Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qz7X4ohOsJxwsaDxx5pn1-eln-M.roa
File: qz7X4ohOsJxwsaDxx5pn1-eln-M.roa (raw, json)
Hash identifier: BGXzBZZQQC1v4qc/hHQAv7frUi40GqkaYPqpz/8y108=
Subject key identifier: AB:3E:D7:E2:88:4E:B0:9C:70:B1:A0:F1:C7:9A:67:D7:E7:A5:9F:E3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F8A93E03890D6F27287C653A873F6BFF0
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qz7X4ohOsJxwsaDxx5pn1-eln-M.roa
Signing time: Wed 22 Jul 2026 16:06:14 +0000
ROA not before: Wed 22 Jul 2026 16:06:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147208
IP address blocks: 82.109.102.0/24 maxlen: 24
87.86.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jul 2026 02:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:93:e0:38:90:d6:f2:72:87:c6:53:a8:73:f6:bf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 22 16:06:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab3ed7e2884eb09c70b1a0f1c79a67d7e7a59fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:15:90:58:ba:c3:bd:71:76:ed:87:aa:74:
f6:0d:1b:be:22:4d:cd:08:28:84:2d:ac:d0:cd:5f:
36:b4:b4:af:17:c9:4a:55:7f:2e:ad:ec:32:a7:b9:
9d:b3:03:f5:58:ed:56:65:46:37:49:e3:71:93:02:
07:67:51:02:72:dd:b8:be:e2:28:aa:b1:26:44:b6:
ba:ef:6e:53:3c:db:9e:7a:cb:fd:86:d6:82:f0:f0:
93:d3:53:25:72:e3:47:e7:15:0d:79:3b:72:bc:6b:
0e:e6:08:a0:36:c9:e8:da:a8:4b:9f:85:9e:c7:07:
ee:f0:ba:eb:e5:ea:12:78:84:3c:c6:8c:7f:44:5a:
11:16:97:ae:1e:9a:bc:77:da:d6:84:ce:6a:a9:46:
7f:f0:8c:ec:15:1c:43:4a:b8:de:93:00:1b:c0:e7:
f9:ce:10:6f:9d:c9:7c:36:66:62:12:63:1d:bc:18:
6b:34:70:ac:cf:01:45:45:07:85:7f:1d:95:ee:21:
67:4c:18:6a:98:8f:2e:ad:73:15:79:0c:cb:19:06:
77:05:58:79:63:4b:21:b2:ff:a3:3c:f8:2b:be:24:
cd:21:6a:42:2c:96:00:3f:3a:65:d8:a6:1c:7c:1e:
95:ee:41:1d:92:43:53:1e:3b:0c:54:61:ce:0c:33:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3E:D7:E2:88:4E:B0:9C:70:B1:A0:F1:C7:9A:67:D7:E7:A5:9F:E3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qz7X4ohOsJxwsaDxx5pn1-eln-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.102.0/24
87.86.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:1b:55:3c:88:b3:08:99:ac:f1:84:a0:6a:d4:63:13:9c:85:
81:bc:88:71:40:9e:a2:51:4f:a0:e5:18:69:6a:fa:c2:5b:cd:
ff:dc:4e:cb:45:7f:9c:87:e5:c9:9a:c9:d2:30:fa:8e:bf:02:
b2:9b:27:54:89:5a:77:a4:7c:87:b8:95:41:1d:52:a2:f5:c9:
8b:67:ac:7e:7c:d4:c3:41:31:ae:3c:54:77:19:37:37:66:f4:
47:3f:fa:3b:dc:e0:44:85:0b:10:b1:ee:88:67:23:64:ca:ab:
e2:82:d8:69:e2:70:dd:74:bc:29:61:82:ab:16:c5:6b:64:06:
a2:d9:2d:f3:a7:29:8b:f6:d2:f3:eb:7c:c4:df:95:b8:f5:14:
89:d3:ad:fa:1c:98:df:d1:81:75:c7:3f:7f:35:e3:42:6c:a0:
5b:eb:aa:dc:b0:08:93:45:e8:3c:68:dc:e0:09:cf:ca:41:0d:
3b:94:63:8d:89:bb:55:17:c0:51:35:52:e4:9b:11:85:c6:05:
1a:93:be:1a:b6:69:21:fa:a3:36:5f:8e:70:78:c6:e8:55:af:
03:f0:b5:49:d4:5e:7f:ff:0a:a4:84:a6:f6:bd:61:6f:98:d2:
12:7e:50:99:3e:51:1f:27:39:4d:a8:14:65:b0:65:34:d4:b9:
19:32:59:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:00:44 2026 by rpki-client