Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/slsyFfn7RZd5u6wLKtjEahj04u4.roa
File: slsyFfn7RZd5u6wLKtjEahj04u4.roa (raw, json)
Hash identifier: HPXK8ZwvmgL7Htj0TZv+OKD3Pw2ieJzTuzh+zFOI5XA=
Subject key identifier: B2:5B:32:15:F9:FB:45:97:79:BB:AC:0B:2A:D8:C4:6A:18:F4:E2:EE
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 019D90BEDA3BD9DD5FA1E4615A764D24797D
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/slsyFfn7RZd5u6wLKtjEahj04u4.roa
Signing time: Wed 15 Apr 2026 10:45:20 +0000
ROA not before: Wed 15 Apr 2026 10:45:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 185.238.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Apr 2026 07:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:be:da:3b:d9:dd:5f:a1:e4:61:5a:76:4d:24:79:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Apr 15 10:45:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b25b3215f9fb459779bbac0b2ad8c46a18f4e2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:ce:9c:a2:a0:1a:3d:e0:e1:1f:d6:c4:64:
7e:d3:86:f2:5d:1f:92:5e:ab:fb:e3:e7:29:e1:a9:
20:81:1c:d7:3c:f5:b0:cc:0f:c1:5a:5c:e7:c7:5e:
17:39:a6:1f:e0:15:9e:86:15:99:bf:ab:51:09:44:
c8:82:b7:03:94:56:22:36:01:ae:4e:f1:69:51:cf:
13:a1:ee:63:82:32:8b:8c:9f:96:5d:5f:cd:f1:c8:
df:be:fd:57:90:5f:f2:c5:1c:de:bc:19:6a:7e:6a:
0b:1f:70:f0:4e:f5:05:50:3d:5d:21:b9:ec:36:b9:
11:12:5a:72:7f:3a:cf:01:f0:49:2d:ae:52:79:b6:
d8:40:de:8b:33:01:4c:c7:12:df:07:d1:43:ef:49:
5b:85:7a:55:b3:da:2e:f7:76:f1:e4:ca:1c:79:c3:
1d:6d:de:df:11:dd:a2:51:95:6e:70:dc:6a:f4:f5:
0a:be:9a:0e:b2:62:35:52:53:89:df:60:5e:bc:85:
ec:42:2c:27:a6:74:f5:d0:57:76:d5:81:6c:56:c6:
3a:aa:1a:35:d2:49:8b:61:50:f9:f6:dc:cb:60:82:
81:92:72:c0:0d:ab:d7:fd:28:03:ec:e2:50:4f:ef:
80:b6:33:9b:bb:6b:e7:91:79:94:93:4b:e3:d3:3b:
a2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5B:32:15:F9:FB:45:97:79:BB:AC:0B:2A:D8:C4:6A:18:F4:E2:EE
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/slsyFfn7RZd5u6wLKtjEahj04u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.217.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:1e:14:8c:36:ca:09:cb:86:18:b3:48:5e:d0:59:27:5c:f9:
42:5c:53:65:c8:97:be:eb:21:a6:2c:9e:7b:6f:10:6d:39:e4:
38:d4:50:71:99:4d:8d:3d:44:b2:0e:86:60:ab:63:4c:5b:69:
ce:08:7a:bb:32:ed:8f:1c:cf:53:d7:15:ac:ac:f2:df:f8:90:
6a:cb:b9:8b:12:fa:72:a0:21:6a:53:54:59:6b:a3:a2:ae:bc:
d3:18:61:5e:ae:43:e8:66:8b:f1:b8:3d:a6:6a:a2:d7:d6:68:
b8:c5:c3:6b:c9:e8:7f:19:14:63:88:64:19:a2:29:eb:38:72:
c3:a0:5e:04:e4:4b:67:09:c2:94:45:df:27:ab:ce:20:a6:92:
f5:e2:68:a1:da:27:37:41:b9:78:22:20:a3:f8:ee:1e:f8:f6:
4a:6a:61:13:18:de:99:46:5f:1b:03:52:d8:e4:4b:21:0f:41:
76:13:07:2c:bf:0c:64:c2:b9:66:b9:4a:6b:40:b8:f5:2f:2e:
2c:bf:bf:66:7f:9c:ff:7e:36:00:c7:0a:e2:a8:14:bc:29:2b:
1a:ab:f8:72:5c:25:f5:a5:b0:18:01:16:ed:9a:e7:e5:63:f2:
ea:f0:34:ab:9f:25:87:b0:ae:4c:5e:1c:fb:1a:71:8f:9e:bd:
d5:2d:60:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:25:32 2026 by rpki-client