Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/EGjmzY_ZtytBMBYlOdor2otemzo.roa
File: EGjmzY_ZtytBMBYlOdor2otemzo.roa (raw, json)
Hash identifier: E5ByJYtZqrEk/Sq54U/m0Wxe4GRjKVS3/78nurWaZiQ=
Subject key identifier: 10:68:E6:CD:8F:D9:B7:2B:41:30:16:25:39:DA:2B:DA:8B:5E:9B:3A
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01A1C5000BAB42738CFB25B1562786A9286E
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/EGjmzY_ZtytBMBYlOdor2otemzo.roa
Signing time: Tue 10 Nov 2026 10:27:56 +0000
ROA not before: Tue 10 Nov 2026 10:27:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 2a0a:79c0:1700:af0::/64 maxlen: 64
Validation: Failed, certificate revoked on Thu 12 Nov 2026 07:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:00:0b:ab:42:73:8c:fb:25:b1:56:27:86:a9:28:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Nov 10 10:27:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1068e6cd8fd9b72b4130162539da2bda8b5e9b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:3c:ae:ee:38:57:56:10:ff:55:37:4c:5d:
f3:34:73:53:02:43:5f:9a:09:70:51:d1:4c:5d:84:
36:2a:4b:a3:47:d6:48:5c:1c:95:76:c2:00:cf:b4:
cf:a9:60:aa:4b:e7:b1:1e:2d:10:93:d3:9a:26:34:
1f:48:e6:63:4e:98:8f:30:be:24:7e:48:ad:22:48:
ea:45:64:1a:1b:d7:d9:4e:8a:ed:e3:a4:72:6b:0f:
09:7d:10:ed:e1:30:db:b4:4f:14:6f:fc:63:9e:e7:
e8:11:ad:61:e9:e2:22:d6:7a:3d:43:f0:c7:64:8a:
7b:3f:87:dc:36:c9:44:49:b2:aa:a7:08:3b:60:d4:
0c:9d:66:f1:04:ae:c5:02:b7:f6:8d:0a:11:79:f3:
5c:b0:fb:f3:25:71:2c:22:b9:e9:56:f5:e2:5c:56:
05:56:32:7f:1d:49:85:06:36:40:3b:63:2e:ee:27:
e5:36:a1:b2:49:a4:2b:32:da:9e:6a:8f:0b:12:58:
16:4c:14:24:22:30:25:f8:ba:bd:1a:94:ba:e0:6e:
98:16:ce:7f:a1:7d:7c:e9:a3:06:1b:68:ca:7b:56:
e4:22:d1:bc:3b:97:7d:42:6a:26:71:74:03:f2:e4:
0f:bc:52:c2:41:fd:ac:f4:8b:e9:c0:34:19:c5:3b:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:68:E6:CD:8F:D9:B7:2B:41:30:16:25:39:DA:2B:DA:8B:5E:9B:3A
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/EGjmzY_ZtytBMBYlOdor2otemzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:1700:af0::/64
Signature Algorithm: sha256WithRSAEncryption
00:5c:27:a1:85:51:91:da:f4:6b:28:04:79:c5:db:0b:4d:ae:
85:d5:cb:46:08:c0:0b:4c:a9:aa:7a:23:ec:e4:d8:80:ac:b8:
75:b3:c9:be:8b:0d:54:db:57:a8:1f:0a:e7:5b:a2:13:b9:e5:
ca:d7:78:cf:a5:fe:22:44:22:bd:03:88:27:25:9d:d4:06:56:
99:06:2a:f9:1f:f3:35:94:00:d0:08:68:7c:fd:9b:b3:b1:d4:
bb:c9:90:94:06:d0:6f:f4:75:78:14:53:a1:5d:61:31:09:ad:
e7:e2:e4:7e:70:f2:f8:99:41:0a:4b:11:d4:35:78:e9:b7:81:
46:76:34:55:2a:b2:1b:09:00:84:3e:5c:d3:34:2e:31:f3:c7:
22:bf:1e:20:35:de:87:8e:da:d3:95:59:e4:01:37:29:f3:32:
bb:94:03:a1:03:50:a0:51:0d:33:f2:06:4d:69:29:fe:ac:e2:
6c:6f:83:95:76:6a:fd:08:1e:f5:1b:2c:56:a6:54:96:0c:a8:
a6:c1:9b:3a:d4:2b:f6:3d:52:2f:e7:69:27:6b:9b:57:2d:1f:
74:3d:c8:f8:12:60:ad:36:30:8f:21:55:8c:ed:e8:16:00:a9:
d6:02:fe:88:41:da:06:6b:32:a0:67:aa:73:00:2b:bc:56:a0:
f1:ff:98:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:14:05 2026 by rpki-client