Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/OEUymYHTXl2WJU0MdMTLTpXfL8s.roa
File: OEUymYHTXl2WJU0MdMTLTpXfL8s.roa (raw, json)
Hash identifier: uNoHTaSwZ6HSJnAxHkSgmtD147XEQHnjL5KKygOPMx0=
Subject key identifier: 38:45:32:99:81:D3:5E:5D:96:25:4D:0C:74:C4:CB:4E:95:DF:2F:CB
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 019E91C95000B8CA2A09404ADF73AD4EFE1C
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/OEUymYHTXl2WJU0MdMTLTpXfL8s.roa
Signing time: Thu 04 Jun 2026 08:39:09 +0000
ROA not before: Thu 04 Jun 2026 08:39:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.149.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jun 2026 09:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:c9:50:00:b8:ca:2a:09:40:4a:df:73:ad:4e:fe:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jun 4 08:39:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3845329981d35e5d96254d0c74c4cb4e95df2fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:a4:a2:b5:04:d4:e2:6e:6b:d9:c6:e7:1f:
a0:e9:6b:7b:83:55:f2:b1:1b:df:9c:c1:1c:8a:4d:
1a:81:65:4f:1f:ec:e9:3d:6e:b5:ed:e2:a6:52:f7:
b0:4a:1f:b2:c8:9c:36:92:37:00:d2:55:52:90:6f:
a7:ff:31:4d:06:c8:c1:de:f0:40:da:97:2b:c9:8c:
84:86:24:36:77:1a:54:1a:f9:dd:ab:25:58:54:c8:
6e:db:f3:4e:d5:4a:1f:d8:fe:3d:27:f8:4d:10:6d:
0f:3d:fe:49:f3:3e:18:f8:15:84:88:57:ed:ba:31:
a9:bb:67:e1:9f:8b:29:e0:24:c9:a6:89:08:8b:9b:
92:33:d9:65:86:61:5f:ad:c1:fc:96:f5:ae:36:ee:
2a:da:fb:15:2d:e0:e2:14:35:b8:2e:31:2d:22:31:
53:07:24:65:c2:1e:f5:25:c6:cd:ed:6d:1c:95:59:
63:5e:62:94:8c:fa:90:a2:97:50:af:eb:2f:24:6c:
5e:16:bc:a5:3f:9d:ba:81:f4:43:9a:ee:ab:f0:18:
88:71:11:50:f0:56:fc:0d:69:2d:27:c2:57:c8:4a:
c4:f1:80:6f:d9:d0:58:8c:c9:be:b8:eb:a9:3b:2d:
30:80:be:50:0e:09:2e:15:a6:86:64:c2:8d:15:56:
82:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:45:32:99:81:D3:5E:5D:96:25:4D:0C:74:C4:CB:4E:95:DF:2F:CB
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/OEUymYHTXl2WJU0MdMTLTpXfL8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.149.63.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c5:0e:78:1a:54:b4:07:c8:07:a1:a8:f5:c7:c1:27:3d:87:
1b:7b:f9:a5:e0:e8:bd:6d:fe:c0:ce:45:c0:20:ae:b8:49:83:
38:ce:28:40:93:9c:b7:7d:09:f2:73:9e:7f:58:a6:b2:28:c8:
87:a2:4a:3e:92:3d:3a:34:2c:d0:21:8e:3d:7a:c2:28:62:1c:
7b:59:99:6f:2a:c1:b1:99:b9:b0:7b:1e:bf:e4:09:ed:d1:1b:
9f:66:8a:56:01:9d:98:55:75:8b:96:de:15:99:d0:e6:e8:39:
85:92:3e:47:f3:f3:25:cf:49:70:40:79:91:dd:d2:77:ca:fb:
b2:19:88:b9:b8:2e:12:fb:6a:da:7d:12:a2:d0:e4:9e:03:b8:
3e:13:d3:49:29:f9:88:3f:a0:40:22:a6:11:e6:74:59:44:ec:
e2:a7:19:d4:f2:0a:1c:44:7e:38:e4:11:2f:44:2f:18:e6:74:
d4:82:1d:3e:d5:14:1f:4e:78:12:4c:c0:00:66:31:cc:5b:43:
3c:9c:a0:e2:3c:33:60:ae:19:70:f2:a8:e2:65:ae:8f:25:79:
fd:7f:01:ee:33:30:cd:e1:ec:1f:3b:f3:a4:ae:06:c0:ab:68:
ee:d7:79:0f:7d:34:c0:3b:5f:14:22:69:41:89:39:c9:75:02:
da:9c:d8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:04:29 2026 by rpki-client