Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7nCV8D4lGDGQqWqxlWXaWHgdmj4.roa
File: 7nCV8D4lGDGQqWqxlWXaWHgdmj4.roa (raw, json)
Hash identifier: oGpH9o/36Lc/7enr+oLAWpOvtTwpE8ZmDhmPs7yJx0k=
Subject key identifier: EE:70:95:F0:3E:25:18:31:90:A9:6A:B1:95:65:DA:58:78:1D:9A:3E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A143EE538D93342030F4EB75FA8B972E7E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7nCV8D4lGDGQqWqxlWXaWHgdmj4.roa
Signing time: Fri 16 Oct 2026 08:57:34 +0000
ROA not before: Fri 16 Oct 2026 08:57:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 185.108.205.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Oct 2026 11:20:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:ee:53:8d:93:34:20:30:f4:eb:75:fa:8b:97:2e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 16 08:57:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee7095f03e25183190a96ab19565da58781d9a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3e:ef:17:5c:0d:b8:1b:0b:25:c9:ad:42:3d:
04:55:d2:78:16:99:0b:c3:73:02:32:74:3f:1c:c1:
d6:ed:b7:b6:f3:69:8f:14:56:a3:d6:e5:d3:9b:c8:
fd:34:9b:20:77:9b:b9:8e:22:20:8e:1f:fd:26:06:
13:5b:82:53:87:c3:f5:75:ea:1a:79:ef:75:7e:6b:
31:87:c5:60:76:02:80:81:19:42:de:4a:24:1a:b0:
1b:c9:f4:3a:32:12:97:30:12:6f:06:5d:20:fd:7a:
62:a5:c1:70:5a:b0:1a:2f:42:39:58:f8:8d:e5:bd:
24:24:bc:57:13:9b:88:e2:6f:eb:31:78:80:60:df:
f4:d7:a0:e1:2d:f9:d6:35:44:7c:16:55:c6:03:f7:
50:c2:95:17:cc:58:a0:1e:d9:85:e6:82:39:6e:76:
eb:87:a0:1e:33:23:b9:1a:97:eb:aa:ea:85:61:cb:
34:b3:0b:f9:31:f5:39:94:64:6e:73:2b:22:21:e0:
8d:53:72:d5:39:31:b2:13:06:91:b2:65:97:44:a9:
b4:3a:0a:ec:0f:2b:e3:ad:18:0f:df:29:49:41:86:
60:25:70:19:80:6b:e4:ab:df:bc:82:c0:0f:a7:0d:
c9:79:80:b1:63:37:92:4a:b0:cc:0a:26:d2:b6:14:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:70:95:F0:3E:25:18:31:90:A9:6A:B1:95:65:DA:58:78:1D:9A:3E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7nCV8D4lGDGQqWqxlWXaWHgdmj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.205.0/24
185.225.21.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:f9:94:61:1f:98:c4:35:c5:a8:b0:9f:23:04:61:2c:8d:1e:
36:cc:29:8a:0e:a5:62:bd:53:c2:60:81:93:56:1a:ad:7f:f9:
72:97:61:62:00:5c:4d:78:fc:5e:02:ac:a6:b9:8b:b4:b5:8d:
4d:07:84:bb:1d:06:18:26:c1:d7:26:d3:70:66:4f:d9:b3:80:
67:7f:76:c6:5d:48:33:0d:d4:0a:5b:22:ec:76:db:c4:77:40:
00:80:cd:5a:80:1e:81:94:e4:87:2b:59:ef:9d:f6:53:5a:04:
d6:e6:77:38:53:56:b8:f6:a9:e0:4f:c2:ff:d7:6b:df:5a:ff:
1e:49:e7:00:f4:f0:cf:0c:26:21:66:03:3f:d6:72:bb:f6:a1:
b1:ea:b3:e6:2a:44:57:37:82:e7:bb:fa:53:b4:32:b9:7a:32:
36:e4:83:02:03:ae:2b:90:6c:b8:d5:1f:89:2b:63:30:70:25:
f7:e9:db:05:0c:a7:42:e5:38:c2:fa:26:e5:42:76:28:52:57:
ca:61:76:ed:37:7c:a6:13:dc:b6:63:d1:a3:61:dc:83:95:72:
ec:05:1d:fc:91:34:6b:d0:d6:63:63:0f:1f:b5:88:0d:1b:09:
77:df:ac:68:ce:7f:2c:67:16:64:09:6a:18:f6:d8:93:29:6a:
4d:81:73:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:57:55 2026 by rpki-client