Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ynURAhOoMBn4MWyuMWLJ58N49oU.roa
File: ynURAhOoMBn4MWyuMWLJ58N49oU.roa (raw, json)
Hash identifier: sNSuHPVdI351lnA4iwiA0gBiwukeWXtFLDexVGe77Tc=
Subject key identifier: CA:75:11:02:13:A8:30:19:F8:31:6C:AE:31:62:C9:E7:C3:78:F6:85
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019E83C4B603E56A94F939FC68EC2375DE6C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ynURAhOoMBn4MWyuMWLJ58N49oU.roa
Signing time: Mon 01 Jun 2026 15:19:27 +0000
ROA not before: Mon 01 Jun 2026 15:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 89.106.14.0/24 maxlen: 24
89.106.16.0/24 maxlen: 24
89.106.18.0/24 maxlen: 24
89.106.21.0/24 maxlen: 24
89.106.22.0/24 maxlen: 24
94.229.208.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jun 2026 16:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:c4:b6:03:e5:6a:94:f9:39:fc:68:ec:23:75:de:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 1 15:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca75110213a83019f8316cae3162c9e7c378f685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:36:7f:9c:26:32:8a:a3:9c:d7:25:46:1f:
d6:b9:0e:17:3a:f6:f4:5f:d3:cc:db:6b:d9:d1:a7:
ab:86:0d:fe:d4:d8:1e:ea:75:49:4c:28:33:2b:09:
f0:c4:a5:2d:78:51:eb:ef:12:79:a6:29:42:25:ac:
d0:ae:a8:e8:2b:1e:a6:57:48:c2:c0:5e:e5:92:db:
21:ee:fd:6b:56:82:e4:4a:e0:43:6c:bf:a7:d1:be:
df:15:22:f4:08:37:a3:5e:67:b9:66:a2:10:08:62:
bf:43:dd:3e:5c:c2:38:1b:a1:7a:61:5b:13:a4:2c:
96:77:2d:9b:6d:a4:35:02:36:fc:c3:51:c0:7d:4f:
c5:86:5f:87:ab:90:b3:7f:6b:70:29:0d:13:de:0d:
31:a4:01:d3:5b:a1:72:53:4b:65:e6:d1:a3:f5:82:
99:e4:54:12:f3:3e:8e:f1:ba:2e:10:7a:29:2b:db:
b0:53:69:b8:3e:94:12:c3:9b:21:41:6f:62:50:f5:
5c:2e:c1:4b:5d:0b:87:8a:87:10:31:5a:31:7c:15:
52:61:2f:d5:40:2a:9d:05:05:5e:3a:7e:b5:5e:dc:
1d:67:6a:4e:19:b9:df:85:b1:a7:7e:63:6d:e0:42:
8f:1d:33:4b:ed:3d:e0:c9:cc:fb:82:5d:1c:68:b6:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:75:11:02:13:A8:30:19:F8:31:6C:AE:31:62:C9:E7:C3:78:F6:85
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ynURAhOoMBn4MWyuMWLJ58N49oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.14.0/24
89.106.16.0/24
89.106.18.0/24
89.106.21.0-89.106.22.255
94.229.208.0/24
94.229.223.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:fb:f7:bf:69:7e:7b:ec:36:a7:59:80:60:5e:0d:ea:77:5a:
14:3e:ef:83:7f:c4:e8:a8:73:b5:c2:a6:de:c3:a5:af:9c:a6:
4f:00:96:f5:f3:2c:0f:ab:0c:a0:0b:6a:81:31:8f:4a:c1:c6:
4e:c2:af:e5:32:ed:0c:fc:9e:d0:55:e6:ec:c5:1c:bf:33:c0:
4d:42:3d:31:45:a1:56:a9:4b:38:22:b1:8d:8f:40:a5:53:86:
da:4b:ca:ff:f8:54:3c:d2:ac:9b:2e:a1:89:d1:60:92:41:30:
93:f0:29:0a:24:e0:1a:1a:88:b7:47:40:1b:02:76:2a:8e:f1:
13:b3:b1:3b:a6:59:6b:ef:3d:1c:71:38:c0:cb:e8:c9:5d:e1:
ff:85:f8:1d:bd:80:b7:c2:e4:d7:20:98:c6:32:c2:64:90:b7:
ca:3b:d8:62:4e:3c:54:42:d7:10:cf:cb:c5:89:8e:02:61:06:
ca:59:42:cd:fd:9d:1e:9a:5f:24:22:67:6b:60:29:b4:d2:91:
ff:f7:aa:58:d4:80:1d:dd:4c:35:f3:7b:d2:a7:f1:18:63:a1:
4c:a8:90:d3:ce:1d:9e:7e:fe:7c:22:67:4f:f1:df:4d:fe:11:
b2:4a:68:4a:4f:6e:ef:cc:0a:e0:35:17:d7:5c:8b:32:45:0f:
34:fb:3a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 06:15:16 2026 by rpki-client