Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/fqpwhs5iNQU7WBoTZ4dDzBkPWAA.roa
File: fqpwhs5iNQU7WBoTZ4dDzBkPWAA.roa (raw, json)
Hash identifier: LMh9BKtb0gzHGvTuDWMo1rSK8/Hx4+JaHOokd5LRS60=
Subject key identifier: 7E:AA:70:86:CE:62:35:05:3B:58:1A:13:67:87:43:CC:19:0F:58:00
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0C93BFFEDC0CC6E1296937B376CF4D584
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/fqpwhs5iNQU7WBoTZ4dDzBkPWAA.roa
Signing time: Tue 22 Sep 2026 13:09:07 +0000
ROA not before: Tue 22 Sep 2026 13:09:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.76.168.0/24 maxlen: 24
87.76.196.0/24 maxlen: 24
87.76.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 09:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:3b:ff:ed:c0:cc:6e:12:96:93:7b:37:6c:f4:d5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 22 13:09:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7eaa7086ce6235053b581a13678743cc190f5800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:03:93:7e:11:d2:c2:50:1d:6e:d9:c9:9e:
33:20:58:a5:d3:db:a2:ec:a5:3f:e3:7c:a3:30:62:
d0:44:23:33:7f:73:4b:8c:7f:c1:91:aa:22:6f:c2:
e5:03:0d:2c:e7:8b:1b:20:70:70:f9:88:f4:79:48:
87:68:22:50:4f:47:22:82:2e:43:1e:fb:77:c5:bf:
c5:41:12:32:b7:49:5a:6b:f6:c3:13:74:fd:e7:55:
11:8e:52:d3:43:a5:a0:fd:5a:65:e9:e6:55:1c:98:
38:4f:b9:80:6a:10:4e:a3:15:96:0c:dd:69:4d:64:
85:ad:23:75:6a:2e:82:77:a0:17:3d:37:84:77:49:
dd:81:fb:56:37:00:42:2a:d1:f5:34:c6:c1:25:14:
98:1b:31:ec:a9:46:aa:b0:f6:23:63:fb:df:35:42:
d6:86:0b:9f:12:01:fd:22:2c:11:19:d2:ba:cf:3b:
40:66:df:6c:8f:3f:39:df:29:0c:54:f5:11:27:d4:
ca:78:19:7a:ce:19:5b:54:b5:82:33:95:23:f0:78:
db:08:53:77:51:bb:30:ea:52:5f:52:84:a8:6d:b1:
1f:0f:ea:fd:66:b5:ca:57:cf:71:b0:64:7e:64:57:
01:56:80:d1:81:60:ac:ba:a6:e6:2d:f3:59:e6:0e:
ad:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AA:70:86:CE:62:35:05:3B:58:1A:13:67:87:43:CC:19:0F:58:00
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/fqpwhs5iNQU7WBoTZ4dDzBkPWAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.168.0/24
87.76.196.0/24
87.76.206.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ea:51:82:19:ac:3b:84:54:20:0e:0e:9a:5c:1d:91:fc:1a:
80:25:ec:3c:99:c2:ea:97:4c:3f:33:f2:f8:44:2e:b9:8c:2c:
dd:75:d1:34:60:75:b8:4e:bb:47:d9:28:6f:0c:a2:f3:52:53:
f6:ad:e3:5a:ff:a8:e9:e4:9e:d8:96:86:e2:01:d2:19:a0:db:
8c:52:dd:a7:89:f1:a5:8d:3b:be:fd:5b:e1:3f:e9:4b:59:cf:
9c:9f:b0:f6:11:37:36:38:8b:0a:86:0a:66:87:50:35:df:dc:
f5:95:0d:30:66:28:a4:6d:2a:c3:16:fb:86:05:e5:fa:1e:6c:
e5:7e:b0:12:20:19:48:57:4f:86:d7:eb:25:31:40:09:99:1b:
e7:a4:64:ba:f3:70:f7:2c:0a:23:12:24:fc:4e:b3:d1:c1:18:
59:30:9e:73:aa:ae:91:5d:82:3d:6f:89:61:90:7b:d2:a0:e2:
0e:f0:81:e5:c7:0f:d8:80:2e:82:b1:ee:81:77:bc:f0:51:be:
65:92:e0:63:4b:9e:46:e3:0a:1e:83:f3:e4:ed:ba:8d:3f:ef:
1a:a9:13:1c:d2:f5:88:83:8a:2e:a6:66:30:34:46:5f:fb:c7:
eb:44:96:2c:13:3b:fe:b3:ff:da:3c:d5:be:4a:4e:35:fc:18:
f6:97:62:f6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDJO//twMxuEpaTezds9NWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwOTIyMTMwOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWFhNzA4NmNlNjIzNTA1M2I1ODFhMTM2Nzg3NDNjYzE5MGY1ODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/MDk34R0sJQHW7ZyZ4zIFil09ui
7KU/43yjMGLQRCMzf3NLjH/Bkaoib8LlAw0s54sbIHBw+Yj0eUiHaCJQT0cigi5D
Hvt3xb/FQRIyt0laa/bDE3T951URjlLTQ6Wg/Vpl6eZVHJg4T7mAahBOoxWWDN1p
TWSFrSN1ai6Cd6AXPTeEd0ndgftWNwBCKtH1NMbBJRSYGzHsqUaqsPYjY/vfNULW
hgufEgH9IiwRGdK6zztAZt9sjz853ykMVPURJ9TKeBl6zhlbVLWCM5Uj8HjbCFN3
Ubsw6lJfUoSobbEfD+r9ZrXKV89xsGR+ZFcBVoDRgWCsuqbmLfNZ5g6tsQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH6qcIbOYjUFO1gaE2eHQ8wZD1gAMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvZnFwd2hzNWlOUVU3V0JvVFo0ZER6QmtQV0FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV0yoAwQA
V0zEAwQAV0zOMA0GCSqGSIb3DQEBCwUAA4IBAQAg6lGCGaw7hFQgDg6aXB2R/BqA
Jew8mcLql0w/M/L4RC65jCzdddE0YHW4TrtH2ShvDKLzUlP2reNa/6jp5J7Ylobi
AdIZoNuMUt2nifGljTu+/VvhP+lLWc+cn7D2ETc2OIsKhgpmh1A139z1lQ0wZiik
bSrDFvuGBeX6HmzlfrASIBlIV0+G1+slMUAJmRvnpGS683D3LAojEiT8TrPRwRhZ
MJ5zqq6RXYI9b4lhkHvSoOIO8IHlxw/YgC6Cse6Bd7zwUb5lkuBjS55G4woeg/Pk
7bqNP+8aqRMc0vWIg4oupmYwNEZf+8frRJYsEzv+s//aPNW+Sk41/Bj2l2L2
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:03:53 2026 by rpki-client