:85:35:1b:7f:
50:67:80:95:31:93:e9:ea:bf:24:f7:6f:5f:05:88:0f:61:84:
9f:31:b4:fa:ac:2a:bf:87:b3:45:51:9b:e6:cc:e8:a8:4e:d2:
0d:bb:ce:5e:15:c0:5b:44:c6:be:70:11:1d:58:4b:57:33:2e:
6b:a0:2a:b7:ed:f7:ff:87:d5:14:4d:9d:3b:09:04:f5:18:de:
bf:51:f7:e7:66:06:e2:07:37:85:12:01:5d:79:b4:55:21:1a:
bb:fd:98:63:da:cf:b0:7e:de:e4:2f:7a:3b:3d:b0:ee:6f:06:
7b:11:f0:31:3e:a2:27:95:87:45:1c:18:21:a0:16:a5:99:fa:
a7:5f:81:d1:93:62:95:b5:27:09:45:d1:13:ad:a9:43:ec:5a:
88:97:91:1e:51:10:00:5f:f6:b2:0a:40:f7:49:68:35:00:9b:
79:6a:64:d2:08:48:ad:83:72:67:57:6b:23:f1:66:a2:fe:eb:
ef:a3:ff:fd:23:1a:7e:06:08:14:82:db:d3:7b:80:b5:e5:15:
6e:b1:c6:21:ca:56:4d:a1:92:e3:f2:97:b3:46:a3:5c:da:1a:
3e:c6:d8:29:66:30:75:00:29:b6:bb:f1:a3:16:74:cc:e3:e1:
39:a4:65:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:18:04 2026 by rpki-client