Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JTeahDPGYsX5Z17b19DrCsfo7VY.roa
File: JTeahDPGYsX5Z17b19DrCsfo7VY.roa (raw, json)
Hash identifier: u8LLddyeYlxquGhreM/DsdQqlShsSCI+PYcOCl8pyH0=
Subject key identifier: 25:37:9A:84:33:C6:62:C5:F9:67:5E:DB:D7:D0:EB:0A:C7:E8:ED:56
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019BF9361862F8558CA8D9422A32D64BCD1A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JTeahDPGYsX5Z17b19DrCsfo7VY.roa
Signing time: Mon 26 Jan 2026 07:30:30 +0000
ROA not before: Mon 26 Jan 2026 07:30:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48266
IP address blocks: 82.151.236.0/22 maxlen: 24
82.151.248.0/22 maxlen: 24
212.135.32.0/20 maxlen: 24
212.135.112.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Mar 2026 00:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:36:18:62:f8:55:8c:a8:d9:42:2a:32:d6:4b:cd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jan 26 07:30:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25379a8433c662c5f9675edbd7d0eb0ac7e8ed56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:7b:1f:6d:a9:94:af:8d:d6:86:eb:d3:29:
a4:57:93:9a:4b:44:87:0e:98:0c:61:3b:37:b9:92:
78:f7:4d:3f:03:40:65:96:8f:bb:53:cc:c9:f4:13:
a8:c5:34:b6:08:1b:e6:90:52:f5:62:de:63:7b:00:
a1:a0:d4:74:2e:38:86:cc:9b:e4:c1:d5:95:23:56:
8f:2e:4b:7f:09:50:72:54:9d:2e:11:cd:ea:0d:d5:
f8:7b:55:ba:c6:2d:59:5c:f2:fb:05:75:d7:16:ac:
ec:43:22:a0:1e:d4:0c:7a:df:de:15:8e:36:49:0f:
80:ab:69:c9:5b:80:bd:d3:5c:e8:24:a7:39:15:4b:
e9:0e:ec:69:65:60:1d:03:e1:fa:47:60:91:fd:91:
d5:85:e5:de:60:4b:9a:c7:49:4e:44:8e:5d:8d:cb:
82:80:9e:dc:60:73:17:ef:ab:37:b4:e9:68:c5:9b:
e8:8d:78:07:05:14:0b:70:10:ec:e1:40:01:11:25:
7a:b1:5d:92:5c:4f:06:2d:f9:58:96:be:0d:fe:0c:
c6:f4:f8:1d:ae:a5:3e:0f:19:4d:6a:b3:bd:b7:76:
9b:1b:a9:86:94:86:cb:30:19:67:6a:f2:23:96:3c:
55:80:6b:24:e8:4a:4f:7a:1b:25:bb:21:28:fc:c5:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:37:9A:84:33:C6:62:C5:F9:67:5E:DB:D7:D0:EB:0A:C7:E8:ED:56
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JTeahDPGYsX5Z17b19DrCsfo7VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.151.236.0/22
82.151.248.0/22
212.135.32.0/20
212.135.112.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:58:dd:32:2c:6e:08:49:28:ea:74:e3:d5:0b:f0:4d:f2:da:
ae:df:90:1e:d4:6b:8b:1c:e1:43:bb:e6:52:a9:55:1e:c7:01:
3b:fc:7e:04:06:fa:ec:1c:3b:00:e7:47:6f:9b:79:17:fd:0c:
b4:b5:9b:21:34:43:ca:4a:87:59:9f:39:5b:8a:12:67:45:a2:
86:53:21:76:ce:c2:c9:9e:81:19:a5:62:5e:3c:54:7f:dd:25:
a2:a0:77:91:08:7d:01:20:d6:50:ad:af:d0:1c:d1:1a:79:9f:
be:a4:c7:ed:db:6f:bf:e5:5a:a4:77:8f:86:14:16:e9:73:43:
4d:72:b1:06:90:a5:fc:46:1d:b5:6f:1c:c2:11:cf:21:0e:00:
98:40:94:9b:63:de:5f:75:c4:aa:0a:b6:da:d9:67:25:79:f1:
2c:da:0e:47:3e:31:83:25:56:53:d8:95:95:b2:bc:97:fa:51:
41:17:1b:08:12:6b:8b:38:c8:54:2d:a7:dd:eb:73:78:54:9c:
8f:d2:c2:9f:08:af:34:17:2d:e8:81:ba:81:37:38:bb:5f:56:
2f:fa:3a:8f:9f:ce:26:25:9c:be:14:d2:0e:cb:e3:ed:b1:46:
ed:b7:c3:66:6d:41:06:53:c2:18:c2:85:8a:c9:2a:17:fc:a5:
26:e5:29:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:57 2026 by rpki-client