Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dxUGCfLBbW72c1PDbLR9HAjLTJA.roa
File: dxUGCfLBbW72c1PDbLR9HAjLTJA.roa (raw, json)
Hash identifier: jBpO+fQR0ABBIOePhCekwY+velKa3VKNA3PF/j4qt54=
Subject key identifier: 77:15:06:09:F2:C1:6D:6E:F6:73:53:C3:6C:B4:7D:1C:08:CB:4C:90
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FA60C0BFE8891E3BC483C1BDFE6174FA2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dxUGCfLBbW72c1PDbLR9HAjLTJA.roa
Signing time: Tue 28 Jul 2026 00:07:15 +0000
ROA not before: Tue 28 Jul 2026 00:07:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197200
IP address blocks: 87.83.174.0/24 maxlen: 24
87.84.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jul 2026 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:0c:0b:fe:88:91:e3:bc:48:3c:1b:df:e6:17:4f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 28 00:07:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77150609f2c16d6ef67353c36cb47d1c08cb4c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:45:f6:87:32:35:f6:30:21:2b:41:02:5a:
fa:1a:23:23:86:32:93:c4:b7:d1:77:d2:54:3e:16:
f8:12:93:ca:8c:ef:95:b4:34:fa:06:a6:d6:6b:00:
be:bc:e3:74:77:f7:2a:8e:90:fd:ef:5a:0d:3f:d3:
21:68:89:c1:70:9d:ad:4f:46:9e:b2:2d:89:31:51:
e7:b7:d6:94:17:8c:47:0d:dc:25:b9:fd:18:7b:1a:
15:bd:ab:c3:db:73:c4:9a:27:07:63:44:7c:3f:7a:
38:ab:1e:49:ec:72:da:a5:af:e0:c7:43:56:1a:7b:
fb:0a:b3:90:48:62:c7:cd:95:e2:fd:7a:d5:2a:a4:
64:b6:7c:17:a8:0a:b0:b4:b3:6e:9e:32:b9:b8:0f:
cd:14:b2:bf:97:39:ff:6e:7d:0b:3b:4e:9f:6e:19:
4d:f5:e3:f0:dd:7b:fd:29:d7:25:47:e7:46:6e:2f:
64:49:d0:a0:34:55:8c:7a:ac:63:1b:2a:68:b3:c5:
a3:12:cc:a2:61:28:22:d3:44:e0:d3:f4:b2:1f:0e:
ff:09:ec:ee:79:34:5d:07:4b:a6:be:d1:81:b0:62:
75:0c:3f:55:c4:37:bd:a7:eb:b0:be:f9:8b:d4:22:
60:ea:54:4e:18:d6:93:a6:28:1a:06:db:f4:0c:38:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:15:06:09:F2:C1:6D:6E:F6:73:53:C3:6C:B4:7D:1C:08:CB:4C:90
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dxUGCfLBbW72c1PDbLR9HAjLTJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.174.0/24
87.84.76.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:ec:d0:b2:1f:e2:ad:fb:be:86:e6:6a:88:99:b8:8f:09:a9:
6b:d5:a3:43:e0:49:5c:3d:76:17:00:80:ab:97:32:02:c6:23:
a2:3d:c1:ba:9b:ac:db:c3:11:bf:a2:ed:b2:bf:a3:4a:09:15:
cf:e9:6b:b4:01:14:27:28:4f:f5:ff:db:19:36:17:d8:d6:a0:
27:2e:ef:1f:b8:df:9e:62:ec:24:71:b2:33:c0:2f:31:24:49:
4b:31:f3:15:00:01:fc:4a:a1:fc:80:41:96:c8:6a:a6:6a:1e:
d9:4c:fe:33:d3:22:93:8e:97:b1:61:0d:c3:18:ab:2e:1a:46:
38:05:4c:71:07:9b:a9:15:e9:c9:2b:86:79:e1:aa:42:eb:38:
87:59:1c:73:17:8b:87:81:56:f3:84:83:ca:19:14:74:b2:f5:
99:d3:b6:bf:cb:2e:4d:2d:e1:4a:74:1a:fb:57:6d:1a:e0:df:
9b:2e:20:74:71:25:f3:5b:66:a4:5b:6c:72:77:e7:26:32:5a:
13:1f:85:52:35:70:7e:26:22:76:9b:d3:d0:e9:8f:7c:21:69:
de:8c:6c:06:9b:97:15:c3:e0:0c:e2:f8:1e:20:ef:23:cf:80:
2b:af:b7:1d:c1:e4:e8:5e:8a:21:da:a9:88:e8:d8:2c:19:76:
f2:e9:93:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:43 2026 by rpki-client