Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/O_iLod7LvUzthbI9cF5a_emFT1s.roa
File: O_iLod7LvUzthbI9cF5a_emFT1s.roa (raw, json)
Hash identifier: slvhi4UCGMWfiicgPnPbSDSVKnbJy1XLXBgCS06GILg=
Subject key identifier: 3B:F8:8B:A1:DE:CB:BD:4C:ED:85:B2:3D:70:5E:5A:FD:E9:85:4F:5B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0D3ABEB642FFF71F7CD9AC9055A6F1332
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/O_iLod7LvUzthbI9cF5a_emFT1s.roa
Signing time: Thu 24 Sep 2026 13:47:34 +0000
ROA not before: Thu 24 Sep 2026 13:47:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 82.108.90.0/24 maxlen: 24
82.108.138.0/24 maxlen: 24
82.109.102.0/24 maxlen: 24
82.109.144.0/24 maxlen: 24
82.109.195.0/24 maxlen: 24
82.110.51.0/24 maxlen: 24
82.110.105.0/24 maxlen: 24
87.82.233.0/24 maxlen: 24
87.82.241.0/24 maxlen: 24
87.83.124.0/24 maxlen: 24
87.83.166.0/24 maxlen: 24
87.84.130.0/24 maxlen: 24
87.84.134.0/24 maxlen: 24
87.84.223.0/24 maxlen: 24
87.85.77.0/24 maxlen: 24
212.134.155.0/24 maxlen: 24
212.135.29.0/24 maxlen: 24
212.135.135.0/24 maxlen: 24
212.135.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 09:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ab:eb:64:2f:ff:71:f7:cd:9a:c9:05:5a:6f:13:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 24 13:47:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bf88ba1decbbd4ced85b23d705e5afde9854f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:ee:42:4b:37:b7:fc:cb:e1:4f:63:9d:3a:
ce:a7:b2:cc:80:61:06:7c:b8:db:0c:69:b0:93:82:
9d:0f:5c:ce:a7:31:f6:49:aa:fd:ca:de:a8:f6:a7:
70:32:b6:c1:39:1f:e2:90:b3:45:a2:d6:31:f3:d7:
38:b0:8b:26:54:87:d8:d8:9a:b1:0c:c6:cb:18:af:
cd:78:fb:8c:19:6b:c1:50:02:24:7d:7f:2f:d1:f4:
51:b3:ab:fd:3a:0a:e5:5f:f7:ae:7e:09:d0:a8:b2:
ec:7a:c0:35:dc:98:6d:92:97:e1:d2:df:90:72:40:
82:9b:f1:33:5d:33:b7:13:30:d3:11:f1:72:10:32:
71:7d:55:14:db:1b:47:a9:ea:fc:7f:08:7c:a1:f5:
ee:38:20:ec:86:ad:e7:05:f8:69:46:3d:e6:d3:00:
1a:0c:f8:89:ed:8b:61:20:8d:2f:11:0b:47:cc:4c:
ed:fc:36:67:c9:d0:18:27:f8:ac:c3:2a:29:4e:e8:
e1:ac:e5:bf:ed:c2:86:fd:4e:f3:9b:f1:38:f6:17:
36:d8:21:ea:2d:42:cd:65:58:83:2a:78:7b:20:8f:
49:80:bd:b8:a2:e3:84:ad:9a:b0:81:70:89:8b:99:
0a:58:54:2a:a4:3e:2c:34:93:58:e1:18:1b:30:ac:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F8:8B:A1:DE:CB:BD:4C:ED:85:B2:3D:70:5E:5A:FD:E9:85:4F:5B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/O_iLod7LvUzthbI9cF5a_emFT1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.90.0/24
82.108.138.0/24
82.109.102.0/24
82.109.144.0/24
82.109.195.0/24
82.110.51.0/24
82.110.105.0/24
87.82.233.0/24
87.82.241.0/24
87.83.124.0/24
87.83.166.0/24
87.84.130.0/24
87.84.134.0/24
87.84.223.0/24
87.85.77.0/24
212.134.155.0/24
212.135.29.0/24
212.135.135.0/24
212.135.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:02:ab:87:5b:a7:09:6f:34:22:36:8f:9e:39:b0:e8:c1:87:
61:af:20:6c:7d:89:58:49:56:81:44:47:64:0b:14:95:32:be:
d4:b5:83:f8:22:47:08:4d:9e:bb:96:49:17:ab:d9:82:a2:ed:
ae:5f:b9:df:8d:f7:b1:d8:83:5a:e6:13:e6:44:38:54:20:1b:
3a:bd:7f:eb:29:e3:d3:10:36:08:86:ec:49:67:26:ab:69:c5:
8f:ae:ab:e7:76:3f:e6:0d:d8:d8:41:d5:8f:e6:d7:ab:53:52:
fd:d2:e8:66:64:54:c4:7d:65:3b:fb:07:26:3a:5e:ba:bb:df:
ed:3b:53:5a:6d:11:02:58:a1:9f:b0:5a:88:97:1a:2c:d4:31:
d1:24:7f:00:2a:92:db:89:67:1d:f1:4e:37:57:fd:58:f7:c0:
1a:b0:1a:3a:10:fd:7b:3b:12:0a:75:99:3d:b9:35:18:ff:e2:
06:64:3f:4b:84:e0:a0:b8:08:04:a3:f9:cc:78:32:1e:65:af:
7f:df:ef:b5:90:8c:52:7d:d6:9b:c7:58:5a:1b:b8:1f:2c:fc:
b3:6c:0b:5f:ee:64:41:d6:ed:3c:48:71:a3:b3:00:6a:45:87:
a4:a1:ef:27:87:79:8a:b3:56:fe:b7:5f:6d:07:dd:e8:d5:c5:
12:d0:a0:86
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:48:30 2026 by rpki-client