Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/DEHjQguov6V3xo1vjkPuG4Slwbw.roa
File: DEHjQguov6V3xo1vjkPuG4Slwbw.roa (raw, json)
Hash identifier: n8RVGQFwQ8rbvGI8eAsu00K0MR6xybx572vKk6yabrk=
Subject key identifier: 0C:41:E3:42:0B:A8:BF:A5:77:C6:8D:6F:8E:43:EE:1B:84:A5:C1:BC
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019B77C714578BBBEF1EC2E5598F18352449
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/DEHjQguov6V3xo1vjkPuG4Slwbw.roa
Signing time: Thu 01 Jan 2026 04:18:14 +0000
ROA not before: Thu 01 Jan 2026 04:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51454
IP address blocks: 2a01:190:15f::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 02 Jan 2026 09:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:14:57:8b:bb:ef:1e:c2:e5:59:8f:18:35:24:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 04:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c41e3420ba8bfa577c68d6f8e43ee1b84a5c1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:44:4e:8e:3f:7d:c7:8a:43:8c:8b:3f:98:29:
53:3b:2a:f6:dc:87:ce:9d:65:8c:66:55:81:7d:f1:
dc:cd:4e:6e:45:7c:7a:a9:bb:34:bf:50:3a:3d:06:
7a:23:78:cb:e7:c0:1a:b1:00:58:bb:f9:39:fe:e6:
22:d2:a7:7b:82:bf:85:c4:fc:19:5a:48:89:2d:87:
ff:e2:dc:63:67:df:72:fa:58:42:73:b0:2a:2a:a4:
58:45:c5:36:90:10:85:50:4e:2d:bb:50:23:d0:0a:
ec:63:0d:ac:0b:68:26:81:c8:95:a9:38:16:2b:92:
09:76:81:79:0e:09:ba:56:05:48:0d:6b:48:94:f6:
96:84:62:e9:89:36:2d:e2:f0:07:d6:1c:7a:d7:34:
e4:c9:d2:05:60:fd:6a:95:b7:d4:04:2c:98:f6:d0:
03:09:6e:4f:09:0f:f8:91:ba:15:08:d1:13:3f:ea:
11:46:47:fa:97:d8:c8:d1:07:da:7e:63:37:1f:34:
c3:f0:68:86:d2:91:4a:e3:c6:70:0d:b5:77:87:e6:
f1:52:e7:04:e7:fa:ad:7e:17:42:59:2b:6d:fe:c2:
9f:30:35:6c:52:79:0f:fc:17:d9:ee:a5:8b:60:6e:
a5:c4:6d:b1:46:c8:c1:5a:53:72:a3:27:95:02:37:
e5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:41:E3:42:0B:A8:BF:A5:77:C6:8D:6F:8E:43:EE:1B:84:A5:C1:BC
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/DEHjQguov6V3xo1vjkPuG4Slwbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:15f::/48
Signature Algorithm: sha256WithRSAEncryption
44:46:b1:47:64:d0:20:14:1f:96:c2:9a:ef:49:f1:c9:5e:01:
e7:77:ee:ae:9f:56:43:10:1c:ab:41:4f:31:7b:f4:a5:58:64:
f1:45:cd:d4:4e:3d:0d:bf:e0:77:a7:17:5b:57:a2:b4:8b:ba:
2c:32:59:44:5b:d6:d0:5a:49:e8:20:d2:e4:42:76:fb:3e:d3:
ef:cd:2c:e1:88:f8:1d:c9:14:2d:27:a7:35:76:a0:a5:d0:47:
00:71:bb:13:e2:9a:f4:d9:60:b9:41:df:5a:4c:55:ff:93:78:
5a:0b:09:36:62:6e:78:0d:2a:9b:70:20:d3:59:ab:ef:fd:f2:
c9:45:d3:73:f9:ad:2b:0e:f5:bc:9f:4a:1b:d0:96:1c:a0:05:
21:92:9a:02:7b:7c:f2:15:fa:09:0d:6a:7a:99:81:d2:b4:cb:
c2:f2:98:fa:63:ef:94:03:23:b3:1e:ed:4d:4b:bf:39:45:8e:
24:3b:2d:8b:b7:62:af:f5:9c:3a:68:95:5e:de:8d:46:46:da:
00:60:53:0e:e3:a1:88:ec:aa:cb:7f:80:25:e1:2a:7c:b9:78:
e2:c5:8f:30:bf:b4:65:83:dc:05:70:c6:e9:b7:59:ec:5b:40:
81:34:77:9b:3b:bf:41:45:72:1c:c5:6a:85:2c:30:bc:9e:f0:
f3:8e:87:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:14:02 2026 by rpki-client