Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ER9u079kecjRpi1qPflLxyOACN4.roa
File: ER9u079kecjRpi1qPflLxyOACN4.roa (raw, json)
Hash identifier: IBtCgQh3sfvyRkQOEkiwiN9YFIXBFpPTstNfTR6vvlQ=
Subject key identifier: 11:1F:6E:D3:BF:64:79:C8:D1:A6:2D:6A:3D:F9:4B:C7:23:80:08:DE
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E1C0E9226217BA2FE438D85B79ABB821C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ER9u079kecjRpi1qPflLxyOACN4.roa
Signing time: Tue 12 May 2026 11:59:37 +0000
ROA not before: Tue 12 May 2026 11:59:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 212.134.25.0/24 maxlen: 24
212.134.48.0/24 maxlen: 24
212.134.56.0/24 maxlen: 24
212.134.154.0/24 maxlen: 24
212.134.189.0/24 maxlen: 24
212.134.206.0/24 maxlen: 24
212.134.231.0/24 maxlen: 24
212.135.148.0/24 maxlen: 24
212.135.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 02:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0e:92:26:21:7b:a2:fe:43:8d:85:b7:9a:bb:82:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 12 11:59:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=111f6ed3bf6479c8d1a62d6a3df94bc7238008de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:b7:fe:02:7a:38:84:f8:bf:ac:82:38:4e:
6d:12:09:ab:6b:20:99:72:92:77:0a:a3:c1:c4:69:
e3:f4:1a:49:4e:3d:bd:10:9d:01:46:a8:ea:cb:4d:
78:c0:c2:c3:19:ee:ac:e3:74:a3:9f:aa:3d:c9:33:
c0:6e:bf:7f:af:29:86:1f:d8:6d:a2:a7:2f:62:8e:
76:5f:10:7f:47:1b:85:81:3c:5e:fc:50:26:b9:da:
06:14:e7:11:fc:65:ab:2d:c3:b1:4a:67:a0:e0:b3:
40:70:b9:a0:8b:8a:a9:0f:f3:7c:58:de:eb:62:ed:
61:6c:8b:f1:c1:00:99:9f:de:44:a6:c3:da:04:41:
21:b7:60:9d:3a:ee:42:0a:31:c9:ae:74:a0:39:1c:
79:92:c2:84:0c:11:e6:15:36:7b:0c:ee:02:1f:bb:
ca:2a:8a:fa:4c:a8:70:e6:87:e8:31:97:02:aa:a8:
da:75:c9:a6:dd:82:6d:cf:43:b4:ab:66:2d:a8:e3:
83:fd:e3:52:a0:28:00:b7:95:e5:61:e0:7c:96:db:
fd:83:63:7e:ba:5d:9c:bc:37:47:c2:7f:78:d1:1a:
eb:21:0c:0f:6e:ea:6c:0f:5c:03:43:09:11:bc:4a:
c3:5b:4e:71:17:53:b2:26:7d:2e:9e:88:3d:c8:df:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1F:6E:D3:BF:64:79:C8:D1:A6:2D:6A:3D:F9:4B:C7:23:80:08:DE
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ER9u079kecjRpi1qPflLxyOACN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.25.0/24
212.134.48.0/24
212.134.56.0/24
212.134.154.0/24
212.134.189.0/24
212.134.206.0/24
212.134.231.0/24
212.135.148.0/24
212.135.152.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8e:bd:c5:df:78:1c:51:21:2a:51:c0:81:1e:8a:fd:96:6f:
95:5c:b3:91:63:83:07:8a:5f:2f:6a:e2:88:bb:f7:b9:78:c6:
cb:76:09:d0:83:aa:ca:b3:70:c3:f5:0c:95:66:b6:fb:d1:e1:
29:14:f6:2e:41:10:63:f5:dc:f4:a6:4d:fa:b7:e4:cf:64:77:
f4:da:09:10:13:2b:6e:e4:1e:14:79:d4:f7:e0:e1:8b:52:7e:
42:aa:fe:5d:a1:80:3a:27:65:5c:6e:26:09:12:3b:06:c1:e2:
5f:e8:0a:a8:f2:dd:73:ed:af:96:c4:6a:34:64:db:36:67:dd:
66:87:6f:b0:69:3c:d6:a1:3f:48:d6:e5:41:b9:09:60:43:bb:
2b:ef:5d:8c:68:1f:20:fc:0c:ea:c1:dd:ff:c0:54:8d:4a:50:
39:8a:fb:ce:4d:93:ab:e6:02:97:4f:c1:80:50:ad:a3:c3:af:
a0:1e:d7:c0:a1:50:0d:6c:6a:50:7e:c1:ef:8d:1a:a0:d6:0e:
86:e2:0b:4a:52:83:87:2b:b7:e8:ca:84:91:db:49:05:7f:05:
83:67:a5:e5:d0:73:07:5c:35:1a:19:14:f2:5d:32:b6:49:a2:
ab:66:0d:34:ee:d7:46:12:be:ba:73:50:b8:ad:62:53:10:e2:
7a:62:86:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:14 2026 by rpki-client