Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/G7WtGWdodvHIE88efP33gAJXIkE.roa
File: G7WtGWdodvHIE88efP33gAJXIkE.roa (raw, json)
Hash identifier: jTPiFneVrRRcT5cYz6IYpULXahLvJS7E16L7ERPj6GM=
Subject key identifier: 1B:B5:AD:19:67:68:76:F1:C8:13:CF:1E:7C:FD:F7:80:02:57:22:41
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F617A2BAE1381578861B065C8CE2C1C24
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/G7WtGWdodvHIE88efP33gAJXIkE.roa
Signing time: Tue 14 Jul 2026 16:33:44 +0000
ROA not before: Tue 14 Jul 2026 16:33:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 189.75.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jul 2026 21:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:7a:2b:ae:13:81:57:88:61:b0:65:c8:ce:2c:1c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 14 16:33:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bb5ad19676876f1c813cf1e7cfdf78002572241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:3c:e3:67:00:77:15:29:d7:1e:47:54:c0:
ce:2c:b0:aa:13:0a:0a:93:3d:fc:c8:f1:aa:02:fc:
a4:af:2a:25:ca:8f:31:68:f8:e1:cc:e7:2b:23:80:
33:d9:fa:f5:e4:ad:1d:2a:4c:f5:43:0a:99:7a:3e:
d9:d1:a7:46:f4:1f:c2:74:7e:db:a1:aa:cc:7e:02:
1b:00:f7:17:5e:42:c5:21:ab:98:5d:b7:8e:4b:54:
53:e0:43:f3:5f:a7:d2:38:72:ff:f5:8b:e8:fe:59:
22:d3:a9:22:64:f8:bc:cd:37:97:dd:c9:26:98:b4:
aa:97:f0:cd:26:98:20:a7:ff:22:81:9e:c2:62:2b:
0c:29:1c:1b:eb:d0:d3:7d:9e:a1:80:d0:d5:7b:d9:
66:3c:52:b3:15:ea:9b:48:d9:50:5a:8f:1a:2c:59:
a2:e2:f1:11:d8:f4:14:49:12:e8:9d:40:1f:78:ce:
51:ac:d7:61:a8:a5:cb:ce:2b:f3:22:41:77:8a:16:
41:3f:23:f4:00:83:45:75:df:12:8d:7d:ee:e4:6f:
c4:b2:c1:ef:1d:9e:5b:53:3d:46:58:01:64:31:4a:
b8:46:2e:90:3f:80:5e:bd:73:b3:20:d2:a0:8e:4b:
38:72:df:1e:07:0a:7d:e2:f8:9a:61:aa:6e:27:6e:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B5:AD:19:67:68:76:F1:C8:13:CF:1E:7C:FD:F7:80:02:57:22:41
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/G7WtGWdodvHIE88efP33gAJXIkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.75.181.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c7:bb:3f:89:89:ed:c5:b8:73:aa:67:28:1e:4a:3e:36:3e:
34:66:18:5b:8c:cf:a5:8f:21:cd:7d:f2:92:53:47:12:b1:b3:
0d:7d:22:d3:b9:80:7c:e9:75:1a:a4:84:1d:12:e4:13:70:c5:
94:e2:5a:5f:bf:36:57:a6:18:33:02:e6:7a:76:b9:4e:f6:08:
63:23:ae:a6:40:d5:4f:b3:92:5a:22:2b:03:fa:62:a1:9d:55:
4c:79:ae:94:fc:44:e8:c1:12:0c:d2:4a:25:6b:06:84:d5:8e:
87:ea:2b:96:70:3e:a5:47:fd:97:4b:30:43:67:85:3b:aa:1b:
15:b2:bf:bc:68:8b:25:44:45:d2:9f:e0:b5:ff:ae:a9:20:fe:
95:ed:fb:f8:c1:33:b4:52:c3:8d:11:8f:a3:a3:ea:f9:7b:27:
6c:cb:86:1d:50:71:98:5a:00:71:f8:64:0d:c6:2d:38:51:cc:
c7:9e:0b:14:f6:5f:96:65:14:a8:bd:03:6d:75:91:53:9b:96:
20:92:48:3e:54:d9:d2:2a:fb:24:04:95:82:21:4b:82:45:92:
f8:13:25:3b:ca:c2:1f:40:91:61:88:45:2e:87:ee:01:3c:3d:
62:50:e7:4b:e1:0a:52:58:aa:9f:50:18:56:15:b7:0e:c6:0c:
98:5c:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:37 2026 by rpki-client