Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ErcDssqhD3eAp1TkTdv2shjyAMs.roa
File: ErcDssqhD3eAp1TkTdv2shjyAMs.roa (raw, json)
Hash identifier: 0rllGOMRLHaud7pW/01Z0Rj9D/MAiWYu0hH2z8z4KUQ=
Subject key identifier: 12:B7:03:B2:CA:A1:0F:77:80:A7:54:E4:4D:DB:F6:B2:18:F2:00:CB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019E291402C49A819BF826162C708D78C9FC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ErcDssqhD3eAp1TkTdv2shjyAMs.roa
Signing time: Fri 15 May 2026 00:40:37 +0000
ROA not before: Fri 15 May 2026 00:40:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/24 maxlen: 24
93.123.100.0/23 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 May 2026 06:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:14:02:c4:9a:81:9b:f8:26:16:2c:70:8d:78:c9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 15 00:40:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12b703b2caa10f7780a754e44ddbf6b218f200cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:35:10:9a:45:f7:d2:2e:31:ab:6c:95:2a:
81:39:0e:de:b6:79:d7:c7:20:ae:da:ca:ea:01:04:
5a:b0:87:d3:1d:18:de:d0:4c:8a:ab:79:05:33:ab:
8c:ae:0c:4c:0f:7e:1d:9a:8a:d6:65:5b:24:fc:76:
f9:31:cf:5b:7f:be:e5:f5:14:3c:e1:d6:23:dc:6b:
bc:6b:e6:96:db:71:5b:fa:e3:27:ae:eb:28:59:49:
a7:28:4b:80:fb:74:c5:a3:8d:96:b4:0c:3f:72:35:
d5:d2:0d:5f:c2:02:6d:59:6d:29:a6:df:3d:dd:a6:
7f:f7:aa:b7:0d:cb:35:7f:9f:1a:4d:ff:25:94:05:
8f:83:54:58:bd:59:de:e5:c0:bf:b5:d4:e7:fc:b2:
25:20:0b:96:5b:36:b3:85:38:26:ea:93:91:9f:82:
29:f6:f9:5c:7d:03:07:eb:04:0d:f4:2a:d6:28:dd:
77:11:d6:07:93:86:b6:cd:8f:41:9d:d6:88:57:97:
f0:34:f1:64:b6:08:40:df:b9:1b:ff:e7:fa:a8:70:
80:1a:fe:5d:dd:7c:9f:d2:0b:4e:14:26:ca:24:37:
bd:08:20:45:b6:08:ba:6c:05:d3:43:7b:31:b9:38:
02:09:72:24:e6:39:97:25:e7:89:5c:b7:fb:23:83:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B7:03:B2:CA:A1:0F:77:80:A7:54:E4:4D:DB:F6:B2:18:F2:00:CB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ErcDssqhD3eAp1TkTdv2shjyAMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/24
93.123.100.0/23
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
76:1e:8c:3e:c5:09:21:79:93:49:f5:a4:98:84:5d:91:b6:d6:
eb:9e:7e:15:a8:76:dc:a9:40:89:cb:c1:53:c0:41:6c:7f:91:
39:0f:80:9f:ab:d2:49:6b:11:1e:3e:10:89:74:47:36:0c:fe:
ef:0a:7c:43:36:cc:a2:0d:b1:ba:a7:74:6b:7d:6e:25:d4:79:
c6:cb:57:45:bd:54:13:49:18:49:dc:05:9f:32:3e:fa:5a:0f:
57:37:ab:07:83:e7:fc:37:a3:31:96:59:ff:f6:07:ee:7a:1b:
c2:3d:cc:aa:f0:a3:f1:bc:5d:d7:31:11:35:69:e3:7f:09:74:
6d:65:c7:c7:c1:af:12:7d:e9:10:5d:01:e3:33:46:1c:d9:7c:
be:aa:88:42:92:c0:ac:a7:d3:97:e2:36:c6:33:5c:5c:68:66:
4f:55:6f:a4:9c:ff:af:26:1a:f7:08:6a:dd:80:8a:54:0e:8b:
35:20:13:ad:46:5d:2c:ab:e7:93:07:b3:ba:f1:35:e6:dc:0b:
db:a9:56:ee:41:26:ab:9f:ff:e4:0e:18:b6:2a:f9:27:6e:2d:
25:e6:e6:f9:6b:ff:cf:21:98:08:32:df:09:bb:78:3d:ce:84:
59:4f:e1:bf:18:62:46:75:ec:34:d3:fc:a7:3d:f3:06:e5:0a:
ea:e9:2e:68
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ4pFALEmoGb+CYWLHCNeMn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNTE1MDA0MDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmI3MDNiMmNhYTEwZjc3ODBhNzU0ZTQ0ZGRiZjZiMjE4ZjIwMGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP81EJpF99IuMatslSqBOQ7etnnX
xyCu2srqAQRasIfTHRje0EyKq3kFM6uMrgxMD34dmorWZVsk/Hb5Mc9bf77l9RQ8
4dYj3Gu8a+aW23Fb+uMnrusoWUmnKEuA+3TFo42WtAw/cjXV0g1fwgJtWW0ppt89
3aZ/96q3Dcs1f58aTf8llAWPg1RYvVne5cC/tdTn/LIlIAuWWzazhTgm6pORn4Ip
9vlcfQMH6wQN9CrWKN13EdYHk4a2zY9BndaIV5fwNPFktghA37kb/+f6qHCAGv5d
3Xyf0gtOFCbKJDe9CCBFtgi6bAXTQ3sxuTgCCXIk5jmXJeeJXLf7I4NhDQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBK3A7LKoQ93gKdU5E3b9rIY8gDLMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRXJjRHNzcWhEM2VBcDFUa1RkdjJzaGp5QU1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV3hEAwQB
XXtkAwQBufygMA0GCSqGSIb3DQEBCwUAA4IBAQB2How+xQkheZNJ9aSYhF2Rttbr
nn4VqHbcqUCJy8FTwEFsf5E5D4Cfq9JJaxEePhCJdEc2DP7vCnxDNsyiDbG6p3Rr
fW4l1HnGy1dFvVQTSRhJ3AWfMj76Wg9XN6sHg+f8N6Mxlln/9gfuehvCPcyq8KPx
vF3XMRE1aeN/CXRtZcfHwa8SfekQXQHjM0Yc2Xy+qohCksCsp9OX4jbGM1xcaGZP
VW+knP+vJhr3CGrdgIpUDos1IBOtRl0sq+eTB7O68TXm3AvbqVbuQSarn//kDhi2
Kvknbi0l5ub5a//PIZgIMt8Ju3g9zoRZT+G/GGJGdew00/ynPfMG5Qrq6S5o
-----END CERTIFICATE-----
Generated at Fri May 15 08:17:45 2026 by rpki-client