Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/f9JyTRPn5sxK4RpNFKk2lCwGQPw.roa
File: f9JyTRPn5sxK4RpNFKk2lCwGQPw.roa (raw, json)
Hash identifier: tziujQVxTKoFBmAsXkIVgFM9OxyWEx3PFjXIPvPCviI=
Subject key identifier: 7F:D2:72:4D:13:E7:E6:CC:4A:E1:1A:4D:14:A9:36:94:2C:06:40:FC
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F8943DF037355189D36A5EE53F2FF48A4
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/f9JyTRPn5sxK4RpNFKk2lCwGQPw.roa
Signing time: Wed 22 Jul 2026 09:59:14 +0000
ROA not before: Wed 22 Jul 2026 09:59:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 191.44.116.0/24 maxlen: 24
191.44.122.0/24 maxlen: 24
191.44.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jul 2026 21:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:43:df:03:73:55:18:9d:36:a5:ee:53:f2:ff:48:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 22 09:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fd2724d13e7e6cc4ae11a4d14a936942c0640fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:0e:5c:04:9b:93:e9:4c:5b:ed:2f:72:cf:
54:51:15:c3:9b:7f:81:7c:27:05:ab:83:88:85:cf:
42:63:2c:4a:c2:ad:b6:96:29:9c:39:d4:d0:22:d1:
ee:1a:e5:5f:12:ce:a2:0a:07:2f:67:1f:2c:99:67:
78:9d:19:23:9d:da:bd:35:6a:dc:38:b4:96:d5:eb:
d0:c6:cb:8d:03:09:90:a4:e7:15:69:5d:03:d6:2b:
2c:c3:6b:17:87:82:ae:1d:a8:ba:b9:5a:04:3e:d2:
da:ed:71:28:fb:38:cc:6f:83:25:46:74:12:37:ca:
4b:0f:a2:c3:25:c1:5e:cd:19:83:1e:f8:96:a3:b0:
18:fe:ba:d5:ad:e7:7b:65:66:5b:4b:5a:46:a3:2f:
ca:46:34:83:d5:94:cb:c0:33:56:63:28:69:6f:e2:
81:b2:18:a0:f9:21:5d:d1:2d:8a:f7:bc:be:69:e6:
c7:d8:87:6e:8b:af:ec:77:5e:31:65:53:29:4b:e5:
31:25:77:e0:f6:1a:0e:5f:f9:c9:41:f8:7f:2c:31:
90:43:5f:ce:9f:00:79:33:28:b0:c2:3a:c5:ac:45:
3e:1f:28:a2:ff:6b:ae:d5:be:67:2f:eb:ed:17:af:
41:04:cf:09:17:ef:9b:fe:ee:91:a1:09:bf:6b:f2:
69:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D2:72:4D:13:E7:E6:CC:4A:E1:1A:4D:14:A9:36:94:2C:06:40:FC
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/f9JyTRPn5sxK4RpNFKk2lCwGQPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.116.0/24
191.44.122.0/24
191.44.124.0/24
Signature Algorithm: sha256WithRSAEncryption
63:c0:97:d7:4b:96:ba:bd:ed:b8:2a:3e:f6:13:6b:d1:12:b1:
e7:a0:30:a6:61:a6:4b:43:57:d4:0d:f3:ce:5f:be:ea:0a:ff:
9f:bf:df:66:58:25:af:c8:db:1e:06:05:c2:c0:8a:d7:74:93:
c9:d5:41:cb:4f:38:2f:c8:5f:35:ca:07:7f:70:52:ac:07:cf:
65:1a:c7:1b:ab:6d:b3:20:37:91:97:23:dc:91:9d:65:a6:b3:
33:15:ee:3b:75:a4:10:53:ad:e4:cc:2c:fb:45:72:c2:47:76:
0c:8f:2f:28:39:fc:f1:69:1c:68:39:29:3f:ae:54:7f:c3:48:
c8:f7:6e:6c:33:a9:b4:c6:7c:14:bf:5f:ee:8f:74:ee:ba:fa:
a7:87:69:f0:90:1d:21:ef:85:da:1b:65:d5:64:4d:ff:f7:00:
7d:e3:69:39:a8:9b:3d:7c:55:af:54:6b:f0:6d:10:3b:da:ef:
6c:f6:24:ce:0b:27:7d:4b:53:3e:19:ca:c2:7b:25:4e:f2:bc:
4f:6a:d0:09:56:9d:81:4d:44:72:14:e8:b2:4b:1f:56:5c:e8:
81:80:bc:0f:70:e6:83:9c:2e:49:17:c9:28:53:57:83:f1:f9:
fd:c5:91:0c:7d:99:2e:59:5b:38:8b:a4:97:e5:d1:d3:2f:2a:
1e:5c:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:20:21 2026 by rpki-client