Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/gyjmZ4YCRaAzAH9ATwPqE35XO1E.roa
File: gyjmZ4YCRaAzAH9ATwPqE35XO1E.roa (raw, json)
Hash identifier: cnUECMZKAEfpUCdLJ2cFQ06OwC6dDNXUmgGL0QEzEwE=
Subject key identifier: 83:28:E6:67:86:02:45:A0:33:00:7F:40:4F:03:EA:13:7E:57:3B:51
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A099EA0C0F3CC17F9129E1DF0F1F860A99
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/gyjmZ4YCRaAzAH9ATwPqE35XO1E.roa
Signing time: Sun 13 Sep 2026 08:37:27 +0000
ROA not before: Sun 13 Sep 2026 08:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 191.44.78.0/24 maxlen: 24
191.44.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Sep 2026 13:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:ea:0c:0f:3c:c1:7f:91:29:e1:df:0f:1f:86:0a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 13 08:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8328e667860245a033007f404f03ea137e573b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:97:21:25:d7:c6:29:ea:b4:f8:fb:71:3f:
1c:cf:e6:e4:11:f9:f7:7b:ab:b6:43:b1:06:ff:b4:
50:bc:57:ab:75:d4:8d:6a:8f:49:d8:16:81:17:ac:
49:b8:3b:9c:a7:8a:70:74:db:d8:e0:6a:1d:e9:67:
3d:30:4b:09:56:48:f1:47:13:ac:e7:7d:d3:c4:5e:
f8:e4:d3:87:22:35:2f:ed:ad:12:87:46:e4:9f:33:
98:6a:aa:f8:3f:b9:de:85:3b:26:17:23:e4:a1:8a:
97:f6:36:e9:97:71:ce:e7:ad:fa:c0:71:a3:6a:5b:
05:ba:7a:48:06:ae:e4:1b:05:39:08:98:40:d3:d1:
c4:25:81:1f:71:fb:a0:bf:ba:10:1c:9b:62:a7:93:
55:03:87:e4:d8:f4:8a:ad:a3:f0:40:64:5b:e2:13:
5a:4b:25:e7:83:33:ed:1a:e5:b0:f7:e4:83:ff:e4:
0c:7d:47:00:2c:e4:5c:67:02:71:0f:9e:e5:07:6a:
af:87:72:4e:bc:2c:f6:96:02:89:bd:9e:ae:02:17:
82:71:f6:99:ec:f7:d8:01:1d:5f:9a:cc:bd:e2:ff:
4b:4b:f0:a5:6f:37:df:26:75:ed:e5:dd:79:d6:d1:
3e:7b:39:a4:55:4d:19:db:52:de:4f:85:f9:af:cb:
b5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:28:E6:67:86:02:45:A0:33:00:7F:40:4F:03:EA:13:7E:57:3B:51
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/gyjmZ4YCRaAzAH9ATwPqE35XO1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.78.0/24
191.44.98.0/24
Signature Algorithm: sha256WithRSAEncryption
95:01:dc:2c:8c:46:1b:5b:25:63:ea:53:4e:13:e3:ff:5a:80:
d5:7c:3f:20:0f:29:9f:45:d1:09:e7:78:2d:83:5a:0d:91:98:
d3:db:b0:58:a0:41:19:f5:ef:c7:8f:96:cc:7d:c4:2f:ed:4b:
1d:bb:f2:0c:f9:e2:d1:eb:4c:03:7c:02:c5:ad:fd:13:39:29:
dc:9c:44:8a:85:34:73:9e:b4:7a:d2:58:40:22:8e:e6:fe:99:
ca:05:d2:e5:8e:07:94:c3:57:c2:2e:f9:bc:31:9f:e0:31:97:
93:0e:cb:6f:a4:b5:10:bd:e1:f9:78:7a:e6:a2:e1:4b:3a:40:
b5:c0:b2:f5:bc:18:a9:22:49:bb:84:e2:58:43:80:7c:c5:ea:
ce:ab:35:6d:71:a9:83:09:a2:df:82:3c:64:7e:7a:dd:b1:45:
8f:22:4d:0e:00:f7:27:50:62:ec:21:03:4f:cd:09:8c:7f:1e:
6f:c5:5c:32:be:e6:63:65:11:22:9b:3d:12:38:b7:60:42:68:
55:35:31:68:6e:fc:79:13:74:d2:5b:13:1a:c8:45:f7:d3:bc:
7d:0c:b7:84:7e:a4:15:89:62:39:9b:e3:00:c9:e9:1f:26:c3:
0c:22:93:6c:34:08:13:29:6a:48:38:04:bf:ea:a7:61:a3:9c:
0f:19:2a:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCZ6gwPPMF/kSnh3w8fhgqZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwOTEzMDgzNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzI4ZTY2Nzg2MDI0NWEwMzMwMDdmNDA0ZjAzZWExMzdlNTczYjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDqXISXXxinqtPj7cT8cz+bkEfn3
e6u2Q7EG/7RQvFerddSNao9J2BaBF6xJuDucp4pwdNvY4God6Wc9MEsJVkjxRxOs
533TxF745NOHIjUv7a0Sh0bknzOYaqr4P7nehTsmFyPkoYqX9jbpl3HO5636wHGj
alsFunpIBq7kGwU5CJhA09HEJYEfcfugv7oQHJtip5NVA4fk2PSKraPwQGRb4hNa
SyXngzPtGuWw9+SD/+QMfUcALORcZwJxD57lB2qvh3JOvCz2lgKJvZ6uAheCcfaZ
7PfYAR1fmsy94v9LS/ClbzffJnXt5d151tE+ezmkVU0Z21LeT4X5r8u1swIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIMo5meGAkWgMwB/QE8D6hN+VztRMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvZ3lqbVo0WUNSYUF6QUg5QVR3UHFFMzVYTzFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvyxOAwQA
vyxiMA0GCSqGSIb3DQEBCwUAA4IBAQCVAdwsjEYbWyVj6lNOE+P/WoDVfD8gDymf
RdEJ53gtg1oNkZjT27BYoEEZ9e/Hj5bMfcQv7Usdu/IM+eLR60wDfALFrf0TOSnc
nESKhTRznrR60lhAIo7m/pnKBdLljgeUw1fCLvm8MZ/gMZeTDstvpLUQveH5eHrm
ouFLOkC1wLL1vBipIkm7hOJYQ4B8xerOqzVtcamDCaLfgjxkfnrdsUWPIk0OAPcn
UGLsIQNPzQmMfx5vxVwyvuZjZREimz0SOLdgQmhVNTFobvx5E3TSWxMayEX307x9
DLeEfqQViWI5m+MAyekfJsMMIpNsNAgTKWpIOAS/6qdho5wPGSqo
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:58:35 2026 by rpki-client