Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eM7rSueMPlMyZBM9MDsf5WU143k.roa
File: eM7rSueMPlMyZBM9MDsf5WU143k.roa (raw, json)
Hash identifier: C9jiGHEX3XWaIUHnJsoKhgUPJLHbkVhLTuLC1EIR4fE=
Subject key identifier: 78:CE:EB:4A:E7:8C:3E:53:32:64:13:3D:30:3B:1F:E5:65:35:E3:79
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019EC5829E33B725C3BCF820402433EC417A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eM7rSueMPlMyZBM9MDsf5WU143k.roa
Signing time: Sun 14 Jun 2026 09:42:12 +0000
ROA not before: Sun 14 Jun 2026 09:42:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 62.76.226.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
194.87.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jun 2026 07:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:82:9e:33:b7:25:c3:bc:f8:20:40:24:33:ec:41:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 14 09:42:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78ceeb4ae78c3e533264133d303b1fe56535e379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:f7:fb:89:ef:3a:6b:08:80:71:c8:fb:91:
bc:69:e2:8e:9f:06:98:f4:30:16:45:b1:21:80:84:
30:3d:a0:ef:7d:68:15:2d:c3:64:74:76:15:b2:51:
cd:af:86:c1:83:66:66:65:cf:06:90:4f:f3:e0:ce:
97:67:18:f0:3b:b0:b0:dc:8a:16:5d:8f:55:b2:58:
df:47:c2:40:a5:66:e7:23:b8:48:7e:4c:7d:c6:3c:
69:0b:9e:96:5c:47:f2:af:2e:84:47:32:7f:33:4b:
11:af:2a:82:f3:f2:e8:43:51:b0:c1:ca:1e:b9:52:
20:57:fd:6e:65:f3:28:0d:52:83:71:79:fa:e9:b1:
1f:49:f9:c6:14:8e:28:74:9c:1f:38:e4:5f:3b:cb:
3e:c3:2a:ea:cf:2a:cd:0d:92:4f:5b:0c:6b:ae:ac:
f4:56:1b:7c:f4:35:5c:da:8b:7e:93:5b:40:c9:be:
1d:58:b8:6a:e1:be:d2:27:63:a6:07:19:8c:49:53:
f2:18:f4:62:18:01:6b:f2:10:36:f4:bd:ca:0d:bd:
cc:3e:c3:89:0c:e9:2c:af:98:da:9f:9d:e7:36:ba:
3c:38:76:8f:5e:8d:cb:6a:a3:d4:37:a7:48:dc:2f:
54:d1:94:de:76:00:3f:4d:11:5a:72:33:a4:18:d7:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CE:EB:4A:E7:8C:3E:53:32:64:13:3D:30:3B:1F:E5:65:35:E3:79
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eM7rSueMPlMyZBM9MDsf5WU143k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
193.124.3.0/24
193.124.6.0/24
194.87.87.0/24
Signature Algorithm: sha256WithRSAEncryption
14:40:ca:7a:7e:b3:38:dd:37:8e:ba:61:11:91:f3:93:f6:44:
b4:81:2c:ad:44:ef:dd:3f:82:21:96:4a:b6:e7:00:57:99:17:
98:d1:7f:ec:cc:b6:5b:38:13:cf:13:c7:64:6c:81:41:a3:99:
19:bd:85:53:7a:f6:a3:d2:5d:d9:12:b2:a1:7e:7f:b3:df:8a:
0d:ac:40:12:c9:37:83:c3:38:52:7e:9b:c4:4d:f2:2f:84:8a:
22:fa:db:73:ca:f3:c8:c8:b8:ab:5f:a3:01:37:46:25:16:c7:
fd:8d:8b:0e:82:40:99:10:d5:af:84:67:ea:87:d2:66:fd:a0:
f9:7d:a1:81:5b:3c:07:7e:7e:42:a5:c1:c4:00:fd:d8:1c:8f:
ec:ef:94:e8:33:92:9e:6f:6f:72:e3:96:f4:e5:e0:a0:8a:e9:
d9:4f:ac:16:96:18:92:4e:d4:a9:99:33:70:b5:a0:c9:d7:32:
19:5a:af:28:1e:0e:cd:ee:f9:50:a3:9c:11:91:0e:63:69:a9:
f0:3b:f2:2c:79:f3:3c:fc:f2:0c:f7:c1:92:a8:f3:e2:3d:99:
0c:2c:d2:ca:bf:2f:25:b8:ea:24:4c:90:be:e9:62:bd:12:ab:
ad:db:0b:28:72:2d:2c:25:4b:11:53:78:6d:db:aa:44:ec:41:
c5:1f:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 13:17:27 2026 by rpki-client