Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/L8ZJml2v5HNOw2j8f0qpDnxEECs.roa
File: L8ZJml2v5HNOw2j8f0qpDnxEECs.roa (raw, json)
Hash identifier: nNa4lHdsmDkcJUPuKU1trLHZQECqD4STkPlOFXqouH4=
Subject key identifier: 2F:C6:49:9A:5D:AF:E4:73:4E:C3:68:FC:7F:4A:A9:0E:7C:44:10:2B
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0D2AC849636CDADE5DF38A0E2B0A5BAFE
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/L8ZJml2v5HNOw2j8f0qpDnxEECs.roa
Signing time: Thu 24 Sep 2026 09:08:36 +0000
ROA not before: Thu 24 Sep 2026 09:08:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 77.241.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 11:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:ac:84:96:36:cd:ad:e5:df:38:a0:e2:b0:a5:ba:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 24 09:08:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fc6499a5dafe4734ec368fc7f4aa90e7c44102b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:a5:4b:ef:55:b7:02:70:ea:37:27:a1:9e:
b8:01:77:1a:93:ee:34:f2:8a:09:18:6b:c0:9e:28:
04:92:cc:cd:88:ef:54:08:b0:29:4c:b8:67:0b:ad:
14:93:a4:9c:6a:51:fd:3e:a6:bf:62:c2:d8:86:eb:
3e:24:0a:64:39:c0:83:bf:a7:98:a9:40:06:1d:1f:
4f:44:a1:d9:0e:66:e8:b4:89:8f:f0:b3:b5:03:92:
92:a9:60:8e:1c:5f:9b:af:94:b2:dd:db:e0:ac:43:
f5:80:3c:d7:a9:59:2c:a4:de:db:4b:7d:cf:0d:7b:
27:73:4b:04:e2:e9:20:37:df:a0:4a:25:d6:26:7b:
49:f0:74:61:2b:4a:90:36:6c:69:a5:b2:c9:14:6e:
4d:90:35:77:5b:6b:8e:36:4a:88:64:a5:d8:91:8c:
dd:7b:5b:6f:97:43:e6:4b:13:32:3a:c0:e4:47:ba:
c8:6d:a5:2e:16:c3:e5:0d:1c:5a:9d:19:81:97:82:
3d:4e:37:7d:e3:73:92:91:f7:3d:a2:19:9f:a5:db:
c3:cb:89:9a:72:fb:20:79:df:9a:5f:f0:97:c1:4e:
08:d0:e8:dc:60:05:5e:30:17:d2:d7:7a:ac:cb:23:
05:95:63:b7:a0:3d:cf:c4:38:76:ac:db:f3:6b:4d:
d8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C6:49:9A:5D:AF:E4:73:4E:C3:68:FC:7F:4A:A9:0E:7C:44:10:2B
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/L8ZJml2v5HNOw2j8f0qpDnxEECs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.75.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b8:16:01:e5:80:f0:c4:43:c1:23:b3:3a:be:e5:15:86:52:
5d:2a:3e:47:5c:b8:bc:70:47:ba:51:1d:c9:0c:d7:9a:0e:fc:
2a:cc:58:12:d2:13:a2:2d:82:0a:74:68:5e:c3:8d:ca:31:cd:
92:dd:8d:cd:76:74:cf:c7:b9:bd:b5:71:fc:06:12:19:2a:33:
f9:1e:5f:ba:78:35:3f:db:2e:12:70:c1:15:56:18:63:75:3a:
0e:58:03:e2:0b:83:8b:d5:38:8b:ea:b4:52:d1:03:94:e4:71:
85:ca:5c:e9:01:d8:49:77:4e:ef:d8:18:50:c0:af:5c:27:06:
fe:40:9d:34:f0:39:50:67:34:2c:b4:6b:ee:57:ed:ae:20:23:
63:45:00:b2:31:4f:ac:39:da:d5:07:c9:bd:a1:d1:c7:9c:67:
1a:31:fb:70:dd:59:92:0a:b8:8c:55:79:c4:1f:f8:c2:63:0a:
ae:ec:63:88:65:ad:76:09:0e:18:ad:f5:3a:05:6f:37:24:d1:
98:cb:eb:1b:ee:75:b5:db:0f:b1:53:06:35:b2:a3:05:7f:cf:
a5:f1:c2:a7:b1:63:ac:c3:6a:78:a9:35:a0:f0:76:34:4f:71:
8e:43:ee:68:ad:90:74:05:2b:d9:5e:59:d3:3a:8b:92:58:dc:
27:7d:23:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:45:23 2026 by rpki-client