Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NHul20VzcOybLI_dZElwp5PBg9E.roa
File: NHul20VzcOybLI_dZElwp5PBg9E.roa (raw, json)
Hash identifier: 0uf8SvCv6ItJ61EBjh4WZUWdy2DfQxvfFiiH/mzne9k=
Subject key identifier: 34:7B:A5:DB:45:73:70:EC:9B:2C:8F:DD:64:49:70:A7:93:C1:83:D1
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EFF812ECFC1E4083DCF366C6E54762B94
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NHul20VzcOybLI_dZElwp5PBg9E.roa
Signing time: Thu 25 Jun 2026 15:58:36 +0000
ROA not before: Thu 25 Jun 2026 15:58:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58766
IP address blocks: 189.31.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jul 2026 21:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:81:2e:cf:c1:e4:08:3d:cf:36:6c:6e:54:76:2b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 25 15:58:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=347ba5db457370ec9b2c8fdd644970a793c183d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:34:3d:9d:0f:3c:03:07:15:2b:fc:2a:95:
50:be:ff:2c:c5:4e:ba:d2:3d:f5:31:fd:e9:c1:b6:
17:22:48:b9:c2:bf:d3:ea:51:be:4d:0d:04:93:bd:
cc:7f:ae:2f:b1:c6:c4:be:04:52:f9:42:70:e0:ce:
6c:3b:7a:51:9d:a9:c4:92:bb:b6:46:35:ec:c2:15:
0b:35:18:bf:6c:0b:82:6b:2c:e9:f2:03:44:0c:4c:
45:18:a3:00:a8:b2:73:90:f6:a5:60:e0:e7:7a:da:
06:d2:0d:19:06:65:33:25:73:20:59:89:83:3b:02:
f8:ef:96:c9:30:23:85:1f:07:3c:9d:b1:15:56:86:
6b:63:a1:04:d1:51:41:e0:58:77:6b:e1:31:6e:23:
5f:23:52:a3:9a:f4:3f:c1:7c:02:e4:5c:02:9c:28:
de:d1:8b:55:d3:92:13:54:a0:16:34:57:d1:81:c7:
86:0b:d9:b0:2a:e2:d8:e5:bb:27:a5:b8:95:8e:b6:
d3:14:a8:8f:7d:6c:ff:20:bf:b2:e4:f3:ea:77:df:
42:4e:5c:93:57:4d:df:23:54:da:ac:8b:e8:7d:a3:
2e:0e:4d:b6:ac:93:a7:e2:33:c1:36:c2:63:c0:a2:
25:32:cd:fa:c5:ca:cc:6a:1b:73:5e:cc:d7:1c:40:
15:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7B:A5:DB:45:73:70:EC:9B:2C:8F:DD:64:49:70:A7:93:C1:83:D1
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NHul20VzcOybLI_dZElwp5PBg9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.31.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:77:44:70:90:5f:79:f2:72:c1:85:36:82:87:f0:f6:8d:6c:
4e:61:1c:39:71:12:b1:87:e8:65:60:3a:a4:55:33:c8:61:64:
fc:aa:f3:f2:75:14:f8:15:03:31:13:ff:80:b1:b5:ba:ce:c7:
b4:66:9e:c0:16:d1:73:b5:00:1c:a1:ab:32:25:0f:f0:30:77:
8c:04:29:e5:b0:72:6f:f5:6b:4d:fb:48:86:73:ab:99:87:36:
38:5a:4d:8b:51:dc:de:b7:66:d5:13:4d:80:2b:61:8a:cd:39:
ad:a7:54:40:61:08:2f:38:aa:37:f1:ce:6c:20:67:34:0e:63:
84:d6:a7:48:99:1c:8c:aa:67:bf:cf:8f:49:d1:64:5b:2c:22:
c5:02:55:f5:50:48:b7:16:db:de:d5:99:97:56:8f:20:84:ad:
4a:85:1a:de:ef:45:38:89:2b:7a:e4:57:63:00:52:2b:f7:91:
58:40:7a:cc:23:eb:b7:e6:73:9a:d4:cb:4f:77:f8:df:db:89:
b4:8f:2c:4c:8b:8b:86:1e:25:f3:56:f1:08:14:59:8c:c7:7b:
c9:d7:15:d8:ec:37:e4:2a:e8:09:d1:1a:11:63:85:b8:a8:9b:
a5:b5:15:87:c5:e2:2f:5c:93:66:70:0c:2c:1e:3c:c0:11:25:
c7:bd:d4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:39 2026 by rpki-client