Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/FAdIuCIAQ77mwJ0aAkloafvA59Y.roa
File: FAdIuCIAQ77mwJ0aAkloafvA59Y.roa (raw, json)
Hash identifier: 0x7xsxidnc5cMZ15mBxYSr17ENZIOfMWWLYwED9dY6k=
Subject key identifier: 14:07:48:B8:22:00:43:BE:E6:C0:9D:1A:02:49:68:69:FB:C0:E7:D6
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019D27073CA9A91C1B6A39DEE490A2D04C86
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/FAdIuCIAQ77mwJ0aAkloafvA59Y.roa
Signing time: Wed 25 Mar 2026 22:04:38 +0000
ROA not before: Wed 25 Mar 2026 22:04:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19c:1eac:7d76/128 maxlen: 128
2001:67c:64:ffff:0:19c:2f30:cc98/128 maxlen: 128
2001:67c:64:ffff:0:19c:4770:2527/128 maxlen: 128
2001:67c:64:ffff:0:19c:5298:96f7/128 maxlen: 128
2001:67c:64:ffff:0:19d:aea:d31a/128 maxlen: 128
2001:67c:64:ffff:0:19d:2706:e830/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 25 Mar 2026 22:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:07:3c:a9:a9:1c:1b:6a:39:de:e4:90:a2:d0:4c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Mar 25 22:04:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=140748b8220043bee6c09d1a02496869fbc0e7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:95:83:bc:8c:eb:25:b3:21:46:de:76:b7:
5a:2f:1d:32:0b:be:07:50:b3:df:83:d0:17:b2:36:
56:ff:b8:02:e1:64:0e:38:81:25:09:0f:38:93:80:
68:a9:7e:1a:7f:0d:04:6f:77:23:64:b3:ca:8c:fb:
cd:b3:da:25:ef:7e:0f:e3:65:e0:63:e3:2c:9f:2a:
6d:69:5e:04:24:cb:26:38:fe:c9:84:91:d4:e7:32:
3f:46:4d:b7:4e:93:64:26:39:4e:dc:61:76:9f:b7:
ae:3a:49:11:7d:8b:eb:d9:4f:34:b1:e1:4e:16:38:
30:03:ec:65:5b:90:2e:41:c3:95:d2:0a:f3:a4:61:
76:d1:f8:cf:19:ed:53:ab:1b:5f:1d:6b:d9:70:f6:
c1:75:ad:56:84:ea:a4:bd:63:a6:13:be:30:79:cf:
dd:b7:c7:ca:b8:b8:8c:71:65:ac:bd:47:66:e5:9e:
35:bc:14:3d:8a:4d:02:92:ef:be:82:df:11:6a:78:
7e:31:68:29:2f:0a:77:81:35:d0:5f:fc:e7:da:2a:
a9:7e:82:4b:85:5e:56:18:56:9a:50:8d:a0:9b:02:
cc:ed:10:75:45:5b:e1:c2:a6:ff:e8:4e:22:ab:85:
a5:b7:73:ad:8e:33:9e:cc:48:00:81:80:ef:b6:c8:
10:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:07:48:B8:22:00:43:BE:E6:C0:9D:1A:02:49:68:69:FB:C0:E7:D6
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/FAdIuCIAQ77mwJ0aAkloafvA59Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19c:1eac:7d76/128
2001:67c:64:ffff:0:19c:2f30:cc98/128
2001:67c:64:ffff:0:19c:4770:2527/128
2001:67c:64:ffff:0:19c:5298:96f7/128
2001:67c:64:ffff:0:19d:aea:d31a/128
2001:67c:64:ffff:0:19d:2706:e830/128
Signature Algorithm: sha256WithRSAEncryption
55:72:5b:f1:70:26:0a:c4:b9:a3:b7:60:5a:3f:ac:21:c7:8b:
25:70:9e:b4:24:2c:41:73:b4:a3:ee:72:3e:ec:65:00:82:5d:
cd:21:55:93:2b:53:7b:4d:5f:7a:50:1d:a5:11:2c:eb:66:56:
95:48:0b:9d:b9:d2:5d:6a:78:51:e6:55:30:09:91:b3:89:6f:
84:dd:51:04:6e:1f:e5:77:69:4b:3c:77:d0:56:24:d6:60:6d:
1c:6d:9d:44:1d:20:49:b3:2c:6a:21:57:55:fd:4f:97:37:d1:
69:c8:77:e6:a6:8a:b2:85:7a:0e:3b:9e:92:40:a3:6f:d4:fe:
83:a5:5a:b0:2a:bf:29:18:f4:af:e5:c5:91:d5:23:0d:9a:12:
8a:ab:70:1a:c1:30:93:34:c4:1a:c8:c7:af:5d:cc:d0:a5:7c:
2a:85:5b:b0:f5:bc:cf:0d:75:ed:4c:49:a1:4b:f0:b2:26:31:
82:f5:a1:27:95:06:ca:15:05:0a:40:da:4b:13:77:51:fa:be:
3a:de:26:f3:98:fa:7a:20:58:57:34:4b:75:3b:53:d1:07:34:
8e:3f:7c:b2:47:b6:c6:0a:f3:7d:bf:e5:05:f8:02:4e:73:12:
0e:d9:12:9e:df:8e:4d:b5:09:96:ae:8d:84:e3:2c:ce:de:b5:
c4:92:b3:f5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:29 2026 by rpki-client