Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-rFqYGA4Fl_JJoZBOh6PRE9y3SY.roa
File: 1-rFqYGA4Fl_JJoZBOh6PRE9y3SY.roa (raw, json)
Hash identifier: bjrzIVx/gfG+ystiCVJJs+MCZlmY30/QQYuPPWLvxOM=
Subject key identifier: FA:B1:6A:60:60:38:16:5F:C9:26:86:41:3A:1E:8F:44:4F:72:DD:26
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0C4009B004B5553E572E64061ECED0F27
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-rFqYGA4Fl_JJoZBOh6PRE9y3SY.roa
Signing time: Mon 21 Sep 2026 12:46:09 +0000
ROA not before: Mon 21 Sep 2026 12:46:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 46.34.22.0/24 maxlen: 24
87.82.240.0/24 maxlen: 24
87.85.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Sep 2026 03:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:00:9b:00:4b:55:53:e5:72:e6:40:61:ec:ed:0f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 21 12:46:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fab16a606038165fc92686413a1e8f444f72dd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:b2:d4:03:c0:12:73:86:f8:c2:c7:8b:b2:
90:2b:38:8e:53:4a:fa:01:09:5d:c1:3e:0e:c2:51:
56:db:25:b1:98:9e:f7:3b:bb:b3:84:34:b7:48:ea:
33:47:4f:86:9c:7e:de:02:00:0e:34:02:a6:75:1b:
3f:57:84:80:f5:29:5d:2b:24:d6:d8:5d:a9:29:ac:
f2:e9:9d:e8:10:e5:1c:64:a7:fd:1f:f8:85:b5:19:
b1:12:61:48:d3:1a:41:5d:13:d3:87:5d:66:4e:a2:
e7:7e:fc:94:5e:0f:c1:36:ff:fb:c2:ed:e2:28:a1:
ac:8a:cd:ec:a6:6d:cf:96:11:5e:82:19:c6:cd:33:
65:6b:bd:61:bf:bc:9d:e1:09:bb:7e:85:d8:c7:f0:
03:01:b2:36:2c:9b:57:54:6d:d8:df:07:e2:8e:83:
bf:be:ac:76:89:ab:25:bf:f4:6d:fb:c7:67:dc:0f:
26:54:12:19:7a:45:3f:29:f7:cd:dc:20:27:f5:93:
63:2f:57:18:27:a6:2f:70:88:7c:5d:95:0c:84:9a:
91:bc:dc:7f:bc:7b:45:c7:35:96:bc:2d:f2:3b:4c:
e1:ad:22:be:e9:3d:25:c8:c7:da:1a:3f:5e:d0:bc:
3d:02:51:99:50:af:64:7e:6c:fe:11:7f:c8:61:35:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B1:6A:60:60:38:16:5F:C9:26:86:41:3A:1E:8F:44:4F:72:DD:26
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-rFqYGA4Fl_JJoZBOh6PRE9y3SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.22.0/24
87.82.240.0/24
87.85.141.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:b8:a2:24:c8:e3:70:44:10:20:d5:01:9b:b9:29:17:7b:4e:
bb:05:66:1e:93:e2:19:f4:bc:78:4b:c0:e8:ef:dc:7e:0b:83:
ba:61:93:96:ce:f8:3b:c3:b4:e5:7b:d1:69:88:51:d5:c9:34:
75:87:79:b4:7f:e2:12:fe:1b:42:c0:0b:39:f2:49:e7:27:82:
71:04:c0:c9:38:8a:9d:a3:c0:6c:8f:86:25:d5:58:8b:9b:ab:
e5:d2:00:72:68:7a:b3:02:7b:b5:b3:9a:66:ba:30:d7:b6:21:
8e:39:78:ff:d4:f0:9a:7b:8d:78:fc:6b:ea:2f:ce:3f:76:8f:
d1:08:94:0b:d1:95:d8:66:87:7f:f6:96:fe:3f:3f:bc:fe:39:
bb:5e:00:aa:0b:ee:7b:f5:9a:f1:cf:c7:fa:74:b6:64:53:35:
30:55:f7:10:af:10:13:1d:e5:cd:de:27:33:8e:67:7c:4e:df:
55:f4:e5:8c:6f:8b:7c:3d:2c:d3:02:e1:93:d8:94:2d:64:12:
2e:25:76:6b:f0:38:0d:9d:dc:20:4e:65:50:f5:10:35:53:13:
a8:38:33:04:53:d7:84:9d:13:34:6d:69:bf:ce:94:9e:28:b1:
9d:7a:8c:1e:13:6e:cc:b6:2a:ae:0c:8f:a8:a8:fb:6d:77:45:
6a:75:78:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:14:03 2026 by rpki-client