Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/i9cJiH4cOWuYHgP-S8PkmEGp_ZQ.roa
File: i9cJiH4cOWuYHgP-S8PkmEGp_ZQ.roa (raw, json)
Hash identifier: Ox2bayEt2VsGoCR641y6HgClmzTr2d1Um3GdolTsyoM=
Subject key identifier: 8B:D7:09:88:7E:1C:39:6B:98:1E:03:FE:4B:C3:E4:98:41:A9:FD:94
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E1744AE5D65B5AD6A6760EAD32ACB5073
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/i9cJiH4cOWuYHgP-S8PkmEGp_ZQ.roa
Signing time: Mon 11 May 2026 13:40:37 +0000
ROA not before: Mon 11 May 2026 13:40:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203054
IP address blocks: 212.134.40.0/24 maxlen: 24
212.134.43.0/24 maxlen: 24
212.134.170.0/24 maxlen: 24
212.135.144.0/24 maxlen: 24
212.135.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 01:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:44:ae:5d:65:b5:ad:6a:67:60:ea:d3:2a:cb:50:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 11 13:40:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bd709887e1c396b981e03fe4bc3e49841a9fd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0a:b8:9d:a5:29:18:c6:19:3f:b5:74:ad:6a:
0e:73:a2:2d:06:e3:76:a6:39:77:98:01:49:66:1b:
68:97:ca:a8:2c:54:94:ee:df:34:98:4c:54:05:25:
d3:ff:2a:75:b0:32:bd:8b:80:53:97:36:c7:b5:76:
5c:7c:c9:bb:9f:0f:74:fc:7c:79:46:d1:9f:56:46:
e3:2f:44:1f:70:92:12:c1:9d:ea:3a:99:b9:45:8d:
0a:9e:52:6d:f2:31:d5:39:01:97:3f:ba:ec:23:d1:
8c:75:32:24:ab:bd:eb:12:6e:03:70:c1:48:f9:64:
53:b9:34:de:e8:92:73:34:e1:25:58:df:50:d5:ac:
a1:83:06:f7:a7:3e:e1:f0:d1:79:30:28:06:af:ef:
ea:65:80:1b:3b:76:d0:71:8a:c5:75:3e:0c:a4:2c:
90:b9:d3:92:2b:a2:c8:0e:29:58:f8:3c:ad:5d:ee:
a4:be:c1:95:42:59:54:b9:5e:a7:6f:5c:a4:b0:4e:
0a:2b:5a:57:57:bc:4e:f3:07:ce:10:c5:a8:22:d0:
bd:9e:c2:be:cb:e8:53:c9:47:fa:d0:97:25:41:fc:
a1:32:38:ed:a7:ab:cc:b9:2c:c8:85:85:36:0b:74:
58:5f:0c:d0:0e:50:c2:08:c6:6e:9f:e0:84:f8:29:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D7:09:88:7E:1C:39:6B:98:1E:03:FE:4B:C3:E4:98:41:A9:FD:94
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/i9cJiH4cOWuYHgP-S8PkmEGp_ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.40.0/24
212.134.43.0/24
212.134.170.0/24
212.135.144.0/24
212.135.199.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d9:48:1c:a4:66:5a:2c:c9:97:ba:f2:c0:0a:30:3e:fd:a2:
28:a8:c3:97:fa:de:45:a4:39:6d:a8:32:9b:0d:32:4a:ee:4d:
4e:03:07:19:2c:7f:e4:dc:b7:b1:7f:97:36:a7:f0:6f:70:2e:
4e:0a:14:f2:10:73:70:9b:8b:d3:00:d7:57:42:d7:4a:1d:a9:
eb:60:c1:b2:f7:73:c3:95:c3:07:5c:e9:8f:9f:f4:29:65:92:
41:17:0b:cc:06:49:6b:5e:a5:27:59:46:a3:3c:f6:ba:3f:0f:
c9:ae:a0:38:cd:69:98:3f:e1:f9:34:0c:26:81:9c:2b:f4:6d:
13:cc:54:d0:29:d4:a0:4b:9b:31:62:54:89:a6:c2:5f:73:b3:
0d:d1:7f:dc:c4:41:75:a5:59:c9:82:d6:d1:e2:14:08:24:cc:
b2:95:98:85:41:d8:f9:97:fb:72:7c:6a:64:46:a6:07:4e:a3:
36:1b:fa:f3:4d:a3:0a:b3:0a:7a:cb:3f:f8:19:fe:9b:f0:ad:
8c:60:30:0d:a1:36:85:dd:38:bf:44:ee:cd:77:e0:89:de:0e:
d0:1e:87:17:fd:7c:8c:fd:4c:e7:55:3e:07:02:98:e6:e7:40:
a6:3b:61:63:b5:03:a6:2f:bb:05:9c:73:57:4f:56:6f:82:c7:
05:b9:89:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:44 2026 by rpki-client