Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/7LbBJDonGKJ0Wv_0SpAwoZSFS0w.roa
File: 7LbBJDonGKJ0Wv_0SpAwoZSFS0w.roa (raw, json)
Hash identifier: 1IWEEunfKVLARC96WYW1dTqztY8CMO9qq3yy/k8Fw9s=
Subject key identifier: EC:B6:C1:24:3A:27:18:A2:74:5A:FF:F4:4A:90:30:A1:94:85:4B:4C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019D27B271980BAB5A6BADBD0C733C485A68
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/7LbBJDonGKJ0Wv_0SpAwoZSFS0w.roa
Signing time: Thu 26 Mar 2026 01:11:38 +0000
ROA not before: Thu 26 Mar 2026 01:11:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19c:1eac:7d76/128 maxlen: 128
2001:67c:64:ffff:0:19c:2f30:cc98/128 maxlen: 128
2001:67c:64:ffff:0:19c:4770:2527/128 maxlen: 128
2001:67c:64:ffff:0:19c:5298:96f7/128 maxlen: 128
2001:67c:64:ffff:0:19d:aea:d31a/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 26 Mar 2026 02:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:b2:71:98:0b:ab:5a:6b:ad:bd:0c:73:3c:48:5a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Mar 26 01:11:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecb6c1243a2718a2745afff44a9030a194854b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:56:e0:9e:a2:c3:67:3e:d0:0f:c0:d0:6b:
79:ad:a8:83:61:d0:bd:7f:1c:73:0c:68:32:2d:b6:
13:b3:a0:88:5d:f6:a9:e6:8c:eb:2f:77:9c:44:a6:
8f:89:82:3b:89:82:7d:c6:bf:7a:04:ac:0a:c2:22:
c0:6a:63:c2:ee:1d:b6:9c:6d:88:4b:8f:f1:a4:2a:
54:dd:2a:d5:83:b6:a6:2c:ce:bf:ec:d3:76:dd:3b:
49:67:f1:0c:79:d9:34:a6:d1:24:99:b6:ae:75:d2:
45:dd:6f:9a:49:14:70:50:ea:9a:61:40:89:8a:65:
c4:08:16:d5:d3:86:98:c5:71:f0:bf:e7:a1:86:9b:
6c:03:3e:15:87:cf:4a:bc:84:8f:32:fd:c7:51:9b:
57:82:ac:f1:9b:dc:84:dc:db:26:5a:99:9b:93:36:
83:67:37:a8:32:2c:94:77:8d:ea:96:70:8b:78:fa:
51:9a:d8:86:9a:96:50:c2:0f:0c:8b:dd:d0:ba:44:
a0:da:e7:be:99:99:4c:75:7d:6e:a1:71:bf:7e:9a:
18:79:86:df:0e:3d:d9:b2:ee:11:9f:4f:86:2b:e2:
1e:99:e1:4d:e6:8f:0e:68:1f:b6:08:38:af:89:8d:
fe:19:1f:80:3b:47:0d:ec:17:03:17:9e:1a:c1:38:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B6:C1:24:3A:27:18:A2:74:5A:FF:F4:4A:90:30:A1:94:85:4B:4C
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/7LbBJDonGKJ0Wv_0SpAwoZSFS0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19c:1eac:7d76/128
2001:67c:64:ffff:0:19c:2f30:cc98/128
2001:67c:64:ffff:0:19c:4770:2527/128
2001:67c:64:ffff:0:19c:5298:96f7/128
2001:67c:64:ffff:0:19d:aea:d31a/128
Signature Algorithm: sha256WithRSAEncryption
2a:20:55:c4:e4:ce:8b:f7:8a:af:c7:ff:12:b0:00:f3:6a:3d:
1e:85:e1:b3:a3:1a:73:42:e0:91:49:db:86:a7:3c:55:93:65:
47:a1:14:14:9f:4e:79:4a:81:6f:9f:23:95:8d:5f:85:81:5c:
38:c6:27:27:e0:6f:6b:60:9e:48:6f:35:ee:2f:e6:db:a9:08:
c3:06:99:84:b3:19:55:96:ca:e4:4d:33:9e:8b:cc:0d:4b:e3:
1e:a5:71:41:be:50:f0:ef:0e:15:f9:26:a2:71:7f:39:c6:5c:
ed:5f:27:be:28:44:d3:2e:e0:98:2d:a2:3f:05:d2:c3:b7:a1:
0a:9a:55:21:56:bc:43:d0:d7:f6:65:90:a2:62:0d:d0:af:2a:
aa:cf:3b:0a:49:10:df:50:6e:0c:15:bd:36:bf:b3:86:19:11:
3e:2b:7c:e0:77:e3:7f:c6:ca:14:3c:29:f1:73:f2:f4:6e:71:
22:0a:24:37:d2:51:89:8e:cc:9d:01:f2:4b:54:ce:12:ef:5b:
2c:63:bb:42:48:f2:39:b7:d1:2c:84:86:69:34:ba:dd:57:69:
41:73:3a:f2:5b:ed:4b:d9:cd:76:fa:35:c5:ed:43:22:ec:8b:
d8:04:11:b6:53:9d:7a:a3:d1:99:e8:07:d0:36:d4:2f:f5:19:
d2:d2:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:39 2026 by rpki-client