Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/heCe4EQlWIMPzCh6TGSh-h1AJUo.roa
File: heCe4EQlWIMPzCh6TGSh-h1AJUo.roa (raw, json)
Hash identifier: +VXaXfDfpKQb7z85beUiRzEGcjIACOEejabup9xCngs=
Subject key identifier: 85:E0:9E:E0:44:25:58:83:0F:CC:28:7A:4C:64:A1:FA:1D:40:25:4A
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019E6D12C5AE08B17FFA6A73E06F44FF217B
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/heCe4EQlWIMPzCh6TGSh-h1AJUo.roa
Signing time: Thu 28 May 2026 05:33:27 +0000
ROA not before: Thu 28 May 2026 05:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.23.82.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
185.157.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jun 2026 05:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:12:c5:ae:08:b1:7f:fa:6a:73:e0:6f:44:ff:21:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: May 28 05:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85e09ee0442558830fcc287a4c64a1fa1d40254a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2a:04:74:66:51:47:21:fd:57:cc:bb:b3:36:
d3:18:97:1e:f8:7a:b9:15:fd:4f:fc:1f:2c:33:94:
dc:4a:28:f3:91:56:44:6e:3e:cb:27:01:df:68:27:
80:72:0f:fe:dc:4a:d3:84:b1:15:74:d3:8f:73:fc:
5f:94:6a:6d:b7:9e:8b:10:14:84:0d:23:d5:50:27:
6c:22:77:40:d6:5e:31:1b:51:e0:2b:c0:18:18:c4:
c5:a3:e2:83:33:dd:2d:ea:8a:64:3f:22:66:58:1f:
a3:42:b8:65:f8:0a:e6:0e:7c:90:00:1c:c9:d0:e8:
05:e2:8d:1a:fe:8a:ad:e9:0a:32:44:22:d0:47:9b:
ca:04:48:a3:31:e3:28:09:79:4c:08:aa:1a:f8:ab:
fd:55:d2:f7:62:04:4e:69:5f:df:ef:4c:c9:e0:75:
1b:28:06:c7:40:bc:a8:ef:0c:84:a5:3e:2a:76:ae:
52:6f:48:f1:17:bb:c0:51:99:fa:09:36:77:6a:1a:
23:90:67:bd:b0:18:36:96:6b:5d:db:d3:be:9d:39:
78:81:ce:39:b4:3b:02:5a:46:b9:0d:30:05:62:4b:
b8:5c:f4:55:bf:a2:15:83:2a:67:03:a6:e2:0e:5e:
d2:69:36:d9:83:2e:ea:5b:3e:42:c6:83:a8:ca:65:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E0:9E:E0:44:25:58:83:0F:CC:28:7A:4C:64:A1:FA:1D:40:25:4A
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/heCe4EQlWIMPzCh6TGSh-h1AJUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.82.0/24
89.23.93.0/24
185.157.46.0/24
Signature Algorithm: sha256WithRSAEncryption
74:35:25:4b:a2:d1:17:c5:61:85:59:5c:cf:d0:ed:e0:4f:72:
4f:8b:70:28:52:7b:e6:05:fa:1b:13:5d:4b:f6:84:d1:f4:ca:
34:c4:4c:7a:e0:f8:50:29:33:da:4a:fd:36:17:df:d9:00:04:
66:02:f8:ee:95:50:0c:58:87:65:6f:69:08:1e:f9:4c:fe:df:
24:4b:bb:8c:9e:eb:27:ac:59:8b:b5:09:46:7a:a2:27:cc:a0:
7b:3f:29:bf:0b:d0:30:45:f6:c8:f0:61:21:bb:35:52:88:59:
3a:d5:63:d5:ec:ed:13:d4:ac:88:15:41:15:d6:51:c2:65:36:
b5:c9:28:87:11:ab:ca:39:f5:8f:8f:3a:ce:21:f5:67:f3:36:
90:46:84:55:ef:ea:7b:ad:5c:91:23:e3:4e:50:2b:95:07:c4:
0b:f3:0f:8e:4b:fe:56:9b:25:b3:ee:71:c0:46:4a:8c:c9:57:
84:62:ae:8b:c5:cf:26:80:3f:59:85:d6:95:5d:58:36:a6:0a:
7d:57:89:b3:75:75:91:b9:55:a5:a5:84:83:ab:a6:53:aa:1c:
8d:e6:dc:f5:c2:f3:c9:4a:96:48:19:bd:bc:55:9f:aa:7c:9a:
2d:d5:3d:47:49:16:11:0f:62:64:61:f6:6f:36:2c:3d:c1:95:
2b:b5:89:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:05:25 2026 by rpki-client