Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/E377BWFU_iYqJQRaGStzTkAsIbc.roa
File: E377BWFU_iYqJQRaGStzTkAsIbc.roa (raw, json)
Hash identifier: tEW4n1/PakwVAb0h6uHid2prB9osIDP3X5FxFvVoVwA=
Subject key identifier: 13:7E:FB:05:61:54:FE:26:2A:25:04:5A:19:2B:73:4E:40:2C:21:B7
Certificate issuer: /CN=60ce22c7f650495eb5122010ed36f6d264bf47e6
Certificate serial: 01A07C4E96E598517EF4E2E3670A519EEC3E
Authority key identifier: 60:CE:22:C7:F6:50:49:5E:B5:12:20:10:ED:36:F6:D2:64:BF:47:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/E377BWFU_iYqJQRaGStzTkAsIbc.roa
Signing time: Mon 07 Sep 2026 14:38:40 +0000
ROA not before: Mon 07 Sep 2026 14:38:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a07:300::/48 maxlen: 48
2a07:300:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 24 Sep 2026 19:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:4e:96:e5:98:51:7e:f4:e2:e3:67:0a:51:9e:ec:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ce22c7f650495eb5122010ed36f6d264bf47e6
Validity
Not Before: Sep 7 14:38:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=137efb056154fe262a25045a192b734e402c21b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:06:4c:52:39:70:c9:5f:52:e3:9d:75:52:2c:
ac:02:f2:f3:55:23:39:30:28:62:51:de:44:6c:1d:
3f:ad:78:59:52:d9:3b:4f:3a:e7:6f:e6:5d:47:a3:
57:ca:2a:4c:73:28:81:35:1d:e7:d9:b1:ae:cb:f0:
7c:8b:be:73:a8:d8:22:2a:72:f5:36:e1:5f:d4:44:
68:31:a9:5a:df:2a:d2:2a:d7:5e:de:98:bc:91:eb:
15:73:29:e5:53:64:23:39:6b:3f:e4:fc:06:24:49:
57:7c:f9:b0:63:f2:dd:68:73:49:cd:be:f2:98:46:
6f:fc:34:84:ab:e0:d1:13:53:fc:df:b9:2b:51:b7:
8f:f0:9e:76:5f:c3:a1:4a:65:33:a9:80:41:66:fb:
54:60:c1:b6:dc:b9:14:28:d1:5b:99:13:09:03:72:
c2:73:83:9e:9d:4c:74:cb:f3:9b:f7:23:f2:13:d1:
8f:ae:de:f5:ab:aa:8a:29:8e:73:c5:1f:11:f9:5c:
f3:ca:d1:c4:ee:95:c4:74:cf:a8:ec:ef:c1:a8:33:
4f:3b:70:01:12:08:a8:f4:d3:19:19:5a:d1:13:37:
48:e8:6e:05:cb:80:12:13:19:90:c4:ea:50:0e:fb:
96:d1:3f:d2:14:02:13:8b:91:74:bd:9b:d3:8e:f0:
c3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7E:FB:05:61:54:FE:26:2A:25:04:5A:19:2B:73:4E:40:2C:21:B7
X509v3 Authority Key Identifier:
keyid:60:CE:22:C7:F6:50:49:5E:B5:12:20:10:ED:36:F6:D2:64:BF:47:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/E377BWFU_iYqJQRaGStzTkAsIbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:300::/48
2a07:300:10::/48
Signature Algorithm: sha256WithRSAEncryption
9c:a9:15:51:4b:70:fb:60:d8:b2:00:12:d0:13:9a:9b:73:57:
9c:ba:41:e2:3d:cc:5b:80:f9:3a:e4:f6:50:77:77:47:d6:11:
42:b4:41:03:d1:45:c7:b8:b2:40:ac:e9:5a:09:9f:bf:89:34:
4a:c6:b8:be:45:60:e7:69:b3:77:9f:81:46:51:fe:01:99:a5:
8c:da:6b:61:b0:18:43:b7:45:9f:81:75:ac:f6:7e:6d:29:97:
b3:94:d5:7f:f3:dd:7d:13:51:4f:a7:84:73:6c:cd:18:d1:cc:
91:0d:a7:2b:2b:7c:03:4a:99:28:d1:5d:23:d5:06:d3:4b:f4:
fb:8d:82:5a:e7:f8:dd:c1:3c:b8:a3:dc:01:da:4e:29:16:a0:
47:bd:2f:4f:7c:e2:08:0d:56:ae:58:39:8d:29:2b:56:33:10:
51:1d:24:df:bc:a6:9c:f0:37:f9:93:73:1e:36:2a:8b:22:99:
47:70:17:0e:7f:eb:68:63:49:91:c5:bd:d6:50:2d:41:ca:e9:
bf:4a:6d:a8:2e:7d:56:3f:c8:49:b6:94:f6:e8:5d:25:9f:a5:
d5:3a:e0:c5:97:f2:75:28:5d:ea:60:7f:61:c0:f5:ad:75:cc:
df:55:3f:73:af:16:de:c5:e3:2e:82:61:05:60:e8:4d:d1:6d:
b3:fe:d3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:19:25 2026 by rpki-client