Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/8ML_YyN1VArAcOKwa_1Uk88NZOI.roa
File: 8ML_YyN1VArAcOKwa_1Uk88NZOI.roa (raw, json)
Hash identifier: f1FYd3RyC4gT+81QycYlx0X/9pGk0mfkcxbjEX06VMQ=
Subject key identifier: F0:C2:FF:63:23:75:54:0A:C0:70:E2:B0:6B:FD:54:93:CF:0D:64:E2
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A10B0D80471332ED5CF228B2E50B5363E2
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/8ML_YyN1VArAcOKwa_1Uk88NZOI.roa
Signing time: Mon 05 Oct 2026 07:53:16 +0000
ROA not before: Mon 05 Oct 2026 07:53:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 191.44.78.0/24 maxlen: 24
191.44.82.0/24 maxlen: 24
191.44.85.0/24 maxlen: 24
191.44.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Oct 2026 20:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:0d:80:47:13:32:ed:5c:f2:28:b2:e5:0b:53:63:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 5 07:53:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0c2ff632375540ac070e2b06bfd5493cf0d64e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:39:26:67:c1:b4:e3:5f:45:b7:3e:19:7c:
00:1f:33:1e:69:b8:a6:c0:16:ec:86:c6:5e:7e:59:
3d:1b:fe:de:f2:b2:28:5f:6b:c3:4f:48:73:0d:b6:
87:c8:67:23:78:14:3e:c3:3c:f0:e1:ff:58:ab:d7:
f1:c8:2b:25:9b:a1:12:13:b3:cb:6d:30:b2:62:e2:
31:19:90:76:a5:9d:da:9e:2c:1c:c1:e0:e3:41:16:
b0:e5:a8:8e:75:22:db:0e:bc:61:af:8e:3f:9b:88:
6d:9a:00:77:a8:64:fc:86:1d:08:b5:c3:f5:a8:30:
fe:cb:91:ac:c5:bc:6e:b6:03:da:c3:57:1e:41:53:
9a:25:9b:8a:b0:99:c6:6f:da:35:09:25:1b:6c:65:
7f:7a:33:2c:86:7a:df:32:90:9b:b0:a3:1d:4a:62:
32:46:1f:c9:3a:78:36:a0:91:fa:0d:c3:2d:44:5f:
29:6d:19:98:81:b5:bb:8b:85:a0:04:c1:69:50:15:
ae:89:8a:06:b7:95:d9:53:27:34:9c:53:6f:45:63:
dd:11:a3:f5:2e:aa:d3:f6:d3:ef:5e:4c:1c:64:1a:
74:44:ec:21:55:8e:a1:99:fd:dd:4c:67:3b:6c:2d:
85:4d:6c:f2:73:39:47:cf:18:96:14:54:7e:37:42:
12:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C2:FF:63:23:75:54:0A:C0:70:E2:B0:6B:FD:54:93:CF:0D:64:E2
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/8ML_YyN1VArAcOKwa_1Uk88NZOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.78.0/24
191.44.82.0/24
191.44.85.0/24
191.44.98.0/24
Signature Algorithm: sha256WithRSAEncryption
60:4c:8a:49:15:e1:a5:88:4b:ef:00:b9:6a:e4:c4:8a:31:97:
b4:93:c7:bc:51:be:c1:bf:7f:7d:67:a8:95:80:5c:44:03:84:
8a:a2:c9:6f:be:1a:38:f0:8c:93:28:6e:95:90:0f:4e:12:0c:
33:24:66:83:96:4b:84:4f:f1:d8:92:f6:8c:9a:2c:b3:12:13:
f8:c0:d5:54:9e:c4:e1:5d:64:29:5d:49:fa:7d:5a:6e:c0:97:
c5:18:b0:4b:0a:9c:90:2d:5b:19:ef:09:87:2f:2b:82:d0:33:
76:3e:2c:6e:65:c4:61:2f:59:95:94:89:01:05:53:0c:94:06:
0c:e8:03:31:1a:8f:c2:45:d6:13:cc:27:f3:da:bf:76:f5:69:
ac:79:a8:0a:54:b5:65:a7:8e:a8:88:ab:86:21:bb:df:71:91:
cd:87:97:c7:59:4e:51:b6:dd:44:a8:64:dc:49:81:93:51:67:
a5:fb:53:08:32:f7:4e:f0:77:8b:31:e5:be:7c:13:fc:1c:b4:
eb:0e:11:be:80:7e:98:25:10:8f:34:7c:cf:1b:8d:0a:75:6d:
1f:88:db:6c:44:d1:0f:70:2d:14:0a:20:e9:55:2a:ff:4a:ec:
a1:60:d3:03:be:2f:67:11:d2:b3:d8:cc:12:9a:f1:7e:7d:01:
5c:d1:2d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:38:59 2026 by rpki-client