Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/h9SewbhQ-c94V9LqoVQ_hSbCulc.roa
File: h9SewbhQ-c94V9LqoVQ_hSbCulc.roa (raw, json)
Hash identifier: zGXPCFxHgX9fwrSY/kb1Y3UPEyEcE6afikOwCj5Evio=
Subject key identifier: 87:D4:9E:C1:B8:50:F9:CF:78:57:D2:EA:A1:54:3F:85:26:C2:BA:57
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0A54044D974108835B27486F426CBB354
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/h9SewbhQ-c94V9LqoVQ_hSbCulc.roa
Signing time: Tue 15 Sep 2026 13:27:27 +0000
ROA not before: Tue 15 Sep 2026 13:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215133
IP address blocks: 201.3.237.0/24 maxlen: 24
201.4.72.0/24 maxlen: 24
201.4.76.0/24 maxlen: 24
201.7.19.0/24 maxlen: 24
201.7.22.0/24 maxlen: 24
201.7.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 15:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:40:44:d9:74:10:88:35:b2:74:86:f4:26:cb:b3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 15 13:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87d49ec1b850f9cf7857d2eaa1543f8526c2ba57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:ed:78:76:46:d9:58:4a:1c:d3:2c:88:9c:
19:f0:f1:bb:4e:4a:d0:f7:e8:76:9f:b5:ad:d1:e8:
63:fb:f7:bb:07:9b:0c:b1:66:62:02:4c:8b:e9:a0:
ef:0d:96:9e:5d:2c:1e:0f:b5:95:f8:99:d8:a1:db:
8b:89:b9:a3:8f:98:d1:c5:bd:ec:a4:56:48:7f:b8:
47:ad:55:28:6a:ee:ca:d1:ca:81:c7:77:35:00:e8:
7a:df:b5:d5:98:b5:76:29:42:f9:8a:66:d9:8d:ac:
f3:7c:25:fe:1a:ad:3d:08:9c:c1:95:96:12:02:8c:
41:07:45:a2:41:ca:6a:d1:1f:41:94:13:4e:d7:f7:
3f:0c:18:81:c4:4d:d3:d6:c1:91:74:71:7b:44:e8:
04:1d:d0:3e:ae:81:02:66:87:7a:2a:31:64:de:a2:
7f:84:99:35:2d:a8:59:69:6a:03:cf:e0:27:f5:60:
53:14:fa:40:10:ea:3b:b3:65:8a:bb:fa:d1:ff:1f:
90:2e:a6:a5:2e:3f:2b:ff:e7:ec:f5:c4:44:5c:6d:
a9:10:bd:98:8e:6f:f6:8b:1b:e5:64:20:2d:e5:11:
eb:a2:c6:50:5e:72:8c:65:f1:29:b5:95:ec:4a:9c:
f5:8a:ad:93:94:55:48:e6:bc:80:2b:ae:e4:3e:08:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D4:9E:C1:B8:50:F9:CF:78:57:D2:EA:A1:54:3F:85:26:C2:BA:57
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/h9SewbhQ-c94V9LqoVQ_hSbCulc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.237.0/24
201.4.72.0/24
201.4.76.0/24
201.7.19.0/24
201.7.22.0/24
201.7.27.0/24
Signature Algorithm: sha256WithRSAEncryption
08:85:02:da:f5:34:69:c4:7f:e0:a3:78:b4:02:38:e0:19:9d:
12:ad:cb:be:ef:06:11:0f:d4:2f:bf:92:69:35:6f:b6:87:e5:
4e:9b:c9:7b:36:f9:dc:a9:49:b5:39:d8:29:5c:55:7b:9f:be:
35:15:d2:53:00:b0:f1:81:2e:76:1d:b4:01:31:75:25:95:51:
c8:06:8f:9f:85:cf:1e:fb:60:a4:6e:fe:c1:b1:00:5b:07:4d:
4f:a1:d5:33:bf:8a:0b:a3:1a:71:c6:a7:6b:84:26:d6:fb:90:
4b:17:56:f4:9f:c0:8c:bf:7d:b0:fd:06:46:ca:36:47:2d:3c:
fa:c1:d5:68:84:10:81:a2:29:17:24:fd:1f:0e:58:b2:72:61:
73:43:11:8a:1f:73:88:57:44:10:eb:f2:f3:4f:b0:d0:53:8d:
c1:08:32:19:f0:e4:ad:7e:16:f9:5b:4f:81:db:55:2f:88:ab:
a0:f0:18:5d:1c:d0:55:b4:43:da:a9:43:d3:97:17:f6:78:99:
93:ab:f1:ad:cd:3e:b8:b5:dd:71:12:12:f4:4e:bb:44:ae:28:
5c:6f:19:c2:68:b4:7a:92:36:49:8a:69:23:3e:8a:63:31:d8:
76:b8:81:27:7e:85:6d:30:9e:64:3c:56:2f:2e:d1:f0:c4:3a:
ac:cb:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:19:37 2026 by rpki-client