Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7n2bCfVM2DKbJ3ZskRwhYfF5qxc.roa
File: 7n2bCfVM2DKbJ3ZskRwhYfF5qxc.roa (raw, json)
Hash identifier: FxbN+sftN+yku0NXYmxPm76eBkuXvoIWWHzsvVV+9hg=
Subject key identifier: EE:7D:9B:09:F5:4C:D8:32:9B:27:76:6C:91:1C:21:61:F1:79:AB:17
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A0C522CC7F60A735948C3AD4905BE11708
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7n2bCfVM2DKbJ3ZskRwhYfF5qxc.roa
Signing time: Mon 21 Sep 2026 18:03:07 +0000
ROA not before: Mon 21 Sep 2026 18:03:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.5.0/24 maxlen: 24
83.147.17.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.26.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.43.0/24 maxlen: 24
83.147.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 04:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:22:cc:7f:60:a7:35:94:8c:3a:d4:90:5b:e1:17:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 21 18:03:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee7d9b09f54cd8329b27766c911c2161f179ab17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:d4:9c:e6:9e:7e:f9:a3:43:62:2a:d4:81:
d2:1a:c7:af:59:56:35:ca:80:c9:07:11:9d:ed:d6:
72:b0:0c:80:b6:7d:b7:43:9a:53:77:52:ed:26:1b:
3d:d9:ef:c0:26:89:38:92:10:9f:61:6e:08:b7:d4:
64:52:85:f5:ba:07:16:18:7f:25:98:1a:b3:ac:7a:
fb:95:9c:e1:f0:04:f3:70:3c:86:b7:0a:b8:8b:38:
a9:f7:ae:87:ac:82:4f:be:59:a2:94:8c:48:1d:88:
89:da:12:2d:fa:07:a4:c7:fb:ae:51:33:55:fd:f5:
8c:c2:47:42:42:b4:c7:e0:72:5f:f7:d3:22:e2:78:
87:3f:de:da:84:95:82:da:1a:5e:15:06:3c:6e:83:
f5:0b:b4:e3:66:d4:e0:e1:35:03:97:61:73:d0:c8:
d7:a6:b1:a9:f9:cf:63:dd:73:53:31:b6:04:c3:3c:
03:62:96:09:6f:74:e7:16:68:16:37:e3:84:b4:ac:
0f:c0:55:56:ff:06:b1:9f:37:6d:f6:aa:1d:bb:92:
6f:15:d1:9d:73:6a:ce:51:c3:47:93:4b:37:c6:25:
4e:17:3e:16:b4:6d:6e:9e:4e:d8:b2:df:da:9e:be:
0f:c5:cc:0f:79:b9:56:9d:b5:c8:a0:90:a9:60:99:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7D:9B:09:F5:4C:D8:32:9B:27:76:6C:91:1C:21:61:F1:79:AB:17
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7n2bCfVM2DKbJ3ZskRwhYfF5qxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.5.0/24
83.147.17.0/24
83.147.21.0/24
83.147.26.0/23
83.147.43.0-83.147.47.255
Signature Algorithm: sha256WithRSAEncryption
73:9e:6e:18:58:1d:3f:2e:64:fe:df:0e:2a:4a:5e:a6:6e:ab:
b5:ba:f7:ef:e7:f5:12:b2:25:6f:50:8f:df:e4:29:ea:15:f4:
03:4b:ac:52:2b:fe:f2:9c:f1:ec:af:c0:48:02:b7:ad:13:aa:
24:f3:e3:69:3f:f6:70:ee:66:2e:1b:7d:67:9a:68:88:28:42:
bd:7e:78:98:5d:54:53:c7:1b:23:7c:85:c0:d4:bf:eb:38:0e:
f3:43:bb:af:36:ab:74:57:0d:3e:4c:3a:42:c1:26:05:d6:f1:
fb:d1:fa:81:cd:15:bc:b9:31:f5:28:44:c1:0f:56:3e:c1:04:
5e:ce:47:bf:b7:94:69:d8:72:84:4f:ac:a1:0e:b3:d4:e0:8c:
8a:9c:30:1c:29:b0:9c:9e:40:2f:43:db:f7:80:06:de:f2:dc:
61:e8:f1:f7:5f:55:27:40:d9:90:f0:3b:4b:89:69:d1:dc:a1:
cc:f7:3a:1d:b1:e1:a5:17:9d:c5:c4:d0:3a:0c:41:26:f3:7f:
37:8c:3d:ed:03:f7:4e:33:5c:4e:44:9c:80:18:81:8a:64:0e:
67:c9:e7:12:4e:97:a8:fe:64:70:a6:89:f4:f6:62:6a:9b:05:
9a:ae:22:10:23:43:45:95:6e:fa:b5:5f:16:98:a0:53:e7:00:
8a:a1:d4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:37:18 2026 by rpki-client