Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dBH4kRL8K-XqUu_FYO3iGMyzUNM.roa
File: dBH4kRL8K-XqUu_FYO3iGMyzUNM.roa (raw, json)
Hash identifier: C1b5Pj8gVYe7AIgqxFEe4wOiKPar+DioJ8NVdCzbXmo=
Subject key identifier: 74:11:F8:91:12:FC:2B:E5:EA:52:EF:C5:60:ED:E2:18:CC:B3:50:D3
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0BB22132898FB6B3C9FBF6C0F378CA6DD
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dBH4kRL8K-XqUu_FYO3iGMyzUNM.roa
Signing time: Sat 19 Sep 2026 19:26:07 +0000
ROA not before: Sat 19 Sep 2026 19:26:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 89.106.30.0/24 maxlen: 24
201.14.223.0/24 maxlen: 24
201.24.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 15:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:22:13:28:98:fb:6b:3c:9f:bf:6c:0f:37:8c:a6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 19 19:26:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7411f89112fc2be5ea52efc560ede218ccb350d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:dd:e9:bf:3a:07:64:89:b4:49:02:f4:de:
9c:14:0f:13:f7:ff:0c:1a:71:97:ab:e7:85:89:94:
c6:49:c2:c9:e1:a2:c1:81:05:04:52:07:6e:f6:74:
a6:7c:13:1a:1d:76:07:19:db:d1:47:0a:e9:7a:99:
46:02:38:f9:d4:8a:6b:ef:74:5b:51:4a:0f:f4:ed:
7f:f7:57:71:af:be:f2:62:b7:00:5a:fe:a4:05:fa:
53:cc:95:0b:3f:cc:a4:52:c7:dd:c2:e6:88:38:b9:
96:13:e5:0d:fd:3b:c2:cd:c0:f6:3e:e5:4d:39:97:
8e:94:d2:8b:37:8f:a1:67:5e:8b:af:5d:f9:29:73:
73:0f:23:15:15:0c:ab:02:5f:8e:f0:dd:61:da:df:
72:61:4c:66:c4:14:63:1b:1f:ca:30:dd:ee:02:75:
ce:f9:40:ec:75:a6:4c:82:5d:ea:ef:91:32:58:31:
af:9c:66:6f:ff:99:e6:07:7b:0e:3e:eb:9b:19:e6:
fd:7d:52:55:a0:0a:36:4f:5c:32:fc:f5:5d:0a:10:
21:60:46:bc:96:a0:f8:26:3d:f0:b7:ca:69:66:ed:
a1:92:19:03:b5:8b:39:c4:a8:a5:de:37:56:83:ca:
81:38:d4:a9:ee:5a:a8:38:21:06:2a:ed:3b:7d:cf:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:11:F8:91:12:FC:2B:E5:EA:52:EF:C5:60:ED:E2:18:CC:B3:50:D3
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dBH4kRL8K-XqUu_FYO3iGMyzUNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.30.0/24
201.14.223.0/24
201.24.204.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7b:81:24:5a:be:c2:ad:fc:6f:0f:55:7e:d4:10:f7:1e:61:
93:d7:76:e2:14:25:4f:bd:7d:82:8c:13:f4:17:c4:36:d7:e4:
de:79:4e:f8:56:74:cb:69:3e:3b:ce:53:6c:b0:a8:c5:98:3e:
fd:3f:7b:84:5e:b7:a0:39:9c:a2:4f:34:f4:43:2f:21:59:ca:
11:dc:b8:50:fd:d0:63:65:04:e6:19:81:c6:b1:1e:21:bf:e2:
c1:e8:1a:de:86:5d:57:c8:25:7f:e3:36:50:74:86:ca:d8:06:
11:c2:31:a9:97:10:c1:a0:69:0a:9e:b7:4a:1e:6a:66:7a:39:
52:16:f6:53:0b:76:92:32:ba:4b:02:db:27:56:87:31:51:81:
ae:be:34:16:a8:d1:ba:80:ac:0b:f4:8a:fd:18:10:3c:94:17:
31:c8:a1:13:c3:79:f7:bb:5b:c6:14:6a:1e:a2:63:72:99:b3:
f8:61:45:81:a5:43:22:e1:cd:f5:01:56:1f:31:e0:71:10:55:
eb:83:67:aa:ce:0b:2f:34:5d:6a:38:b8:78:13:b6:2d:37:d9:
7c:3f:b2:57:3e:0d:3f:f4:85:09:67:6f:89:51:70:92:8d:ae:
27:c0:ea:17:7f:42:88:fb:85:32:58:33:6c:3b:a8:32:ea:ce:
55:45:61:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:15:23 2026 by rpki-client