Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/r_eE3U4-QBcTt7DABJ7Bzr01Iwc.roa
File: r_eE3U4-QBcTt7DABJ7Bzr01Iwc.roa (raw, json)
Hash identifier: rvgQ9JCto407cc0D62L8xUZB2xsTUnTjGscMK7y/xtE=
Subject key identifier: AF:F7:84:DD:4E:3E:40:17:13:B7:B0:C0:04:9E:C1:CE:BD:35:23:07
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0CDAC2A084B778D6E9AA91743DF9002E9
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/r_eE3U4-QBcTt7DABJ7Bzr01Iwc.roa
Signing time: Wed 23 Sep 2026 09:50:07 +0000
ROA not before: Wed 23 Sep 2026 09:50:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 191.44.65.0/24 maxlen: 24
201.3.122.0/24 maxlen: 24
201.3.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Sep 2026 09:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ac:2a:08:4b:77:8d:6e:9a:a9:17:43:df:90:02:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 23 09:50:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aff784dd4e3e401713b7b0c0049ec1cebd352307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:31:67:d7:f9:a1:dc:4f:6a:35:b1:3f:33:
b1:2f:9d:ac:e3:92:5e:f7:21:28:44:07:75:87:4b:
01:1d:85:54:06:fd:72:72:4a:bb:d2:dc:d3:5b:b7:
71:55:a1:6e:f2:13:4e:c7:9d:f5:eb:66:f3:66:5b:
75:ff:42:6e:b1:5b:b0:ac:d4:74:f8:66:46:25:8b:
a3:06:46:da:9b:55:13:68:70:fe:03:92:37:e5:27:
bd:ac:22:18:7b:68:db:a6:bf:c3:0b:bb:48:d4:54:
9f:4b:e4:20:c0:d8:c9:f6:fe:38:55:4b:70:73:f4:
1c:7f:b7:ed:a2:b5:5a:b1:09:f2:69:b4:dc:aa:d6:
19:36:12:97:b2:1c:09:e6:78:e4:4a:33:cc:6a:04:
12:e4:29:df:6e:43:87:34:23:b6:7f:cc:51:4b:a0:
4a:ce:93:f8:d7:53:99:a7:8c:64:ee:fb:ff:ad:d4:
79:ff:bd:39:49:29:54:d0:93:df:99:84:ae:a4:9b:
54:60:e0:10:6a:90:ec:13:17:58:85:cf:eb:03:47:
72:5b:38:07:07:bf:9b:f6:93:e4:8f:28:6d:3c:1f:
b5:b5:33:dd:3a:e5:5d:99:d1:b8:c2:e8:b5:ba:34:
c0:3b:9f:63:4d:49:ba:fa:9d:0c:73:b9:bd:f8:53:
38:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F7:84:DD:4E:3E:40:17:13:B7:B0:C0:04:9E:C1:CE:BD:35:23:07
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/r_eE3U4-QBcTt7DABJ7Bzr01Iwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.65.0/24
201.3.122.0/24
201.3.235.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a7:27:6e:19:2e:fb:81:1a:49:9b:6f:64:4b:32:29:56:30:
98:a2:19:fe:0a:f9:74:9d:f9:95:f7:2e:e8:f8:bd:2f:b8:1c:
a1:17:b9:5c:30:cf:1c:68:25:77:bb:1e:83:36:5d:4e:e2:bd:
8e:67:e0:d1:20:e2:3d:f2:06:ba:2d:7a:c2:12:ba:68:ca:11:
1e:94:0b:6b:af:3b:ae:2f:cb:16:20:5a:ca:8c:d5:d8:f9:b8:
69:ec:d9:00:60:b1:c6:e1:ce:74:8b:bd:f2:34:b1:b9:08:e6:
16:c5:97:61:84:a3:9c:03:9e:f2:77:ae:d6:ca:44:e2:7f:6f:
81:e9:b3:d4:46:da:67:51:5d:93:e0:45:67:79:9a:23:78:b4:
43:bf:14:85:55:36:22:34:a0:64:ab:7e:ce:05:77:9f:70:3a:
03:61:c0:58:c5:6a:07:f7:de:61:49:07:47:03:ae:64:df:90:
b0:a3:56:33:6f:58:dc:c3:c9:2b:48:ae:9b:09:01:f7:37:95:
48:b6:39:64:6c:4e:55:10:11:3a:c4:b3:ed:da:ac:5e:6b:75:
38:5b:15:61:10:a6:97:66:19:c6:3e:b4:c6:ea:31:c5:50:fa:
66:2e:18:b6:39:91:65:83:19:65:02:ca:33:4f:ed:f2:53:f5:
b9:19:e3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:20:23 2026 by rpki-client