Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/nmOWc3Xzbfot5ueUB1Z73tFchjo.roa
File: nmOWc3Xzbfot5ueUB1Z73tFchjo.roa (raw, json)
Hash identifier: tKhOeKQfXhLNU2bjxEUl+MHai3A+iJySYTHLpNv2NjI=
Subject key identifier: 9E:63:96:73:75:F3:6D:FA:2D:E6:E7:94:07:56:7B:DE:D1:5C:86:3A
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0BE3BD4FB6E96C89CAA0E61EC50525A5F
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/nmOWc3Xzbfot5ueUB1Z73tFchjo.roa
Signing time: Sun 20 Sep 2026 09:53:07 +0000
ROA not before: Sun 20 Sep 2026 09:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 191.44.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 09:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:3b:d4:fb:6e:96:c8:9c:aa:0e:61:ec:50:52:5a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 20 09:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e63967375f36dfa2de6e79407567bded15c863a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:0f:a2:02:4b:ae:f6:82:c1:9b:ee:67:01:
6c:48:3c:1c:78:c1:43:82:2e:4e:2f:35:e6:5d:6b:
75:ce:cd:52:29:2e:26:ff:8b:4b:17:f3:9c:12:06:
41:f3:0b:52:90:97:c6:1d:2b:01:2d:b1:13:f3:d1:
95:17:81:e4:22:5a:48:24:30:4a:27:9f:dd:9f:85:
3d:00:7d:d4:da:48:fc:ba:e3:22:a8:b9:26:56:d2:
f2:c0:3a:0a:c3:35:76:2e:6e:b2:87:d3:02:09:3b:
81:28:69:fa:26:99:a5:36:f4:80:2b:03:57:dc:6a:
2e:e2:1f:e1:b0:59:84:10:1a:93:e0:1b:9d:fa:62:
33:e5:7a:02:5c:fd:15:da:ba:79:45:ed:c3:56:a4:
71:70:67:e0:f7:b9:0f:b8:1e:cd:5f:25:54:6c:99:
45:2e:3a:ab:8f:4f:25:7f:26:6d:17:19:5e:62:64:
72:ba:41:95:fb:93:12:8d:cb:8c:5e:c3:0a:8d:10:
71:4f:22:b3:5a:7a:3c:b5:d3:9f:6d:09:ce:89:8e:
83:a2:17:03:f6:31:0b:e1:45:84:7e:b5:5f:ab:f9:
8a:75:32:0d:83:16:a1:71:20:2a:85:f0:70:fc:22:
cc:c1:bb:28:1f:6a:2f:6d:f5:17:1f:67:3e:5b:aa:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:63:96:73:75:F3:6D:FA:2D:E6:E7:94:07:56:7B:DE:D1:5C:86:3A
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/nmOWc3Xzbfot5ueUB1Z73tFchjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.65.0/24
Signature Algorithm: sha256WithRSAEncryption
56:34:9b:88:86:bc:3f:0c:6b:9c:ad:be:a4:97:b9:8a:fb:4e:
29:91:09:cc:48:37:fa:14:63:ad:60:f2:23:79:ce:01:36:e9:
bb:33:4d:6c:71:04:ae:cf:a6:21:ff:a9:52:78:2d:39:a5:3c:
c5:24:ab:6b:bf:c8:59:85:d7:40:0e:6a:4b:95:c0:11:3e:69:
9f:ea:22:fc:80:95:c6:c2:0a:61:e7:46:a4:79:f8:f4:4e:c4:
ad:69:35:91:49:bf:f7:82:27:a0:eb:be:e9:47:36:90:5e:35:
3d:8f:24:19:75:2a:31:d3:d4:e2:24:95:5d:e0:c5:3c:3d:7a:
8b:65:fe:fc:70:cf:49:91:08:c1:25:d3:61:35:06:f3:15:a4:
0c:61:fd:b5:a9:0a:bb:ee:b0:02:62:5e:cf:53:58:0c:20:38:
bf:ce:a0:d1:02:4e:65:81:d9:60:78:a4:29:9b:39:93:04:5f:
23:c2:48:6a:ee:6a:52:eb:0c:74:30:bf:2d:88:97:97:f2:b0:
b0:26:5f:df:6e:3b:a3:5e:27:3d:99:f5:27:9b:ed:00:89:65:
01:b3:be:a3:52:1b:75:c2:c1:ef:2a:83:f3:d7:db:79:7b:cb:
32:9c:5e:0c:e6:56:91:da:63:58:63:d5:b8:f0:58:0a:7e:bc:
5c:a6:5e:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC+O9T7bpbInKoOYexQUlpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwOTIwMDk1MzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTYzOTY3Mzc1ZjM2ZGZhMmRlNmU3OTQwNzU2N2JkZWQxNWM4NjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcQPogJLrvaCwZvuZwFsSDwceMFD
gi5OLzXmXWt1zs1SKS4m/4tLF/OcEgZB8wtSkJfGHSsBLbET89GVF4HkIlpIJDBK
J5/dn4U9AH3U2kj8uuMiqLkmVtLywDoKwzV2Lm6yh9MCCTuBKGn6JpmlNvSAKwNX
3Gou4h/hsFmEEBqT4Bud+mIz5XoCXP0V2rp5Re3DVqRxcGfg97kPuB7NXyVUbJlF
Ljqrj08lfyZtFxleYmRyukGV+5MSjcuMXsMKjRBxTyKzWno8tdOfbQnOiY6DohcD
9jEL4UWEfrVfq/mKdTINgxahcSAqhfBw/CLMwbsoH2ovbfUXH2c+W6rK/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ5jlnN18236LebnlAdWe97RXIY6MB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvbm1PV2MzWHpiZm90NXVlVUIxWjczdEZjaGpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyxBMA0G
CSqGSIb3DQEBCwUAA4IBAQBWNJuIhrw/DGucrb6kl7mK+04pkQnMSDf6FGOtYPIj
ec4BNum7M01scQSuz6Yh/6lSeC05pTzFJKtrv8hZhddADmpLlcARPmmf6iL8gJXG
wgph50akefj0TsStaTWRSb/3gieg677pRzaQXjU9jyQZdSox09TiJJVd4MU8PXqL
Zf78cM9JkQjBJdNhNQbzFaQMYf21qQq77rACYl7PU1gMIDi/zqDRAk5lgdlgeKQp
mzmTBF8jwkhq7mpS6wx0ML8tiJeX8rCwJl/fbjujXic9mfUnm+0AiWUBs76jUht1
wsHvKoPz19t5e8synF4M5laR2mNYY9W48FgKfrxcpl5W
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:21:50 2026 by rpki-client