Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RfoA25NsNyhk6oLIR5zJByhLlSo.roa
File: RfoA25NsNyhk6oLIR5zJByhLlSo.roa (raw, json)
Hash identifier: ihZRvtTlDmJ7wE5N+hboajF2FgtVWbwdWCPP371BAD4=
Subject key identifier: 45:FA:00:DB:93:6C:37:28:64:EA:82:C8:47:9C:C9:07:28:4B:95:2A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B78828F6A21FBEC8CF8E6164AE281D54
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RfoA25NsNyhk6oLIR5zJByhLlSo.roa
Signing time: Sat 19 Sep 2026 02:39:08 +0000
ROA not before: Sat 19 Sep 2026 02:39:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 82.110.145.0/24 maxlen: 24
82.110.153.0/24 maxlen: 24
82.110.157.0/24 maxlen: 24
82.110.225.0/24 maxlen: 24
82.110.230.0/24 maxlen: 24
87.82.213.0/24 maxlen: 24
87.82.234.0/24 maxlen: 24
87.83.193.0/24 maxlen: 24
87.84.68.0/24 maxlen: 24
87.84.218.0/24 maxlen: 24
87.84.237.0/24 maxlen: 24
87.85.137.0/24 maxlen: 24
87.86.100.0/24 maxlen: 24
87.86.105.0/24 maxlen: 24
87.86.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:88:28:f6:a2:1f:be:c8:cf:8e:61:64:ae:28:1d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 19 02:39:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45fa00db936c372864ea82c8479cc907284b952a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:22:a4:cf:24:5d:fc:c2:9b:32:46:c9:28:
ff:6c:b9:4e:2d:f6:6d:92:fc:1e:a0:47:b9:99:83:
c7:7a:c7:ce:90:3d:cb:86:37:18:b7:c5:84:67:6e:
b1:68:fb:31:47:a8:4d:25:68:52:aa:76:d4:fe:ba:
4a:75:ca:b4:22:e6:2e:24:f7:d7:59:36:56:6d:c2:
08:04:c9:39:5b:08:c4:18:ff:e5:c1:95:9e:7b:65:
1d:50:11:38:df:27:3e:3c:a4:1c:25:b7:b8:92:5b:
d6:cd:c0:b6:5f:b3:e9:8e:f5:b4:2f:81:57:98:f3:
6d:dc:88:87:91:4c:29:60:30:f6:6d:54:12:da:8b:
7f:f3:12:be:8a:35:b0:db:7a:74:b1:1d:14:bf:d4:
25:51:fb:62:54:95:16:44:ef:95:14:6e:ce:8e:0d:
b8:7f:9b:c5:fb:5c:89:69:39:bf:fe:7c:27:dd:34:
a5:43:43:cf:51:cb:93:9f:13:55:3a:d8:35:d2:9d:
69:ef:18:fc:b4:c6:51:06:59:23:ca:6c:16:d7:94:
48:c0:d9:b9:21:96:c4:e5:13:0f:48:03:77:f2:3f:
2e:47:24:c2:a0:f3:f1:2f:95:1d:7c:79:28:91:67:
69:97:56:ef:9c:94:d3:82:a4:67:eb:e1:62:b6:67:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FA:00:DB:93:6C:37:28:64:EA:82:C8:47:9C:C9:07:28:4B:95:2A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RfoA25NsNyhk6oLIR5zJByhLlSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.145.0/24
82.110.153.0/24
82.110.157.0/24
82.110.225.0/24
82.110.230.0/24
87.82.213.0/24
87.82.234.0/24
87.83.193.0/24
87.84.68.0/24
87.84.218.0/24
87.84.237.0/24
87.85.137.0/24
87.86.100.0/24
87.86.105.0/24
87.86.169.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:b4:90:5b:81:09:e2:e8:b4:8e:34:66:50:3e:57:99:2c:cc:
f7:a8:72:34:72:34:01:b9:b5:18:01:91:54:48:ea:c2:e4:b3:
a3:be:0a:b6:55:b1:e2:df:4f:08:54:17:5c:1c:2e:fb:89:77:
7b:a1:f9:3b:d7:9d:b8:4e:87:e7:c8:60:c7:44:db:6e:b3:65:
cb:74:3e:73:28:ce:27:99:ac:26:b0:cf:28:b8:b6:22:12:4f:
81:26:01:6e:4c:1c:b7:0c:c7:15:f3:af:c9:b3:78:d5:17:36:
10:a7:a4:7f:bc:71:6a:13:f5:98:82:3f:6f:05:f2:81:73:b9:
33:91:3c:9a:92:35:d6:b8:ae:4a:72:e7:6e:c5:7d:1d:5b:f3:
3a:dc:a9:09:1a:59:86:c2:1b:7d:77:dd:e9:51:8e:a5:20:c9:
b8:0f:2c:e9:29:a8:a8:92:74:b5:5f:1b:8c:f5:b7:07:ad:6f:
93:37:8a:15:82:88:1c:f6:73:36:07:ac:7d:a8:1e:01:73:7e:
4d:82:c9:cc:9e:e6:1a:b6:39:d4:21:a7:6d:45:82:35:ff:b2:
e7:c1:74:c9:b6:2e:f9:0b:87:7f:87:42:51:61:9c:93:3c:45:
15:7e:cd:a5:ae:83:85:06:98:34:3b:69:dc:f9:d2:dd:72:8a:
32:63:46:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:40:23 2026 by rpki-client