Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/R1P8e6O4LZ4CH8IZV3ShaXCpW-Y.roa
File: R1P8e6O4LZ4CH8IZV3ShaXCpW-Y.roa (raw, json)
Hash identifier: m6kKh5H6S/5fmrMROPKaEmT/nU0ot/OQReI9dUcBaws=
Subject key identifier: 47:53:FC:7B:A3:B8:2D:9E:02:1F:C2:19:57:74:A1:69:70:A9:5B:E6
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019CAA6402DA78067214C6D8E90737215D3B
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/R1P8e6O4LZ4CH8IZV3ShaXCpW-Y.roa
Signing time: Sun 01 Mar 2026 17:13:26 +0000
ROA not before: Sun 01 Mar 2026 17:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:19c:1eac:7d76/128 maxlen: 128
2001:67c:64:ffff:0:19c:2f30:cc98/128 maxlen: 128
2001:67c:64:ffff:0:19c:4770:2527/128 maxlen: 128
2001:67c:64:ffff:0:19c:5298:96f7/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 01 Mar 2026 18:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:64:02:da:78:06:72:14:c6:d8:e9:07:37:21:5d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Mar 1 17:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4753fc7ba3b82d9e021fc2195774a16970a95be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:d3:ad:82:cc:9d:66:08:ea:3e:10:09:a4:
a8:5a:10:54:93:a5:6f:28:2f:99:46:73:32:52:53:
59:a0:10:22:b4:8c:7e:02:97:c6:8b:e1:6d:d7:c5:
6f:25:c3:02:29:2b:16:b9:12:a6:41:dc:10:cf:44:
22:97:4b:5f:f1:80:68:f7:ac:a9:16:6b:4f:5e:b1:
fe:3d:fd:16:c1:8e:ee:aa:07:e5:d7:0a:d7:31:52:
0d:4f:e0:a9:2d:3d:9f:69:b1:80:9a:4d:10:33:65:
ee:ba:84:dc:fb:de:c3:fe:24:78:cd:2c:b5:f2:2c:
6c:16:e6:db:de:cb:00:2c:df:7e:69:de:b8:30:b1:
3a:21:71:fb:98:7e:9a:0c:de:17:8e:c7:db:0e:93:
3d:bd:02:4d:ba:97:64:6a:15:f5:90:ed:24:b5:e5:
72:8d:16:4e:4c:8c:04:b0:89:75:fb:c0:77:39:c9:
06:96:84:9a:a3:ae:a6:89:f2:b3:03:d8:97:12:94:
22:7f:6f:5f:07:60:a2:cf:5c:82:db:f1:f3:6f:5a:
6d:c3:0e:11:8c:de:aa:17:49:88:cf:7e:40:f0:1e:
4e:2d:01:07:57:13:22:b5:3c:e4:f6:9c:93:86:21:
0f:54:da:80:c2:52:e0:2b:f3:c8:c0:6a:9c:6c:e2:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:53:FC:7B:A3:B8:2D:9E:02:1F:C2:19:57:74:A1:69:70:A9:5B:E6
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/R1P8e6O4LZ4CH8IZV3ShaXCpW-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:19c:1eac:7d76/128
2001:67c:64:ffff:0:19c:2f30:cc98/128
2001:67c:64:ffff:0:19c:4770:2527/128
2001:67c:64:ffff:0:19c:5298:96f7/128
Signature Algorithm: sha256WithRSAEncryption
3e:c4:cf:2f:bf:1a:e2:7a:63:08:d5:0a:15:79:55:fa:d9:91:
3a:fe:fb:ee:ce:67:8e:13:5e:67:04:92:2d:f4:5a:ab:11:9e:
86:52:32:b1:5d:ce:be:2a:34:ee:e9:60:ba:c8:da:92:98:61:
a5:db:dc:8f:e2:7e:7f:60:b6:a8:2a:04:1c:c1:7b:bc:a8:6f:
82:43:6c:57:ea:94:f0:9f:8e:02:6d:c1:38:72:10:ef:39:80:
6b:73:6f:12:7f:f5:83:7a:81:d7:03:3c:ec:f6:06:c3:d4:0e:
87:68:8c:e5:6a:b4:cd:98:00:64:45:b6:cb:98:66:89:e6:e1:
aa:65:ef:60:48:dc:a7:bc:79:77:65:7b:31:0e:b7:3a:e4:ba:
88:83:06:26:85:c3:f4:9a:1a:f7:50:1b:d4:92:39:2e:e9:a3:
14:d3:e6:79:bb:53:b5:b9:60:69:25:26:e9:a6:2c:34:0e:34:
5d:14:43:eb:d2:f1:d0:1f:8f:5c:7f:d2:c9:0e:d3:e6:87:95:
b3:fd:91:8c:27:ac:f1:b9:27:0c:74:d4:2d:4d:14:03:97:50:
54:27:63:50:27:fe:56:a0:f9:48:73:8e:6c:60:5c:04:d5:88:
a0:84:9e:cb:c6:31:45:0a:6e:e8:31:50:7a:49:8a:32:ac:18:
d1:2f:7d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:52 2026 by rpki-client