Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7ctXuiY6GsYMW0at_CNZmtMbYj0.roa
File: 7ctXuiY6GsYMW0at_CNZmtMbYj0.roa (raw, json)
Hash identifier: BzqjH8ohQ4GQCDHKf2IQDVrWtSXp7l+TT8lF1ZoCMGQ=
Subject key identifier: ED:CB:57:BA:26:3A:1A:C6:0C:5B:46:AD:FC:23:59:9A:D3:1B:62:3D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019CFB097B2B8800CC42EE3C434C36ED9CC1
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7ctXuiY6GsYMW0at_CNZmtMbYj0.roa
Signing time: Tue 17 Mar 2026 09:03:48 +0000
ROA not before: Tue 17 Mar 2026 09:03:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 212.134.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Mar 2026 11:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:09:7b:2b:88:00:cc:42:ee:3c:43:4c:36:ed:9c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 17 09:03:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edcb57ba263a1ac60c5b46adfc23599ad31b623d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:57:eb:b1:de:5f:94:0c:fb:f3:64:6f:56:
e6:ea:5a:6b:fd:d2:b0:cc:f4:ff:dc:8e:02:d5:2b:
24:9d:08:ad:81:18:fc:db:d5:e6:ff:55:cc:a4:5f:
08:65:06:ed:cd:19:3b:54:07:c8:11:d7:c7:1c:94:
ab:c0:cf:bf:83:8c:a8:e2:46:44:9f:07:57:8e:83:
6e:fd:11:32:06:73:07:d9:a5:9c:23:f7:cf:97:17:
2c:bb:06:c4:b8:7f:93:1d:fd:72:61:cb:a3:6a:f0:
2f:df:29:c9:0f:24:bc:61:5c:5a:66:34:57:08:80:
98:6e:81:3e:50:97:65:0a:23:2c:ef:29:28:68:28:
1c:af:92:ee:e7:75:44:4a:65:c8:03:d7:64:04:09:
ae:c9:fe:ff:3b:1b:9b:86:6d:cc:d0:1d:2e:16:39:
fd:5b:6d:4a:bc:6a:ac:a2:97:6d:e6:59:cf:f6:7b:
9b:f6:ff:ce:b9:66:54:74:03:4e:ca:18:d5:60:18:
de:00:94:c8:e5:96:0e:01:8d:24:00:b2:87:da:d3:
97:9a:36:ff:f6:39:ea:59:56:62:a6:ed:d2:21:83:
bb:27:c5:e4:70:85:0b:c0:a1:7e:a8:b7:fe:09:04:
d1:22:49:f3:d5:27:0c:ec:2b:0b:b3:7f:42:09:1c:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CB:57:BA:26:3A:1A:C6:0C:5B:46:AD:FC:23:59:9A:D3:1B:62:3D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7ctXuiY6GsYMW0at_CNZmtMbYj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.128.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:78:6c:7b:6d:17:d1:1b:aa:ad:02:fd:db:00:e3:0a:ec:0c:
24:f7:c1:06:52:e7:e2:3d:8f:c7:8a:8b:ce:9c:f7:f7:9a:ce:
8f:f4:82:0f:5d:fa:84:84:9d:bc:64:5a:d3:01:d1:97:f8:b1:
d7:43:a2:ee:63:d2:a6:47:e2:be:ec:e9:3e:fd:cd:9a:ff:c2:
3a:c0:ce:83:79:94:e4:aa:65:a0:84:1e:b0:79:51:aa:a6:35:
1b:fa:86:58:d2:d9:a2:88:8a:60:70:13:8e:5d:e8:7e:af:e0:
c2:5b:af:17:5b:d6:69:f4:51:33:63:ba:34:18:96:05:9d:e5:
9c:13:d1:f4:b8:69:0d:f8:6e:81:4b:4e:2f:25:fe:d5:bb:d6:
51:9c:9f:99:e5:2e:e5:a1:7c:d7:7d:ea:2b:99:85:17:98:c1:
a6:ec:c5:3e:08:b3:db:8e:ea:a7:a2:62:2c:b5:1c:43:1f:0f:
88:59:f7:ec:ab:4b:e1:7c:92:d5:09:3a:d4:21:14:a2:92:14:
0f:99:e8:9c:2c:a3:a2:e7:15:4d:e8:b6:a8:d1:22:3c:2c:e0:
74:0b:a6:57:68:60:6e:83:81:12:37:c4:21:24:41:41:cc:29:
e0:41:28:17:40:60:be:17:42:7d:47:15:6c:6d:54:97:a3:26:
23:69:9f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:02 2026 by rpki-client