Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RGve6XfeDRpJI53QFd3NIvGJ3Bg.roa
File: RGve6XfeDRpJI53QFd3NIvGJ3Bg.roa (raw, json)
Hash identifier: ck9N8+dbRcVC1rgN1VdFWBHghyRmjY9Y9QAlHj21AtI=
Subject key identifier: 44:6B:DE:E9:77:DE:0D:1A:49:23:9D:D0:15:DD:CD:22:F1:89:DC:18
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019CB5A44323140B7FBC202E4A7D96FBD355
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RGve6XfeDRpJI53QFd3NIvGJ3Bg.roa
Signing time: Tue 03 Mar 2026 21:39:27 +0000
ROA not before: Tue 03 Mar 2026 21:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 14.102.234.0/24 maxlen: 24
43.242.138.0/24 maxlen: 24
43.242.139.0/24 maxlen: 24
45.151.140.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
89.106.14.0/24 maxlen: 24
89.106.16.0/24 maxlen: 24
89.106.18.0/24 maxlen: 24
89.106.21.0/24 maxlen: 24
89.106.22.0/24 maxlen: 24
94.229.208.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
103.41.44.0/23 maxlen: 24
103.47.59.0/24 maxlen: 24
124.158.112.0/24 maxlen: 24
124.158.114.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Mar 2026 20:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b5:a4:43:23:14:0b:7f:bc:20:2e:4a:7d:96:fb:d3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 3 21:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=446bdee977de0d1a49239dd015ddcd22f189dc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:74:46:28:00:c6:33:20:37:33:46:ab:1a:
a1:8d:63:28:fa:4b:30:23:14:09:12:4e:9a:0c:a7:
16:c0:bd:88:70:0a:56:4a:90:3a:0e:29:92:cb:20:
1c:f7:bb:37:7e:3b:4c:d0:77:c5:73:05:de:5d:88:
4e:9c:d8:46:21:05:e0:81:e7:c5:40:39:24:0f:90:
e5:50:c0:5f:6a:68:66:ef:fd:54:4c:da:06:d8:da:
8e:ae:a3:ca:f1:59:2d:13:38:65:b9:e0:9f:ed:e2:
f7:c5:25:fa:98:0e:5b:3a:d2:c4:2f:5e:c6:eb:f8:
e6:df:6d:88:47:a8:25:00:39:6b:c2:db:04:8b:54:
99:0d:97:4f:5f:f2:d2:86:23:f1:6d:5c:1e:8b:37:
c4:f4:78:7a:49:79:e9:90:44:11:d3:5f:1f:20:82:
05:8a:4a:7d:ca:67:d4:f9:12:49:07:23:66:07:c0:
ca:03:ff:23:b4:43:b2:55:5e:b2:d4:ee:38:59:28:
6e:b7:5c:a4:52:95:03:24:82:d5:d2:27:16:1b:4c:
ee:fa:da:cc:3e:ff:92:1e:4b:7e:da:4b:6d:a6:00:
7f:3a:e4:b3:3c:ac:a6:56:44:0e:66:3e:0c:35:3d:
aa:ab:06:b5:e8:82:67:9e:be:3f:b6:42:bb:dc:ce:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6B:DE:E9:77:DE:0D:1A:49:23:9D:D0:15:DD:CD:22:F1:89:DC:18
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RGve6XfeDRpJI53QFd3NIvGJ3Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.234.0/24
43.242.138.0/23
45.151.140.0/24
77.111.96.0/22
77.111.102.0/23
77.111.105.0/24
89.106.14.0/24
89.106.16.0/24
89.106.18.0/24
89.106.21.0-89.106.22.255
94.229.208.0/24
94.229.213.0/24
94.229.222.0/23
103.41.44.0/23
103.47.59.0/24
124.158.112.0/24
124.158.114.0/24
194.36.33.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:47:4e:a3:47:86:11:56:03:59:2f:39:9e:1a:6f:ab:3d:77:
13:35:2a:bf:bf:3b:09:35:29:d9:0a:4b:dd:a9:d3:d4:d6:04:
14:8a:08:2e:63:97:ca:c5:16:fc:a8:55:21:44:bb:db:09:ca:
98:36:1e:1d:27:97:2f:3b:e1:af:1d:03:50:65:fe:48:83:0f:
2d:4c:c5:7c:f6:cb:d0:fb:04:52:ab:cc:da:61:ab:6c:8d:0e:
c2:fc:9f:14:67:78:a1:01:66:f2:3b:a8:c5:71:93:0d:6f:60:
ed:f8:00:2e:7b:87:ee:83:f3:b3:78:fb:3d:50:97:68:31:71:
9e:b9:13:af:98:07:cb:b6:1f:0f:b3:44:ab:77:f5:12:94:d6:
45:cc:d7:87:02:37:cd:19:14:be:32:f8:66:bb:44:85:fb:a6:
75:3e:76:c4:2d:c8:6a:0f:c6:d8:f8:91:b1:7c:b1:e7:69:46:
6a:ba:1f:43:71:85:cf:f4:5b:8e:38:fa:d3:a1:63:a3:28:75:
eb:a8:37:23:8e:59:27:ce:33:01:96:37:14:21:98:47:43:e3:
bc:44:1c:53:07:d7:fe:72:b1:73:44:f8:ac:b3:c1:f9:4f:19:
0c:08:f1:30:b8:b8:b4:d2:90:74:12:3a:3c:f3:03:d9:99:7c:
18:4a:90:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 14:13:34 2026 by rpki-client