Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/xUadbPYjraWeZzhgY8ZgBZSzy8k.roa
File: xUadbPYjraWeZzhgY8ZgBZSzy8k.roa (raw, json)
Hash identifier: qdQAGzn0JvTPwo5yBi/JJ/b59Sg9Mif+VCPt0yt/Kzs=
Subject key identifier: C5:46:9D:6C:F6:23:AD:A5:9E:67:38:60:63:C6:60:05:94:B3:CB:C9
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019F8E7D7580546C5D5A38876FD8739BEA46
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/xUadbPYjraWeZzhgY8ZgBZSzy8k.roa
Signing time: Thu 23 Jul 2026 10:20:14 +0000
ROA not before: Thu 23 Jul 2026 10:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.76.149.0/24 maxlen: 24
87.76.185.0/24 maxlen: 24
87.76.189.0/24 maxlen: 24
87.76.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jul 2026 21:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:7d:75:80:54:6c:5d:5a:38:87:6f:d8:73:9b:ea:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 23 10:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5469d6cf623ada59e67386063c6600594b3cbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:9e:74:01:7d:f5:bc:98:be:e8:78:02:a8:
e1:90:43:0d:2d:2d:ac:8c:80:f1:2c:3b:a7:04:a1:
e0:92:d2:b8:64:d0:1b:ac:f5:a4:ab:05:50:1e:26:
74:80:29:57:62:d3:2d:30:48:7d:9a:08:71:88:d9:
b3:dd:f9:73:88:22:30:4b:bd:c9:9c:e6:d7:1b:56:
91:c6:b9:78:5b:84:4e:fc:87:eb:11:8e:b9:82:9f:
2a:88:75:02:5b:c4:d6:26:04:dd:d1:7c:f4:83:97:
84:99:40:92:1c:fd:cc:55:4a:05:84:6c:e1:cd:b8:
8a:b1:42:ec:3f:67:25:44:dd:9c:c8:f2:45:9f:62:
58:ab:c7:64:02:61:85:6c:6a:5d:30:55:a0:fa:ee:
f0:d1:c6:de:8f:2f:de:ca:87:85:e4:e8:3f:06:d3:
50:8a:59:11:08:0a:bd:61:e8:a7:9b:88:e9:1a:b3:
df:33:fc:84:c7:cb:f2:44:14:0a:ac:8e:0a:64:ab:
6e:30:b2:1e:a6:06:b6:b3:c3:0f:f8:87:82:5e:c8:
9c:77:70:b9:60:7f:95:18:58:ed:b3:6b:17:0e:5e:
78:d4:a5:56:3f:a4:fa:54:1a:02:3d:a3:7d:5c:e6:
a1:fc:5d:1c:25:1b:20:a9:fe:7c:9a:c7:76:d3:bc:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:46:9D:6C:F6:23:AD:A5:9E:67:38:60:63:C6:60:05:94:B3:CB:C9
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/xUadbPYjraWeZzhgY8ZgBZSzy8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.149.0/24
87.76.185.0/24
87.76.189.0/24
87.76.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ba:a9:ec:70:c3:85:e5:f0:65:0c:1c:b4:0c:67:2e:f9:5d:
0b:60:2a:00:50:bb:24:15:96:8a:3b:87:7f:75:c1:1e:1b:c1:
6f:97:82:15:49:6c:8b:b5:cc:1e:db:38:df:ef:c5:27:9e:c4:
70:8d:2a:f0:b9:2c:5c:33:17:e5:c8:4c:b4:56:03:6b:ec:74:
c1:61:25:3a:2a:c7:a1:cf:fa:b2:2b:15:74:2e:5b:01:99:1f:
c9:73:ff:05:19:f7:32:43:21:2d:6b:2d:74:34:15:df:66:22:
ea:68:33:f5:58:7c:bc:38:e6:7f:71:4e:09:a0:0d:4f:2d:24:
05:80:9e:50:ac:0c:07:ff:2c:71:47:dc:be:dc:0c:91:ba:c7:
4d:13:28:ed:ae:cb:87:64:c4:8c:c9:0d:8c:86:27:f5:1c:18:
46:68:9d:40:66:91:62:31:21:9a:88:09:bf:55:ee:37:f4:2c:
b7:82:af:8d:75:ba:70:40:3c:1e:d4:fb:6c:12:4e:dc:94:e4:
d3:39:2a:4d:d9:80:c2:33:29:37:e0:5b:89:32:10:f1:fd:a3:
ac:5f:f8:e5:3d:5a:50:f3:a4:e7:54:a5:39:22:1b:b5:5c:ed:
2a:47:45:ad:43:a4:03:f2:b5:7c:1a:ce:cc:d7:49:80:d6:b5:
2e:9b:04:ca
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ+OfXWAVGxdWjiHb9hzm+pGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwNzIzMTAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTQ2OWQ2Y2Y2MjNhZGE1OWU2NzM4NjA2M2M2NjAwNTk0YjNjYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUKedAF99byYvuh4AqjhkEMNLS2s
jIDxLDunBKHgktK4ZNAbrPWkqwVQHiZ0gClXYtMtMEh9mghxiNmz3flziCIwS73J
nObXG1aRxrl4W4RO/IfrEY65gp8qiHUCW8TWJgTd0Xz0g5eEmUCSHP3MVUoFhGzh
zbiKsULsP2clRN2cyPJFn2JYq8dkAmGFbGpdMFWg+u7w0cbejy/eyoeF5Og/BtNQ
ilkRCAq9Yeinm4jpGrPfM/yEx8vyRBQKrI4KZKtuMLIepga2s8MP+IeCXsicd3C5
YH+VGFjts2sXDl541KVWP6T6VBoCPaN9XOah/F0cJRsgqf58msd207z69wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMVGnWz2I62lnmc4YGPGYAWUs8vJMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEveFVhZGJQWWpyYVdlWnpoZ1k4WmdCWlN6eThrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV0yVAwQA
V0y5AwQAV0y9AwQAV0zVMA0GCSqGSIb3DQEBCwUAA4IBAQA6uqnscMOF5fBlDBy0
DGcu+V0LYCoAULskFZaKO4d/dcEeG8Fvl4IVSWyLtcwe2zjf78UnnsRwjSrwuSxc
MxflyEy0VgNr7HTBYSU6Ksehz/qyKxV0LlsBmR/Jc/8FGfcyQyEtay10NBXfZiLq
aDP1WHy8OOZ/cU4JoA1PLSQFgJ5QrAwH/yxxR9y+3AyRusdNEyjtrsuHZMSMyQ2M
hif1HBhGaJ1AZpFiMSGaiAm/Ve439Cy3gq+NdbpwQDwe1PtsEk7clOTTOSpN2YDC
Myk34FuJMhDx/aOsX/jlPVpQ86TnVKU5Ihu1XO0qR0WtQ6QD8rV8Gs7M10mA1rUu
mwTK
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:07:49 2026 by rpki-client