Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/g8wj7Ggr536bju3bTj23sQFOWHU.roa
File: g8wj7Ggr536bju3bTj23sQFOWHU.roa (raw, json)
Hash identifier: KeutERnDSoL40BhF4K7jnfuX8St4PPDyuLywgATlyJ0=
Subject key identifier: 83:CC:23:EC:68:2B:E7:7E:9B:8E:ED:DB:4E:3D:B7:B1:01:4E:58:75
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A0D420800553CB98F23EC70803C22098A1
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/g8wj7Ggr536bju3bTj23sQFOWHU.roa
Signing time: Thu 24 Sep 2026 15:54:54 +0000
ROA not before: Thu 24 Sep 2026 15:54:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216127
IP address blocks: 95.81.72.0/24 maxlen: 24
185.78.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 17:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:20:80:05:53:cb:98:f2:3e:c7:08:03:c2:20:98:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Sep 24 15:54:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83cc23ec682be77e9b8eeddb4e3db7b1014e5875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:df:f9:60:a1:a8:b8:ab:d7:eb:85:39:80:14:
db:df:7c:f5:ba:6d:8b:37:65:c7:6b:ca:c5:05:9b:
dd:b3:f0:8f:c2:7d:18:98:b6:7e:84:87:bb:88:71:
b1:62:bc:49:32:8f:6d:3a:af:a2:26:e4:d8:a5:89:
af:2b:0e:14:b0:fa:2b:70:ba:10:a2:89:1e:67:c3:
11:f5:f4:34:55:12:7c:1c:60:fe:4c:96:bb:8a:aa:
93:5f:2d:0e:41:7d:39:91:c7:70:aa:d2:dd:13:9b:
ef:e5:70:d8:dd:9d:20:63:74:70:67:58:3d:f3:6c:
99:4a:c6:d3:e8:64:ff:f0:79:45:9d:9f:23:8f:9d:
ba:25:a1:04:10:f4:dd:5d:16:21:0f:d8:f5:df:b3:
95:cb:37:ca:e4:14:7f:d5:19:1e:7e:59:86:df:4e:
f4:31:7e:e3:f5:56:06:0e:2b:5e:6f:aa:0e:82:80:
05:d1:fa:0f:d0:a2:6d:a1:a5:99:d6:f7:48:f0:a7:
92:eb:02:58:d5:49:ee:ae:73:1b:e7:78:78:a9:6b:
3f:eb:c0:c1:e9:3a:30:d0:22:98:62:c9:a6:43:be:
3c:6d:43:76:32:c0:37:85:5c:a1:89:72:ed:95:95:
3b:42:8a:f0:9a:71:cd:fd:e6:8f:bf:b8:fe:f6:b9:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CC:23:EC:68:2B:E7:7E:9B:8E:ED:DB:4E:3D:B7:B1:01:4E:58:75
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/g8wj7Ggr536bju3bTj23sQFOWHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.72.0/24
185.78.76.0/24
Signature Algorithm: sha256WithRSAEncryption
53:77:c1:bf:47:0d:55:41:0a:55:a1:39:7e:50:74:a5:e2:a0:
58:c6:fd:0f:2f:f4:93:46:81:f6:61:c2:e8:fc:ad:2d:95:f1:
5a:98:a2:af:de:28:43:0b:eb:4b:99:18:79:1b:0e:54:4b:a0:
44:2d:31:cc:2b:aa:de:0c:c5:ff:7e:84:c7:76:b7:6f:ea:59:
71:9c:aa:dc:7f:e1:7a:65:9c:da:d0:1f:f5:ff:ca:0d:7c:ba:
cf:c6:06:37:1e:bd:4b:10:7c:fd:81:2e:dc:98:28:d3:1c:1e:
a9:76:8a:3d:ec:db:09:76:6f:25:f1:3b:89:68:5e:de:4f:e9:
58:62:12:6a:f5:57:cd:d8:83:33:8f:50:59:39:6d:e7:f8:87:
f6:2b:da:cf:ba:cc:0f:8c:76:a4:78:f0:f0:a0:79:9e:46:8e:
ff:93:82:e9:ab:90:8c:0d:f7:f2:4b:77:58:da:27:89:b8:4f:
8f:4b:84:08:6a:70:e9:ad:70:97:dc:ab:c1:1d:7e:a2:73:a7:
78:67:52:77:b2:a6:19:4d:a6:bf:4c:35:33:00:46:b8:77:eb:
fc:63:b7:2a:20:3d:6c:d4:cf:b5:ba:e6:aa:76:9f:af:3e:e8:
eb:8a:2d:63:65:2d:75:b9:36:52:9a:6b:b8:30:c0:a2:05:ad:
61:ca:51:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:36:05 2026 by rpki-client