Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/xyp_Iby9mLCKedhH7XaeH3bzkYs.roa
File: xyp_Iby9mLCKedhH7XaeH3bzkYs.roa (raw, json)
Hash identifier: T+6HgZ5DwtKzv0B7z7HcafNxxzq11J0GKjbUEYKplNY=
Subject key identifier: C7:2A:7F:21:BC:BD:98:B0:8A:79:D8:47:ED:76:9E:1F:76:F3:91:8B
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019D274668EB6A75494C41808BE159B60EE6
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/xyp_Iby9mLCKedhH7XaeH3bzkYs.roa
Signing time: Wed 25 Mar 2026 23:13:38 +0000
ROA not before: Wed 25 Mar 2026 23:13:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19c:1eac:7d76/128 maxlen: 128
2001:67c:64:ffff:0:19c:2f30:cc98/128 maxlen: 128
2001:67c:64:ffff:0:19c:4770:2527/128 maxlen: 128
2001:67c:64:ffff:0:19c:5298:96f7/128 maxlen: 128
2001:67c:64:ffff:0:19d:aea:d31a/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 26 Mar 2026 00:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:46:68:eb:6a:75:49:4c:41:80:8b:e1:59:b6:0e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Mar 25 23:13:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c72a7f21bcbd98b08a79d847ed769e1f76f3918b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:85:7f:b6:b6:d5:ad:76:a2:06:ca:b4:f1:
4c:1a:63:32:81:01:ba:4e:a2:2b:8a:b4:33:28:3a:
d8:3c:6e:3f:23:ae:42:c9:80:e8:d6:a0:15:6c:e1:
c2:d9:45:1e:3e:ee:21:98:92:61:46:e3:09:7e:27:
e5:94:c1:b0:9d:7c:75:fc:de:49:47:f9:51:9f:9e:
eb:41:89:d4:89:64:38:60:ed:28:f4:3e:ed:8f:ee:
7c:1f:7d:2d:28:e2:5e:18:f3:9c:0d:ce:91:bf:5a:
5a:e2:b9:d1:3c:a3:be:6d:2c:e8:4a:ba:b4:4b:81:
b5:53:d8:ec:a4:94:6d:e4:03:8c:16:0d:5d:22:7a:
00:da:88:78:57:fe:36:dc:0e:d4:f5:1b:8b:fe:94:
b8:a4:b2:f9:20:cc:95:6b:c4:a9:fb:11:01:4a:28:
ea:ba:ec:22:8b:cd:da:8f:7d:46:cf:d2:f8:d9:d7:
61:72:22:7c:12:ca:28:45:98:59:22:af:78:b5:87:
f4:50:9c:63:73:b5:3e:28:f3:c5:4d:52:92:fe:20:
39:e2:ea:83:71:56:cf:14:95:b7:83:0e:72:39:c5:
5e:b4:ee:4c:35:25:17:16:c8:cc:47:76:af:e4:50:
33:7e:0f:b1:ea:48:1a:7b:90:89:e8:16:be:59:40:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2A:7F:21:BC:BD:98:B0:8A:79:D8:47:ED:76:9E:1F:76:F3:91:8B
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/xyp_Iby9mLCKedhH7XaeH3bzkYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19c:1eac:7d76/128
2001:67c:64:ffff:0:19c:2f30:cc98/128
2001:67c:64:ffff:0:19c:4770:2527/128
2001:67c:64:ffff:0:19c:5298:96f7/128
2001:67c:64:ffff:0:19d:aea:d31a/128
Signature Algorithm: sha256WithRSAEncryption
1c:9d:a6:01:73:af:62:96:d5:f2:7c:9e:19:9a:1d:5d:61:ad:
6e:c8:05:71:09:ff:9a:73:6a:0e:8b:4b:6c:ac:dd:63:b5:4d:
a8:eb:bd:a7:18:61:9d:88:1e:94:f9:7d:ae:b4:4a:8f:1c:d1:
21:74:ef:04:81:11:0e:c6:16:c0:5a:03:0b:6a:a4:15:d8:b7:
3c:1f:eb:4f:37:2d:28:52:05:12:ec:8c:b8:ae:a4:2a:40:83:
22:42:84:6c:47:77:44:32:94:7a:88:c9:47:7a:bc:a5:91:c9:
61:e4:3a:3c:63:45:8b:fa:11:80:da:bd:59:c0:4c:4d:63:45:
7c:e3:9d:b2:9b:34:95:18:d1:c2:1d:b6:7c:cc:6c:f9:c5:32:
7e:0a:34:91:dc:59:0e:6b:17:62:1e:e3:f8:8d:01:5e:ed:60:
94:9d:55:49:0a:e1:6a:ca:c6:3e:d9:da:b5:73:42:a1:fe:6e:
42:3a:c3:af:86:89:33:ee:66:2c:a1:5b:2b:21:7c:a3:b5:52:
f2:01:cb:78:2b:57:ec:f5:ba:57:b0:b7:3f:5b:33:c0:45:cf:
f9:9c:00:d2:d3:de:60:da:79:49:47:8e:b4:4e:8c:ff:c4:92:
ee:9d:f9:5a:2c:48:7b:d3:a5:fc:69:50:49:b3:1c:09:2d:39:
c3:03:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:12 2026 by rpki-client