Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ai8peH2c36gpeJMnWDwnUh5sE6E.roa
File: ai8peH2c36gpeJMnWDwnUh5sE6E.roa (raw, json)
Hash identifier: PYvPGQQfhflvzxqTQTgy4jiH7LuVAOUKyXFkYmx53b8=
Subject key identifier: 6A:2F:29:78:7D:9C:DF:A8:29:78:93:27:58:3C:27:52:1E:6C:13:A1
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D1A7C58955741CABDC1E801CD2CA9443E
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ai8peH2c36gpeJMnWDwnUh5sE6E.roa
Signing time: Mon 23 Mar 2026 11:37:29 +0000
ROA not before: Mon 23 Mar 2026 11:37:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48207
IP address blocks: 80.71.150.0/24 maxlen: 24
80.71.152.0/24 maxlen: 24
80.71.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Mar 2026 12:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:7c:58:95:57:41:ca:bd:c1:e8:01:cd:2c:a9:44:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 23 11:37:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a2f29787d9cdfa829789327583c27521e6c13a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:e6:af:fe:c7:37:93:1f:ee:29:7c:c4:72:
a5:42:bf:ee:1a:bd:94:c1:65:76:04:55:a2:25:74:
ea:a4:2c:99:a6:1a:aa:fa:27:b0:43:ed:b6:a6:3e:
28:ee:0a:23:14:c4:88:0f:43:84:ef:1a:d6:31:8e:
ce:6f:d6:39:e2:08:d0:14:d3:85:63:df:f1:ff:dc:
8f:fb:db:df:cb:a6:8b:d2:5f:47:f9:dd:a8:8b:f4:
69:9f:b8:27:60:2d:c9:a8:7a:d5:fe:90:ff:a4:9d:
7d:27:de:72:f9:d7:87:33:2d:da:5b:ae:2e:10:b0:
56:7c:b4:13:ce:29:12:30:f4:53:0e:da:a5:e6:9d:
25:50:ea:88:42:01:36:05:aa:fa:4e:fa:5a:81:6b:
43:ef:22:25:2d:4b:ae:e9:6e:d0:80:d3:fc:c5:03:
f2:a3:70:01:e7:f1:b4:60:9d:f7:f6:1c:16:0d:40:
96:a2:99:73:12:c9:c2:3f:a5:ea:27:09:50:bd:6c:
2a:99:97:ea:65:c5:5f:20:cc:00:68:41:7a:97:6f:
b6:c9:2a:65:8d:70:5b:ed:a3:b8:6a:a6:22:2b:4d:
26:22:74:b4:d3:00:8f:f6:60:5b:b5:74:e7:68:a8:
21:a6:70:12:0b:14:11:45:f1:4c:d1:2e:0c:fc:58:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2F:29:78:7D:9C:DF:A8:29:78:93:27:58:3C:27:52:1E:6C:13:A1
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ai8peH2c36gpeJMnWDwnUh5sE6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.150.0/24
80.71.152.0/24
80.71.159.0/24
Signature Algorithm: sha256WithRSAEncryption
23:71:b2:f0:03:df:ce:9e:be:5e:63:0a:0e:04:6b:aa:c6:82:
fe:48:d1:41:ae:67:b5:17:0b:7d:fb:3a:6e:ec:9e:23:03:45:
df:d0:64:3e:cb:85:c4:31:79:e1:c8:3d:4b:e7:77:4c:ce:61:
f4:3b:83:b0:6c:ee:49:17:de:ef:aa:8f:3a:bf:69:a8:43:f1:
31:2d:60:cc:c9:e6:af:89:aa:1e:f3:e2:21:f4:52:34:3d:a1:
a7:d7:e6:4e:75:a1:be:a2:0e:22:4b:55:d1:3a:61:6d:a7:a1:
72:62:01:44:d5:56:e3:e6:a0:ce:d3:35:b7:d9:f8:f7:35:20:
c5:c4:c5:db:ff:6a:82:e2:5f:fe:92:0f:72:ee:24:8d:73:06:
44:49:62:2a:1c:10:5e:af:f7:ec:00:a7:9b:0c:54:91:6c:ab:
96:26:52:ad:0c:7d:f2:65:5f:7e:da:9d:24:f6:ce:b4:ff:2c:
75:4e:3d:10:ad:c7:41:46:73:18:e5:5a:72:24:e0:b8:af:cd:
c9:6d:23:39:fd:b0:d9:f2:e6:1d:a1:b8:38:85:e7:46:63:78:
7c:11:d0:5e:70:27:85:39:49:e2:c3:08:8b:db:e9:85:df:3b:
5b:48:d1:7b:1a:be:3e:a1:89:53:bf:32:4b:14:93:43:e5:17:
57:ba:a6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:11:55 2026 by rpki-client