Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/De6bPGEDWQUUG55Orj9dG2OhNMg.roa
File: De6bPGEDWQUUG55Orj9dG2OhNMg.roa (raw, json)
Hash identifier: gNnYCHzYnn4sand7/P5YCbOIgKWRnNkejfNNzdpUQBA=
Subject key identifier: 0D:EE:9B:3C:61:03:59:05:14:1B:9E:4E:AE:3F:5D:1B:63:A1:34:C8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019EDD4D456B92885E731B9463386C9E70FD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/De6bPGEDWQUUG55Orj9dG2OhNMg.roa
Signing time: Fri 19 Jun 2026 00:34:49 +0000
ROA not before: Fri 19 Jun 2026 00:34:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16125
IP address blocks: 87.121.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 20 Jun 2026 00:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:4d:45:6b:92:88:5e:73:1b:94:63:38:6c:9e:70:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 19 00:34:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dee9b3c61035905141b9e4eae3f5d1b63a134c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:c3:21:2a:79:66:cd:76:4c:83:31:3f:91:
e4:d6:87:ce:4e:a7:49:26:e6:8e:f8:80:60:72:ee:
a7:b4:d8:9d:6a:73:30:03:e6:9f:65:93:f2:cb:7a:
c8:0a:1a:5d:30:c1:b3:2a:72:b8:80:8c:9f:ce:26:
bb:b6:d5:54:98:78:41:34:3e:63:98:8c:ed:f5:85:
84:a2:3b:e8:6b:cc:d8:6a:14:91:89:85:8c:7d:53:
59:14:98:20:2f:55:f7:45:f4:60:6e:92:82:70:c4:
6b:32:d9:6d:17:00:26:16:29:00:27:af:9e:ab:52:
66:0a:19:43:1f:ec:39:fc:38:b7:cd:94:14:4e:b9:
1b:f7:2e:b6:39:2e:e0:e6:0b:1b:43:32:06:14:47:
54:5a:fd:27:5c:af:a1:2b:cf:12:6a:24:dd:53:33:
cf:ee:89:4f:f5:3a:79:4c:09:2d:5f:67:11:20:3f:
52:58:05:4d:d2:dd:28:60:6c:34:cf:79:83:2f:9f:
c4:28:41:86:e7:28:1f:fd:f4:37:15:a6:a3:83:b9:
02:eb:42:38:f8:73:37:07:88:8d:f5:11:d7:4c:2c:
26:2c:b5:b0:04:0a:48:28:5d:78:21:1a:cd:7e:da:
f9:e6:0b:f1:1c:9f:97:5e:b0:20:92:2b:7c:3c:02:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EE:9B:3C:61:03:59:05:14:1B:9E:4E:AE:3F:5D:1B:63:A1:34:C8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/De6bPGEDWQUUG55Orj9dG2OhNMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.62.0/23
Signature Algorithm: sha256WithRSAEncryption
54:86:d2:b7:74:72:d5:e5:43:6f:31:98:9c:4e:4c:c2:a9:87:
31:ef:6f:e2:a8:4f:81:b1:4d:61:0a:36:e8:6c:c9:b8:4f:39:
19:ee:ec:f6:0b:70:b2:0c:56:40:65:03:04:38:d0:c4:48:59:
0d:31:4c:21:7e:49:24:7e:44:52:a7:55:f4:80:d8:14:27:bb:
ee:b8:56:ed:e5:02:91:4f:94:99:de:fe:8b:12:52:1b:28:10:
ef:f9:c6:a8:b0:1b:71:c2:bb:ea:4b:a8:bb:93:28:1d:8d:9c:
83:7f:7f:9d:7a:fa:28:ae:c8:73:45:e8:01:98:a2:98:f0:9d:
10:2b:9c:f9:e6:08:06:93:e2:57:57:f5:70:55:16:31:d6:85:
00:df:ac:87:25:50:25:d5:46:f2:5b:46:46:e0:b9:58:44:5b:
50:a6:79:37:0c:55:ac:91:bf:8a:50:70:42:d6:25:37:ba:f3:
39:bd:2f:6e:c4:ba:53:e0:18:2a:6f:a5:e3:a2:d3:6d:3a:40:
91:a3:31:d8:37:87:43:fc:21:5f:fe:b4:2f:0e:4d:31:4e:5f:
cc:67:64:7d:0f:2a:65:b9:15:48:4d:b8:80:6c:45:9c:67:39:
28:1e:18:61:f8:72:47:cf:ac:5e:5a:07:88:26:cb:f2:92:64:
9e:80:66:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:21:52 2026 by rpki-client