Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/VwstA5BZDZY0niGEXnF1VQ2t3YU.roa
File: VwstA5BZDZY0niGEXnF1VQ2t3YU.roa (raw, json)
Hash identifier: KbM5p68jKpiQeyHIZFc9Vlnwr5KNMjkBExAffIAkn3E=
Subject key identifier: 57:0B:2D:03:90:59:0D:96:34:9E:21:84:5E:71:75:55:0D:AD:DD:85
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F19A3F83528772CB49F49D45C5FA53ED4
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/VwstA5BZDZY0niGEXnF1VQ2t3YU.roa
Signing time: Tue 30 Jun 2026 17:46:44 +0000
ROA not before: Tue 30 Jun 2026 17:46:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153238
IP address blocks: 201.14.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jul 2026 21:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:a3:f8:35:28:77:2c:b4:9f:49:d4:5c:5f:a5:3e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 30 17:46:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=570b2d0390590d96349e21845e7175550daddd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:6f:98:32:35:06:e8:e4:51:31:fb:b1:a0:
5d:da:98:83:e6:58:93:5a:c8:47:d0:0e:96:3d:e6:
b6:89:4d:65:34:57:1e:69:ff:bf:fb:4c:1c:1e:79:
8f:74:85:88:a4:af:14:45:fb:b5:16:52:3f:60:db:
e1:20:37:f1:3a:ee:62:de:8f:d5:bc:dc:48:16:f2:
b2:f7:6d:92:52:fa:33:a8:97:e2:e9:2e:bd:c9:7d:
be:f6:e8:d1:e5:0b:4b:26:b8:b4:91:af:ec:fe:1b:
1e:dc:1e:be:0a:40:33:0d:55:86:0a:2c:bc:e7:aa:
80:51:96:bf:f3:e3:43:6c:8f:5f:78:b3:5a:14:80:
13:1c:c7:75:b5:55:66:ae:b1:9c:ed:7c:7a:17:2c:
1c:4b:5f:82:99:a8:cb:dc:01:83:b2:ee:ff:13:33:
96:68:6b:9e:45:21:f8:b0:5b:a8:97:0c:2b:66:ac:
70:47:d3:63:3e:21:63:dc:ef:93:af:b7:01:7e:b5:
ac:d3:b1:8b:a5:5f:ba:f6:4c:ea:8f:6b:3e:f4:de:
e1:8c:3e:04:f5:b3:3d:64:39:79:d4:3c:48:66:0e:
d4:d8:d4:00:2f:1c:fb:bd:9e:e5:b7:a7:4a:18:cf:
db:5b:57:c6:35:3e:73:46:51:0b:27:5c:60:be:72:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0B:2D:03:90:59:0D:96:34:9E:21:84:5E:71:75:55:0D:AD:DD:85
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/VwstA5BZDZY0niGEXnF1VQ2t3YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.14.220.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:24:54:46:56:63:ad:b5:51:9b:fb:7b:1c:da:5f:56:22:9e:
a5:77:23:08:3e:36:2c:47:4c:d2:07:f8:36:5f:5d:b2:1a:17:
d4:0a:41:bb:97:93:16:c3:b2:85:33:da:f3:a0:4b:e4:3f:b7:
db:40:10:f7:f7:85:5d:df:f6:bb:44:70:e7:4d:4f:02:67:32:
32:82:72:8b:91:bb:5a:8e:f3:73:2d:d0:32:a0:2f:a8:69:38:
bd:0d:b2:c0:11:35:f6:13:c4:a2:7a:7d:03:d6:23:03:5d:e7:
45:f0:9a:6f:eb:31:90:de:62:ed:1b:cd:94:7b:f9:c2:ce:e8:
e3:11:ad:8a:be:f0:ae:08:a6:55:bb:85:6e:39:6b:8a:df:6e:
19:b6:50:8f:e1:b5:a0:8a:67:f3:1d:1a:f2:ae:93:31:f6:33:
fe:48:ed:e5:cb:79:c9:b5:93:21:bd:af:fb:58:3f:d1:70:52:
16:6a:66:56:07:2f:53:6e:7f:6b:3e:9e:db:28:3b:10:9b:b9:
47:0f:88:1b:5a:0b:b5:aa:31:3c:b4:cd:a7:08:9f:1e:91:54:
41:8f:f3:d0:95:0b:76:db:c5:6e:05:b2:55:be:c7:9d:74:25:
0f:80:df:6c:2b:90:af:0f:a0:eb:25:03:51:0a:e5:69:27:44:
f1:b9:0b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:36 2026 by rpki-client