Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0j5Q7mZ5Os3hR7J_nn5XMS5BHYM.roa
File: 0j5Q7mZ5Os3hR7J_nn5XMS5BHYM.roa (raw, json)
Hash identifier: LUyavK++mtf6boGyXoQOclrzhmsUXIJnMI1+ZZFJTBY=
Subject key identifier: D2:3E:50:EE:66:79:3A:CD:E1:47:B2:7F:9E:7E:57:31:2E:41:1D:83
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F75B3F265EDDCC5DB95692E4CF80A3B44
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0j5Q7mZ5Os3hR7J_nn5XMS5BHYM.roa
Signing time: Sat 18 Jul 2026 14:49:15 +0000
ROA not before: Sat 18 Jul 2026 14:49:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 189.75.182.0/24 maxlen: 24
191.217.165.0/24 maxlen: 24
200.181.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jul 2026 22:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:b3:f2:65:ed:dc:c5:db:95:69:2e:4c:f8:0a:3b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 18 14:49:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d23e50ee66793acde147b27f9e7e57312e411d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:98:f4:76:6b:4a:9e:3b:41:f5:b7:00:5d:
39:fc:ac:11:23:5d:19:2c:b7:f5:ff:c3:94:e0:12:
b6:ca:cf:52:05:e4:ac:82:d3:57:28:49:20:33:c5:
3b:cf:5b:b4:e6:9b:be:4f:7a:46:2c:f4:1b:1a:b4:
19:fe:dc:72:08:b4:fe:78:9b:fb:26:9a:86:49:d4:
c6:d3:62:87:94:c8:2f:2b:8b:5f:bb:72:fa:13:84:
65:07:46:2d:13:1a:39:6e:d3:59:72:ee:0d:62:19:
ed:55:d2:5d:13:49:bb:71:fe:06:dc:38:61:b0:69:
14:4f:e1:6f:58:f3:4f:15:5e:4c:d7:ff:2e:87:13:
f0:2c:91:b5:33:ff:23:f6:f3:5c:82:ef:ea:f0:37:
37:26:e6:de:64:36:27:d6:e5:f0:9c:1e:7c:1d:17:
d1:ca:d7:39:fe:c2:de:47:5a:8a:15:fa:57:67:24:
30:dd:55:a4:a3:cb:13:6c:bc:5f:60:d3:76:c2:df:
85:a4:dd:6c:2a:a2:24:9d:fb:f7:35:43:51:6e:1c:
07:2b:95:96:79:2a:69:92:a3:f1:d9:17:aa:ac:0d:
37:a7:22:8f:09:d7:bc:7d:76:f9:b5:6c:5f:68:48:
d5:b8:b7:f7:1c:c3:e0:2c:fd:10:d6:22:3c:71:c9:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3E:50:EE:66:79:3A:CD:E1:47:B2:7F:9E:7E:57:31:2E:41:1D:83
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0j5Q7mZ5Os3hR7J_nn5XMS5BHYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.75.182.0/24
191.217.165.0/24
200.181.90.0/24
Signature Algorithm: sha256WithRSAEncryption
59:db:3a:88:84:98:94:f6:e1:22:12:5d:74:17:01:18:bf:8b:
15:11:4f:e5:7a:34:bf:33:70:65:c4:e7:e3:d7:62:92:5a:92:
09:7d:50:58:0e:fc:cf:fd:b6:7c:e0:04:f8:02:c8:e8:73:f6:
72:c3:b4:a0:a4:17:ef:d4:f6:67:8a:a2:88:3d:5d:dc:58:9a:
3d:72:63:78:b1:47:d5:fd:d3:3e:8e:c9:82:c3:8d:7d:2c:4f:
81:2f:ea:8b:d3:e7:2c:9f:4b:77:6a:5f:e4:d0:a9:2b:72:3f:
c9:ba:63:bc:90:9d:42:2e:d2:19:9f:18:5f:d6:d7:d3:2f:56:
cf:09:00:8f:e4:85:7d:59:18:b4:6d:e1:87:c1:e7:a0:9b:4c:
47:bc:78:7b:69:76:a1:da:92:81:b8:df:f1:43:23:df:65:ba:
39:12:8a:6c:66:22:33:04:7d:e8:49:f5:8a:d8:9a:ea:1b:3e:
b7:08:f6:58:ef:45:18:9a:a2:b7:3f:9e:49:76:ec:9e:00:68:
99:f2:8f:7f:ea:7f:88:a1:0b:1b:e3:cc:c5:d4:98:b1:f2:82:
86:57:b8:ae:57:ad:cd:c6:ee:50:b3:9a:2a:43:26:73:fe:96:
dd:b0:b1:96:3b:eb:3e:29:d7:10:cf:d3:89:bd:9c:b1:3c:ed:
9f:20:75:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:28 2026 by rpki-client