Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/GNyqcVZdI6MWkOpq2JLgk8QiwMI.roa
File: GNyqcVZdI6MWkOpq2JLgk8QiwMI.roa (raw, json)
Hash identifier: yS7ak/k0JFfzo0DO+IVEWVDUWPOEWCPGF7j/uicViU0=
Subject key identifier: 18:DC:AA:71:56:5D:23:A3:16:90:EA:6A:D8:92:E0:93:C4:22:C0:C2
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019CAAC9A43250F8813F22249C6C00D393AC
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/GNyqcVZdI6MWkOpq2JLgk8QiwMI.roa
Signing time: Sun 01 Mar 2026 19:04:27 +0000
ROA not before: Sun 01 Mar 2026 19:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19c:1eac:7d76/128 maxlen: 128
2001:67c:64:ffff:0:19c:2f30:cc98/128 maxlen: 128
2001:67c:64:ffff:0:19c:4770:2527/128 maxlen: 128
2001:67c:64:ffff:0:19c:5298:96f7/128 maxlen: 128
2001:67c:64:ffff:0:19c:aac9:6ede/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 01 Mar 2026 19:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c9:a4:32:50:f8:81:3f:22:24:9c:6c:00:d3:93:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Mar 1 19:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18dcaa71565d23a31690ea6ad892e093c422c0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:4e:01:2a:9c:65:04:f1:d1:2f:c8:bd:b4:
7c:96:b4:7d:93:63:2f:12:8c:e2:12:95:10:50:a1:
d4:1e:bd:18:68:3b:f5:8b:be:c0:09:3e:72:77:fa:
53:aa:a8:47:32:80:da:8d:be:86:bf:91:56:7e:ad:
80:e0:01:c7:9c:ee:3c:42:7a:74:d1:00:f1:35:05:
4a:0b:26:4d:94:f3:50:eb:37:37:b8:d9:e6:15:f7:
d8:4a:ec:ff:ea:23:9e:3e:1f:a1:92:78:8b:a9:e7:
73:c0:2f:4b:55:38:3d:9b:6a:cb:ee:a8:69:11:7e:
4a:2c:66:09:e0:b7:48:2d:d9:06:06:9b:ac:9c:05:
8c:3b:ac:db:00:ea:c6:2c:20:53:37:2b:a2:f9:7b:
d9:20:b3:9a:9c:a3:d1:6a:10:bc:30:6e:18:db:95:
94:62:0e:3a:22:05:81:74:f6:01:c1:c9:fa:d5:66:
55:14:61:c9:f7:3d:31:cc:37:ce:78:1c:76:86:6e:
84:d5:8c:9e:68:2f:a3:29:b7:f2:05:8d:5d:88:9a:
fc:64:2f:15:0c:4c:80:df:18:07:01:49:8b:fb:ef:
36:ce:81:df:b1:01:cc:c0:08:d0:3e:c2:5c:63:39:
12:10:26:00:58:0b:f0:3a:31:28:03:a6:4c:4f:ba:
1a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DC:AA:71:56:5D:23:A3:16:90:EA:6A:D8:92:E0:93:C4:22:C0:C2
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/GNyqcVZdI6MWkOpq2JLgk8QiwMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19c:1eac:7d76/128
2001:67c:64:ffff:0:19c:2f30:cc98/128
2001:67c:64:ffff:0:19c:4770:2527/128
2001:67c:64:ffff:0:19c:5298:96f7/128
2001:67c:64:ffff:0:19c:aac9:6ede/128
Signature Algorithm: sha256WithRSAEncryption
41:d1:82:0a:d1:8b:5d:31:c6:23:86:98:d3:ee:ac:6a:cc:f7:
2a:a9:17:9a:cf:fd:89:14:a1:e4:f4:24:3f:ce:40:be:a9:a6:
41:0e:c8:9c:26:55:da:94:9f:ef:60:0c:be:5e:6e:58:41:6f:
3a:80:eb:cc:30:ed:d8:5d:35:ec:4e:fa:b2:f3:74:bd:19:e0:
32:1e:fc:69:69:c8:c6:27:9c:c8:a7:fd:24:49:80:5f:3f:17:
dc:ce:92:11:97:03:49:80:0e:94:e9:e9:d1:67:23:42:37:89:
c9:48:ea:04:cb:86:c6:d5:0e:c8:fc:cc:50:88:07:41:b9:25:
1d:0a:bf:0d:ac:98:84:ea:b1:29:75:b3:ec:4b:3d:56:4d:99:
ac:95:df:d5:0c:c8:da:e7:8f:43:5c:f8:b5:86:1b:6c:2f:10:
d6:71:fc:8c:0b:ea:9e:07:6f:96:12:d6:23:f2:a5:86:76:d5:
6a:be:dc:ed:d2:aa:88:5d:c7:ab:a5:e8:1a:35:83:9a:f2:42:
78:b6:86:61:c5:d8:f0:41:46:66:dc:5f:6d:d3:ae:97:e6:42:
7d:cc:d6:7e:f6:4c:d8:02:c4:75:c3:40:64:c6:6f:cf:25:e9:
48:7f:93:08:b1:0f:b5:bd:64:82:a7:98:56:9e:f2:d9:f0:9e:
9c:0d:89:5f
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAZyqyaQyUPiBPyIknGwA05OsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjYwMzAxMTkwNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGRjYWE3MTU2NWQyM2EzMTY5MGVhNmFkODkyZTA5M2M0MjJjMGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDFOASqcZQTx0S/IvbR8lrR9k2Mv
EoziEpUQUKHUHr0YaDv1i77ACT5yd/pTqqhHMoDajb6Gv5FWfq2A4AHHnO48Qnp0
0QDxNQVKCyZNlPNQ6zc3uNnmFffYSuz/6iOePh+hkniLqedzwC9LVTg9m2rL7qhp
EX5KLGYJ4LdILdkGBpusnAWMO6zbAOrGLCBTNyui+XvZILOanKPRahC8MG4Y25WU
Yg46IgWBdPYBwcn61WZVFGHJ9z0xzDfOeBx2hm6E1YyeaC+jKbfyBY1diJr8ZC8V
DEyA3xgHAUmL++82zoHfsQHMwAjQPsJcYzkSECYAWAvwOjEoA6ZMT7oaOwIDAQAB
o4ICYjCCAl4wHQYDVR0OBBYEFBjcqnFWXSOjFpDqatiS4JPEIsDCMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvR055cWNWWmRJNk1Xa09wcTJKTGdrOFFpd01JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBlBAIAAjBfAxEAIAEGfABk
//8AAAGcHqx9dgMRACABBnwAZP//AAABnC8wzJgDEQAgAQZ8AGT//wAAAZxHcCUn
AxEAIAEGfABk//8AAAGcUpiW9wMRACABBnwAZP//AAABnKrJbt4wDQYJKoZIhvcN
AQELBQADggEBAEHRggrRi10xxiOGmNPurGrM9yqpF5rP/YkUoeT0JD/OQL6ppkEO
yJwmVdqUn+9gDL5eblhBbzqA68ww7dhdNexO+rLzdL0Z4DIe/GlpyMYnnMin/SRJ
gF8/F9zOkhGXA0mADpTp6dFnI0I3iclI6gTLhsbVDsj8zFCIB0G5JR0Kvw2smITq
sSl1s+xLPVZNmayV39UMyNrnj0Nc+LWGG2wvENZx/IwL6p4Hb5YS1iPypYZ21Wq+
3O3Sqohdx6ul6Bo1g5ryQni2hmHF2PBBRmbcX23TrpfmQn3M1n72TNgCxHXDQGTG
b88l6Uh/kwixD7W9ZIKnmFae8tnwnpwNiV8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:24:06 2026 by rpki-client