Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/F-JQA11tqEM8SyTEsMgmAC8nmuI.roa
File: F-JQA11tqEM8SyTEsMgmAC8nmuI.roa (raw, json)
Hash identifier: hOXKZxUTZkmOW3KGNhJeDFpvXZPf4GAFV/LhgzbK05s=
Subject key identifier: 17:E2:50:03:5D:6D:A8:43:3C:4B:24:C4:B0:C8:26:00:2F:27:9A:E2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0A8C09558F4D2BEE26DE5A888D136B1F1
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/F-JQA11tqEM8SyTEsMgmAC8nmuI.roa
Signing time: Wed 16 Sep 2026 05:46:28 +0000
ROA not before: Wed 16 Sep 2026 05:46:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 82.109.151.0/24 maxlen: 24
87.82.62.0/24 maxlen: 24
87.83.47.0/24 maxlen: 24
87.83.115.0/24 maxlen: 24
87.84.64.0/24 maxlen: 24
212.134.16.0/24 maxlen: 24
212.134.18.0/24 maxlen: 24
212.134.19.0/24 maxlen: 24
212.134.22.0/24 maxlen: 24
212.134.24.0/24 maxlen: 24
212.134.58.0/24 maxlen: 24
212.134.59.0/24 maxlen: 24
212.134.80.0/24 maxlen: 24
212.134.83.0/24 maxlen: 24
212.134.99.0/24 maxlen: 24
212.134.104.0/24 maxlen: 24
212.134.110.0/24 maxlen: 24
212.134.120.0/24 maxlen: 24
212.134.134.0/24 maxlen: 24
212.134.136.0/24 maxlen: 24
212.134.143.0/24 maxlen: 24
212.134.160.0/24 maxlen: 24
212.134.171.0/24 maxlen: 24
212.134.175.0/24 maxlen: 24
212.134.176.0/24 maxlen: 24
212.134.181.0/24 maxlen: 24
212.134.184.0/24 maxlen: 24
212.134.185.0/24 maxlen: 24
212.134.202.0/24 maxlen: 24
212.134.219.0/24 maxlen: 24
212.134.233.0/24 maxlen: 24
212.134.234.0/24 maxlen: 24
212.134.237.0/24 maxlen: 24
212.134.238.0/24 maxlen: 24
212.134.244.0/24 maxlen: 24
212.134.246.0/24 maxlen: 24
212.134.251.0/24 maxlen: 24
212.135.66.0/24 maxlen: 24
212.135.98.0/24 maxlen: 24
212.135.140.0/24 maxlen: 24
212.135.141.0/24 maxlen: 24
212.135.150.0/24 maxlen: 24
212.135.158.0/24 maxlen: 24
212.135.168.0/24 maxlen: 24
212.135.171.0/24 maxlen: 24
212.135.204.0/24 maxlen: 24
212.135.242.0/24 maxlen: 24
212.135.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 08:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a8:c0:95:58:f4:d2:be:e2:6d:e5:a8:88:d1:36:b1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 16 05:46:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17e250035d6da8433c4b24c4b0c826002f279ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:35:28:90:ec:91:7a:ab:e6:f9:22:26:db:
24:02:7e:20:a5:8e:e0:f0:85:f5:68:c3:31:b6:7f:
22:c7:49:a4:e2:5d:02:7b:ca:24:a4:d6:5b:67:1b:
3a:38:19:3d:23:bb:e3:a5:db:62:21:9c:64:1e:34:
ac:dc:35:25:27:68:29:d1:54:80:7e:b9:49:99:13:
20:33:ee:58:0a:c4:c6:fe:ed:9f:15:87:6d:54:26:
c9:8d:c5:9d:1d:46:6d:f8:cd:69:bf:ea:52:35:e8:
08:94:c5:be:08:df:0e:bf:8b:9c:60:e7:89:db:72:
d2:a7:67:58:92:8d:57:c6:f3:43:ad:66:e6:e3:ae:
2b:87:97:c5:cc:05:7d:c8:dc:17:11:ff:02:c2:af:
53:40:4e:24:ff:07:ca:37:51:54:bd:7a:7a:45:04:
dc:4d:ab:ee:7a:a0:99:dc:b4:c2:e0:bf:8a:ae:84:
93:b7:b3:d8:8f:9e:70:49:8c:6a:01:27:bf:ce:de:
01:ea:90:ff:94:92:c3:05:29:92:8e:aa:1d:b7:fe:
c6:8c:05:b2:f0:b8:a8:ac:94:86:35:8b:ab:81:d6:
fc:22:09:5d:2f:76:44:d2:22:03:56:ae:6c:b5:f3:
1c:a2:34:09:25:9a:8f:d7:e8:82:aa:9c:b7:b9:e5:
0d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E2:50:03:5D:6D:A8:43:3C:4B:24:C4:B0:C8:26:00:2F:27:9A:E2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/F-JQA11tqEM8SyTEsMgmAC8nmuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.151.0/24
87.82.62.0/24
87.83.47.0/24
87.83.115.0/24
87.84.64.0/24
212.134.16.0/24
212.134.18.0/23
212.134.22.0/24
212.134.24.0/24
212.134.58.0/23
212.134.80.0/24
212.134.83.0/24
212.134.99.0/24
212.134.104.0/24
212.134.110.0/24
212.134.120.0/24
212.134.134.0/24
212.134.136.0/24
212.134.143.0/24
212.134.160.0/24
212.134.171.0/24
212.134.175.0-212.134.176.255
212.134.181.0/24
212.134.184.0/23
212.134.202.0/24
212.134.219.0/24
212.134.233.0-212.134.234.255
212.134.237.0-212.134.238.255
212.134.244.0/24
212.134.246.0/24
212.134.251.0/24
212.135.66.0/24
212.135.98.0/24
212.135.140.0/23
212.135.150.0/24
212.135.158.0/24
212.135.168.0/24
212.135.171.0/24
212.135.204.0/24
212.135.242.0/24
212.135.250.0/24
Signature Algorithm: sha256WithRSAEncryption
86:61:6e:cf:be:ce:09:84:f9:20:f5:1e:11:a6:0f:0d:8b:67:
6a:c2:19:ab:6b:c2:49:85:73:96:40:2f:8a:99:40:40:05:6c:
cc:56:0b:b2:1f:fa:3e:70:52:2d:85:a3:a4:87:61:7e:40:7b:
c3:b3:fa:0e:dc:8d:6a:db:97:1f:97:e3:7a:57:0d:7c:c0:7d:
51:41:a1:ac:9a:b5:5d:be:df:6d:ab:6e:fe:5c:1e:79:75:e7:
db:e4:1c:3c:00:35:97:c2:0e:a9:b2:b9:55:f4:1a:23:c2:6f:
d5:60:52:00:c0:94:6b:ce:ac:ef:4d:22:ba:d0:5e:f7:d7:5e:
71:3e:f0:e0:04:4e:1a:98:1f:91:13:ff:dd:94:6d:21:25:e5:
af:28:1c:4b:92:05:11:f3:d5:88:57:bf:b3:47:6d:61:8d:7b:
87:c5:3f:87:81:dc:b9:09:28:1a:0b:6a:0e:05:50:40:8d:74:
8c:c7:89:ee:23:16:42:2b:fb:90:74:03:56:9c:2d:ec:b1:fc:
6d:5b:fe:a0:8a:26:be:14:a3:10:b7:5a:bc:ac:28:f6:3d:3e:
ac:63:d2:6e:ba:b5:85:81:af:47:c1:ff:fb:be:0c:dd:18:fd:
53:1f:11:f5:c6:96:26:8a:91:f1:b9:4d:d6:ee:fd:26:18:64:
c9:dc:78:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:57:59 2026 by rpki-client