Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/7cUkzVZBggbVDuui_b4qrjWuBQM.roa
File: 7cUkzVZBggbVDuui_b4qrjWuBQM.roa (raw, json)
Hash identifier: qZ1C6VzzIsn6hdae2O4v5ZEM+yR2VAO7eTdOiEmTDWI=
Subject key identifier: ED:C5:24:CD:56:41:82:06:D5:0E:EB:A2:FD:BE:2A:AE:35:AE:05:03
Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial: 019D76A04AC9EFBCB632A76100D28F9AF5D6
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/7cUkzVZBggbVDuui_b4qrjWuBQM.roa
Signing time: Fri 10 Apr 2026 09:01:49 +0000
ROA not before: Fri 10 Apr 2026 09:01:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15703
IP address blocks: 80.247.220.0/24 maxlen: 24
87.233.0.0/16 maxlen: 24
193.28.152.0/24 maxlen: 24
213.193.192.0/21 maxlen: 24
213.193.193.0/24 maxlen: 24
213.193.208.0/21 maxlen: 24
213.193.209.0/24 maxlen: 24
213.193.210.0/24 maxlen: 24
213.193.212.0/24 maxlen: 24
213.193.232.0/24 maxlen: 24
213.193.234.0/24 maxlen: 24
213.193.237.0/24 maxlen: 24
213.193.240.0/21 maxlen: 24
213.193.247.0/24 maxlen: 24
213.239.136.0/24 maxlen: 24
213.239.154.0/24 maxlen: 24
2001:990::/32 maxlen: 32
2001:9a8::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 17 Apr 2026 09:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:a0:4a:c9:ef:bc:b6:32:a7:61:00:d2:8f:9a:f5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Validity
Not Before: Apr 10 09:01:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edc524cd56418206d50eeba2fdbe2aae35ae0503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ff:1b:b8:dd:35:9b:52:90:7f:36:de:bf:6b:
ad:ac:37:60:e8:7e:53:ca:22:e3:8c:07:b3:95:dc:
c0:1c:00:e5:f7:da:93:0e:df:4f:64:0d:9f:20:b8:
14:9f:07:69:8e:9e:31:1b:f8:a5:85:54:2f:d3:6f:
90:38:ae:c4:77:9d:5a:a1:98:9e:08:7b:b8:59:90:
dc:b3:69:e9:3a:8e:d1:23:e9:16:ff:0f:8a:e2:75:
19:af:cb:c8:46:1c:b7:ea:b4:03:77:36:a4:a5:65:
4e:4d:31:02:da:df:8e:90:92:3d:bc:54:62:1a:65:
98:25:b6:38:86:20:ea:1f:8c:a5:b4:89:c5:33:a2:
2d:d5:f5:f0:a7:f2:f0:4c:a3:ec:51:dd:0e:f2:1d:
8d:84:6e:57:5a:4e:4a:2b:48:fb:d0:c5:02:d4:cc:
a5:36:90:56:fd:98:9f:dd:18:ac:b8:5c:45:d7:50:
1c:32:03:44:02:15:9a:36:5d:00:f3:3e:59:d4:db:
33:e3:1c:ed:7a:fe:f5:eb:28:13:d9:e0:12:b8:7d:
fa:a5:58:c7:a7:20:dc:ae:5a:f8:0d:fd:9b:04:27:
d8:c8:a4:e3:7e:fd:00:6e:35:68:28:85:f7:be:40:
68:66:28:65:a3:b4:7c:99:e8:77:1f:7d:d0:40:e7:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C5:24:CD:56:41:82:06:D5:0E:EB:A2:FD:BE:2A:AE:35:AE:05:03
X509v3 Authority Key Identifier:
keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/7cUkzVZBggbVDuui_b4qrjWuBQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.220.0/24
87.233.0.0/16
193.28.152.0/24
213.193.192.0/21
213.193.208.0/21
213.193.232.0/24
213.193.234.0/24
213.193.237.0/24
213.193.240.0/21
213.239.136.0/24
213.239.154.0/24
IPv6:
2001:990::/32
2001:9a8::/32
Signature Algorithm: sha256WithRSAEncryption
d6:7b:7c:ca:24:cc:0d:1b:04:dd:82:24:7f:51:70:67:0d:2b:
7f:cc:90:b9:2c:37:fc:39:14:e9:b1:58:97:de:7f:dc:24:8e:
f8:35:ed:e2:7b:9b:1a:a2:ff:06:75:32:32:6b:df:42:27:4b:
7c:7d:37:29:50:f8:c7:b5:aa:33:1b:53:e6:8d:9a:33:3d:40:
84:72:54:aa:bc:ea:f5:02:c0:ba:1b:e8:f2:38:9a:00:40:4b:
b1:7e:0d:00:31:63:a3:d9:29:85:5b:7a:20:98:9a:00:fd:cc:
1d:c2:e3:d5:54:0f:c5:da:cc:61:73:9d:9e:20:41:8f:a4:90:
3f:49:a4:61:c2:88:d9:43:44:ab:05:89:4e:83:fe:cd:97:4c:
d8:8a:50:52:65:35:93:a3:05:b2:c5:79:f0:c2:16:9a:2f:ff:
a6:01:55:28:a9:4d:0c:1e:63:96:ac:a9:ab:f4:4b:6d:8f:50:
6a:52:f2:b9:90:36:88:11:5a:bb:fc:3f:10:e3:08:c2:9e:ce:
93:d8:cb:25:49:93:88:78:61:ee:bf:cd:f5:fd:c4:93:d5:af:
ad:66:f6:f0:34:95:05:a4:39:d7:ff:3b:16:7e:27:90:fe:66:
31:24:7a:b1:1b:44:8d:f4:d1:8a:c6:a1:c5:84:97:5c:7c:1a:
f5:98:a4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:26 2026 by rpki-client