Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fxoaLKb4XzIjYCbUemKgp-GX-60.roa
File: fxoaLKb4XzIjYCbUemKgp-GX-60.roa (raw, json)
Hash identifier: 6xn9iqIGxIBwYOTZgzmI0sa8PtVhcW5hzsF83scTR/o=
Subject key identifier: 7F:1A:1A:2C:A6:F8:5F:32:23:60:26:D4:7A:62:A0:A7:E1:97:FB:AD
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EB7B2D8E6080D55721A203567506AE7A6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fxoaLKb4XzIjYCbUemKgp-GX-60.roa
Signing time: Thu 11 Jun 2026 17:20:11 +0000
ROA not before: Thu 11 Jun 2026 17:20:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 78.154.127.0/24 maxlen: 24
80.68.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jun 2026 08:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:b2:d8:e6:08:0d:55:72:1a:20:35:67:50:6a:e7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 11 17:20:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f1a1a2ca6f85f32236026d47a62a0a7e197fbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:fd:a0:a5:67:40:b9:00:82:96:97:80:78:
35:8e:ca:40:00:5e:48:b7:b1:72:0e:16:94:d7:51:
48:74:02:9d:6d:27:c4:d3:7b:16:9a:ea:57:bb:7b:
0b:51:9c:bf:30:c5:51:2d:c3:16:e5:fb:a4:79:a6:
d4:f4:2d:d1:8c:d2:71:d0:c0:33:f6:0d:40:1b:14:
46:75:d2:77:59:d1:e8:f9:16:7c:cc:25:7c:99:1e:
17:d3:e9:9c:d0:8e:52:94:58:e7:cd:3c:7b:d8:8b:
2e:a5:6e:07:20:1e:e5:d6:9d:0d:a0:91:df:d9:f5:
a4:59:55:b1:73:54:48:ab:4b:5b:92:85:cf:0e:2d:
90:45:d0:bc:ab:c4:be:1b:2c:bf:41:df:22:11:ad:
75:6c:28:a5:3e:ca:5a:79:5f:08:e6:b9:06:f0:9a:
e8:a2:c6:09:3e:fb:69:11:46:e2:10:17:5b:89:b1:
29:c5:c6:3d:c1:a4:ae:2e:b0:3e:07:6b:71:0c:2f:
b9:a7:52:b6:54:ac:fa:e5:ef:b6:dc:d2:c6:e4:80:
1c:d2:19:5c:60:6a:9a:0c:53:54:63:b2:ec:54:e4:
d0:3b:83:4c:9d:95:2c:e9:74:70:b8:55:85:eb:35:
7b:2b:da:22:22:5f:b5:c5:ea:6f:7e:30:06:9d:f6:
04:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1A:1A:2C:A6:F8:5F:32:23:60:26:D4:7A:62:A0:A7:E1:97:FB:AD
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fxoaLKb4XzIjYCbUemKgp-GX-60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.127.0/24
80.68.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4e:fc:4e:a6:26:29:98:de:6c:d2:41:10:9f:f3:ac:21:31:
e6:c2:dd:87:dd:13:ce:54:b0:7c:83:ef:fa:48:8a:aa:d5:c9:
b8:d5:c4:25:5a:e1:35:7c:74:6a:fa:98:f2:7b:73:56:89:41:
84:f8:41:18:04:3d:36:2e:2f:2f:bb:4d:c7:e8:2b:e5:e0:14:
c6:61:2d:61:e5:95:45:ed:97:11:02:04:e3:37:cd:d9:ff:0d:
5d:06:a9:41:e2:50:ad:78:d2:d5:8e:88:33:62:87:b4:45:c2:
f9:0a:3f:1a:eb:9f:98:a8:39:e7:84:c6:19:27:31:46:8e:55:
88:07:3b:2e:fe:5d:fe:36:c5:8b:dd:90:35:4e:09:6c:93:ab:
7e:ed:76:a1:62:5f:c1:b4:04:53:01:de:b9:d8:62:bb:97:f7:
2e:79:59:42:55:9c:25:74:ea:73:f4:b3:8e:5d:80:ca:c8:63:
a8:88:78:a1:e5:f5:8e:f8:cf:1d:21:30:40:31:6e:25:bb:d2:
17:80:de:cd:a3:7a:4e:30:97:71:3a:d8:08:d1:62:21:ab:00:
3a:f2:d7:18:62:32:6e:68:3d:d1:66:4a:58:23:70:c9:e7:cc:
a4:05:8f:4c:23:8f:23:07:de:4d:59:cb:dc:f8:85:cf:b4:d5:
fb:87:7e:fe
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ63stjmCA1VchogNWdQauemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNjExMTcyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjFhMWEyY2E2Zjg1ZjMyMjM2MDI2ZDQ3YTYyYTBhN2UxOTdmYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P/9oKVnQLkAgpaXgHg1jspAAF5I
t7FyDhaU11FIdAKdbSfE03sWmupXu3sLUZy/MMVRLcMW5fukeabU9C3RjNJx0MAz
9g1AGxRGddJ3WdHo+RZ8zCV8mR4X0+mc0I5SlFjnzTx72IsupW4HIB7l1p0NoJHf
2fWkWVWxc1RIq0tbkoXPDi2QRdC8q8S+Gyy/Qd8iEa11bCilPspaeV8I5rkG8Jro
osYJPvtpEUbiEBdbibEpxcY9waSuLrA+B2txDC+5p1K2VKz65e+23NLG5IAc0hlc
YGqaDFNUY7LsVOTQO4NMnZUs6XRwuFWF6zV7K9oiIl+1xepvfjAGnfYEAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH8aGiym+F8yI2Am1HpioKfhl/utMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZnhvYUxLYjRYeklqWUNiVWVtS2dwLUdYLTYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATpp/AwQA
UETRMA0GCSqGSIb3DQEBCwUAA4IBAQA+TvxOpiYpmN5s0kEQn/OsITHmwt2H3RPO
VLB8g+/6SIqq1cm41cQlWuE1fHRq+pjye3NWiUGE+EEYBD02Li8vu03H6Cvl4BTG
YS1h5ZVF7ZcRAgTjN83Z/w1dBqlB4lCteNLVjogzYoe0RcL5Cj8a65+YqDnnhMYZ
JzFGjlWIBzsu/l3+NsWL3ZA1Tglsk6t+7XahYl/BtARTAd652GK7l/cueVlCVZwl
dOpz9LOOXYDKyGOoiHih5fWO+M8dITBAMW4lu9IXgN7No3pOMJdxOtgI0WIhqwA6
8tcYYjJuaD3RZkpYI3DJ58ykBY9MI48jB95NWcvc+IXPtNX7h37+
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:07:54 2026 by rpki-client