Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pNpHEmOiCqFLHMGf6rTXuELx3Rg.roa
File: pNpHEmOiCqFLHMGf6rTXuELx3Rg.roa (raw, json)
Hash identifier: nouAnSW/4ujX6CP2BS1lPvzfStB0vFX2NvhcYZOQwd4=
Subject key identifier: A4:DA:47:12:63:A2:0A:A1:4B:1C:C1:9F:EA:B4:D7:B8:42:F1:DD:18
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019CAF85CC806427402109BB3D3E5BC16CB8
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pNpHEmOiCqFLHMGf6rTXuELx3Rg.roa
Signing time: Mon 02 Mar 2026 17:08:27 +0000
ROA not before: Mon 02 Mar 2026 17:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 74.112.152.0/22 maxlen: 24
94.229.212.0/24 maxlen: 24
103.41.46.0/23 maxlen: 24
205.237.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Mar 2026 01:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:85:cc:80:64:27:40:21:09:bb:3d:3e:5b:c1:6c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 2 17:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4da471263a20aa14b1cc19feab4d7b842f1dd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:28:34:3a:89:a9:cd:b8:fe:5e:49:ca:57:
5e:c5:a1:7f:a6:a0:da:e6:55:ad:3c:4a:5d:86:fa:
e8:9b:f5:ea:dc:7e:40:93:68:14:ae:fd:51:98:5f:
42:49:b5:fe:c4:1d:43:a1:a7:0e:cd:ab:ab:42:f5:
3b:18:84:bc:4f:1e:3f:77:fe:ac:98:08:60:f3:aa:
53:64:b2:1f:e3:0a:65:cf:22:3f:3f:ea:b7:56:dd:
19:ce:58:b2:62:82:6a:35:61:f2:ef:e0:32:30:3e:
00:21:9a:61:1b:15:80:5d:00:c9:8e:e3:53:a3:89:
dd:83:24:5b:45:64:c6:0e:8b:ff:b3:2c:14:e7:e1:
36:e3:1d:04:d5:6e:17:aa:fc:e9:e1:54:a0:a3:71:
fa:1a:f4:f8:f2:d1:29:0b:6d:c0:80:c4:d7:e9:0b:
bf:f0:15:3d:3b:8f:ce:83:53:3a:de:b4:fc:46:22:
5a:a5:56:62:df:b5:fe:e3:03:63:44:36:df:92:24:
e2:73:4d:29:d1:35:5c:29:d6:a0:63:08:8e:4d:b8:
75:7b:4f:69:de:cf:13:0b:a6:89:84:ca:b4:e3:85:
b4:6e:ad:5a:67:68:58:2c:a2:3b:2e:8d:34:e6:b8:
bf:e4:32:25:89:82:cf:7d:3b:5b:25:0d:8f:30:ca:
b8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DA:47:12:63:A2:0A:A1:4B:1C:C1:9F:EA:B4:D7:B8:42:F1:DD:18
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pNpHEmOiCqFLHMGf6rTXuELx3Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.112.152.0/22
94.229.212.0/24
103.41.46.0/23
205.237.88.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:8f:ff:c6:3b:7d:0b:cc:73:ae:44:b9:1b:69:f8:19:d7:68:
54:cb:1d:88:f6:9e:0b:48:df:ea:95:ef:98:be:e2:e3:52:0d:
59:5b:c5:98:0f:d5:27:d2:c8:fc:c7:44:9d:88:25:7e:51:a1:
6a:ef:6e:82:f0:12:ea:d5:2a:9e:8c:47:ba:c8:ae:60:52:ed:
20:17:5a:e4:d9:a3:3f:56:dd:c4:53:85:de:8b:19:a9:12:86:
32:42:1b:87:cf:c9:65:15:c4:20:ea:35:38:52:e1:48:7c:24:
c2:31:a8:ac:2f:cc:96:18:e2:3e:cd:d9:bb:cb:14:22:e4:b5:
07:dd:4f:79:2b:db:2b:6a:82:a1:96:b5:e8:81:dd:ec:77:78:
63:41:73:c4:72:95:a5:fc:4c:74:a0:11:bf:09:a3:bb:29:b0:
c9:54:bc:7a:00:11:80:93:f0:8b:2e:78:b8:20:dd:6a:b7:66:
1b:f8:8a:7f:80:e4:86:42:7f:72:ea:31:5a:84:94:b5:f4:0d:
47:6e:b8:db:f2:ed:22:2c:37:9d:71:54:ed:7a:c9:20:68:a6:
09:e1:d5:e1:9b:13:90:0b:6c:6a:18:87:0d:75:af:27:ad:c8:
6f:e7:cf:69:b9:d6:18:4b:1e:1c:45:fa:d8:70:20:98:a7:15:
53:84:c1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 14:14:33 2026 by rpki-client