Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/GgC7_bU60yWCupB4r11fxuaEAYo.roa
File: GgC7_bU60yWCupB4r11fxuaEAYo.roa (raw, json)
Hash identifier: mIj0xFf3U5dTjy4+IB5W4XNdyK2RUDsDyc9oP/srGQE=
Subject key identifier: 1A:00:BB:FD:B5:3A:D3:25:82:BA:90:78:AF:5D:5F:C6:E6:84:01:8A
Certificate issuer: /CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Certificate serial: 01A08B824C8AE965EDE31E1927F1D11EED07
Authority key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/GgC7_bU60yWCupB4r11fxuaEAYo.roa
Signing time: Thu 10 Sep 2026 13:29:27 +0000
ROA not before: Thu 10 Sep 2026 13:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218751
IP address blocks: 87.192.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 07:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:82:4c:8a:e9:65:ed:e3:1e:19:27:f1:d1:1e:ed:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Validity
Not Before: Sep 10 13:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a00bbfdb53ad32582ba9078af5d5fc6e684018a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:ff:df:2e:80:f1:5c:e1:01:58:fe:0b:ce:
4f:eb:d0:ea:6d:e7:39:44:f2:66:9d:51:0c:91:a3:
50:79:cb:b9:c2:fb:f3:3b:10:92:ce:a1:25:03:e4:
33:1a:93:13:94:62:ae:e1:f5:a5:ab:f3:b4:de:b1:
9d:38:83:2e:35:86:2e:ae:17:70:86:89:f6:f0:d6:
f2:95:0a:54:04:b8:e2:dd:f6:78:48:8d:37:c7:04:
62:42:83:e3:19:fb:1a:62:af:db:5b:15:37:6a:fa:
8c:81:be:29:96:4a:20:45:30:9d:2c:e0:4f:87:62:
2a:c3:08:76:8f:de:03:a6:85:87:79:8f:84:be:e3:
00:ee:11:65:92:d5:99:b4:bc:46:2d:56:8a:a0:de:
40:e4:3f:63:c1:f8:80:ba:f0:ff:3d:a0:dd:92:89:
2e:6b:1a:ee:99:a9:a2:47:ba:8d:76:15:ec:b0:2f:
5c:0e:2e:ae:92:16:4b:41:4c:fd:ce:65:17:45:30:
e9:05:55:49:8d:d6:82:aa:80:b6:93:44:8c:ad:ed:
ca:7c:ec:f1:f6:96:38:91:17:90:a4:87:db:53:b6:
3e:1d:40:37:13:bd:67:60:92:1e:e2:b3:22:a0:4d:
01:25:ea:3a:fb:1c:43:40:29:2d:8d:7e:f4:5b:af:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:00:BB:FD:B5:3A:D3:25:82:BA:90:78:AF:5D:5F:C6:E6:84:01:8A
X509v3 Authority Key Identifier:
keyid:E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/GgC7_bU60yWCupB4r11fxuaEAYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.41.0/24
Signature Algorithm: sha256WithRSAEncryption
96:68:6b:d5:9e:4a:6c:c2:ca:ab:3a:32:3b:f6:3c:48:48:e8:
61:41:a5:3f:ac:35:7b:3b:c8:a6:63:97:13:80:02:85:1c:aa:
43:bd:c6:a2:6f:57:a3:29:f7:c9:c8:82:9b:4a:55:e9:5e:b1:
77:83:26:16:48:a2:6d:76:6b:08:5e:f9:5a:4e:6b:f8:53:0c:
a6:5a:1d:e2:a7:89:3d:9a:6f:54:9e:c9:08:89:2e:96:4c:e8:
90:b4:6c:78:b9:19:f0:de:82:1c:87:41:a4:f9:18:d2:78:ba:
ff:f8:21:00:6c:fd:92:bf:d6:d3:82:ed:55:2a:b1:29:0d:13:
b4:88:bf:0b:a7:1c:50:08:7e:c8:24:c3:94:e3:9e:50:14:4f:
80:83:94:17:ca:8f:a5:46:5b:98:70:75:15:65:67:c9:cb:d8:
c0:21:c2:6c:a7:f0:40:8b:21:5b:26:49:c1:48:18:2e:1a:3e:
52:56:8c:46:fe:f5:28:2c:df:6b:27:a7:89:de:1b:b3:5b:40:
88:1a:92:01:e5:c8:56:5a:30:af:46:5f:f8:c5:fb:ab:6f:93:
5c:d2:95:9b:82:85:14:ff:51:66:40:b1:09:b6:6e:76:cc:38:
7a:29:cd:ff:ff:e9:25:0a:35:3f:51:bc:6d:a2:c9:a7:50:7a:
72:3f:ea:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:29:46 2026 by rpki-client