Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2dasJNk1RzJdWCaQ7KdCZMkyyOk.roa
File: 2dasJNk1RzJdWCaQ7KdCZMkyyOk.roa (raw, json)
Hash identifier: 5/2PbCJaI0HnACaew+h09Hs5wkxqxj3mCGomFn+cPaQ=
Subject key identifier: D9:D6:AC:24:D9:35:47:32:5D:58:26:90:EC:A7:42:64:C9:32:C8:E9
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0CDA6E9D0A8EE0B4A1946A4B3EE84DA66
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2dasJNk1RzJdWCaQ7KdCZMkyyOk.roa
Signing time: Wed 23 Sep 2026 09:44:23 +0000
ROA not before: Wed 23 Sep 2026 09:44:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 82.108.90.0/24 maxlen: 24
82.108.138.0/24 maxlen: 24
82.109.102.0/24 maxlen: 24
82.109.144.0/24 maxlen: 24
82.109.195.0/24 maxlen: 24
82.110.51.0/24 maxlen: 24
82.110.105.0/24 maxlen: 24
87.82.233.0/24 maxlen: 24
87.82.241.0/24 maxlen: 24
87.82.243.0/24 maxlen: 24
87.82.247.0/24 maxlen: 24
87.83.124.0/24 maxlen: 24
87.83.166.0/24 maxlen: 24
87.84.130.0/24 maxlen: 24
87.84.134.0/24 maxlen: 24
87.84.223.0/24 maxlen: 24
87.85.77.0/24 maxlen: 24
212.134.139.0/24 maxlen: 24
212.134.155.0/24 maxlen: 24
212.134.163.0/24 maxlen: 24
212.134.182.0/24 maxlen: 24
212.134.193.0/24 maxlen: 24
212.134.200.0/24 maxlen: 24
212.134.230.0/24 maxlen: 24
212.135.29.0/24 maxlen: 24
212.135.129.0/24 maxlen: 24
212.135.135.0/24 maxlen: 24
212.135.251.0/24 maxlen: 24
212.135.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 18:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:a6:e9:d0:a8:ee:0b:4a:19:46:a4:b3:ee:84:da:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 23 09:44:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9d6ac24d93547325d582690eca74264c932c8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:86:78:79:5f:e3:2d:6e:a5:25:d4:db:bc:
b8:c0:ce:ec:d9:0f:8c:10:2c:b6:73:7b:92:61:3f:
67:f4:7f:b9:a5:b4:c2:76:a4:e3:c7:96:e1:61:29:
a6:f7:cf:ea:aa:d2:5d:fe:f3:fe:5b:a4:84:41:10:
84:18:e1:d7:47:c3:d0:ef:fb:a0:74:3f:0f:19:69:
e0:fd:dc:5d:0d:fd:79:0e:ae:ed:ea:79:32:30:09:
cb:53:ff:dd:2d:5a:07:36:0d:43:4f:af:3d:ba:a1:
a6:3c:ca:1d:6f:34:4f:78:9d:2b:89:65:af:73:f9:
a6:ef:f1:8d:62:4b:71:22:5c:5d:9f:ed:0e:ea:05:
22:d8:66:0b:bb:3b:12:4d:f2:e5:ab:a4:9a:8a:da:
62:8b:ff:94:86:87:96:ef:10:72:b3:4c:30:58:ca:
f1:6c:d2:3d:a2:a9:51:82:e9:41:42:8e:93:f3:5f:
5f:02:e9:af:7b:00:6b:50:ae:36:a1:45:01:f3:37:
0b:1e:7b:7b:f3:cc:ed:dc:29:4a:db:9d:27:d5:b9:
7b:02:fb:40:b8:ea:be:8d:d3:f8:41:69:2c:b1:14:
82:5e:e4:03:3e:dd:d2:01:f1:1b:87:b7:86:8e:a9:
f0:0e:d6:84:da:de:d5:06:d9:a2:bd:de:40:7e:e0:
2a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D6:AC:24:D9:35:47:32:5D:58:26:90:EC:A7:42:64:C9:32:C8:E9
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2dasJNk1RzJdWCaQ7KdCZMkyyOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.90.0/24
82.108.138.0/24
82.109.102.0/24
82.109.144.0/24
82.109.195.0/24
82.110.51.0/24
82.110.105.0/24
87.82.233.0/24
87.82.241.0/24
87.82.243.0/24
87.82.247.0/24
87.83.124.0/24
87.83.166.0/24
87.84.130.0/24
87.84.134.0/24
87.84.223.0/24
87.85.77.0/24
212.134.139.0/24
212.134.155.0/24
212.134.163.0/24
212.134.182.0/24
212.134.193.0/24
212.134.200.0/24
212.134.230.0/24
212.135.29.0/24
212.135.129.0/24
212.135.135.0/24
212.135.251.0-212.135.252.255
Signature Algorithm: sha256WithRSAEncryption
64:2f:a7:4a:a2:9a:d6:81:e8:e6:96:1c:9e:7e:8b:fd:0f:2e:
46:4b:14:66:07:10:2b:5d:47:74:51:2b:83:f7:8f:59:11:69:
24:56:cf:c6:11:90:91:17:b9:5b:5e:95:79:94:5a:9d:b5:e6:
59:ca:05:82:1e:87:af:43:66:55:be:90:e4:98:84:1a:25:50:
d6:5a:b2:7a:9b:04:fc:47:d5:a8:2d:56:f8:17:fa:59:70:99:
29:79:e9:af:69:5e:b7:cb:1d:59:6a:c0:5b:ef:d6:47:d6:d0:
6e:c7:b0:ef:35:58:d5:4f:ba:2c:90:90:6e:53:0f:b1:01:8f:
71:aa:15:46:80:41:9b:cf:40:e9:e8:de:7c:5c:2c:cd:e2:7d:
34:cc:30:97:f9:24:b7:0a:f3:92:ba:9f:df:10:56:c0:fd:8e:
69:6d:0f:d0:9b:38:a5:47:16:df:71:bc:ba:ca:12:3e:06:0a:
75:c3:43:16:9a:e7:55:71:33:f1:3d:35:4a:1c:a1:84:54:d7:
f3:26:33:db:d5:5d:f6:76:d3:ed:86:bc:6b:0f:33:4e:3a:cf:
bb:54:b6:f5:d3:54:ee:aa:7f:1d:d7:f8:98:d3:67:b9:03:4a:
e3:22:20:aa:cf:46:20:ab:e6:a6:18:e4:5e:ef:ae:44:c4:45:
98:c7:7b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:02:03 2026 by rpki-client