Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/t8kbJ09KceDuTqEygRkDW943ggo.roa
File: t8kbJ09KceDuTqEygRkDW943ggo.roa (raw, json)
Hash identifier: WQmJb65ZzRIGloHH0ll1CyOjlcmr+KGrD4pzOVuecC0=
Subject key identifier: B7:C9:1B:27:4F:4A:71:E0:EE:4E:A1:32:81:19:03:5B:DE:37:82:0A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B788281DFF278BEC59625B252FEB8611
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/t8kbJ09KceDuTqEygRkDW943ggo.roa
Signing time: Sat 19 Sep 2026 02:39:08 +0000
ROA not before: Sat 19 Sep 2026 02:39:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 82.110.145.0/24 maxlen: 24
82.110.153.0/24 maxlen: 24
82.110.157.0/24 maxlen: 24
82.110.225.0/24 maxlen: 24
87.82.213.0/24 maxlen: 24
87.84.218.0/24 maxlen: 24
87.84.237.0/24 maxlen: 24
87.86.100.0/24 maxlen: 24
87.86.105.0/24 maxlen: 24
87.86.169.0/24 maxlen: 24
212.134.105.0/24 maxlen: 24
212.134.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Sep 2026 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:88:28:1d:ff:27:8b:ec:59:62:5b:25:2f:eb:86:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 19 02:39:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7c91b274f4a71e0ee4ea1328119035bde37820a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:75:7d:bc:77:b9:b3:9d:a5:14:04:50:f2:
b8:c3:fb:c6:dd:77:aa:27:7c:b3:36:2c:71:51:4f:
48:0b:ed:a3:ac:09:5b:aa:11:cc:07:81:1e:a9:60:
a6:25:38:39:a4:5a:42:e6:5b:95:a3:77:32:a1:e4:
c8:eb:d0:1c:55:e2:8f:99:e0:50:a8:c5:06:04:ee:
1a:5d:de:87:eb:2c:d9:1e:f4:ba:94:9a:ca:ad:18:
91:3a:3d:be:8e:bc:1d:7a:17:0d:86:57:07:c5:b4:
49:9d:b3:21:67:32:8d:68:b5:ca:81:ef:73:e8:b9:
48:94:b5:ef:52:b7:3d:55:46:ed:33:07:c7:6e:0b:
95:f6:15:f5:09:7f:13:03:f1:c2:6a:bf:2d:3f:7f:
a2:13:44:4c:0e:e6:85:6a:d8:aa:a9:3a:28:17:3f:
ba:48:86:c6:3c:f6:ff:61:90:34:53:f2:69:87:51:
4f:a2:2f:fa:df:4d:48:e5:1b:79:a8:d6:9a:3d:cf:
8d:6a:f7:48:16:bd:21:14:a7:7c:c6:36:0a:07:eb:
88:5a:b3:07:a9:8d:16:dc:aa:35:ff:95:70:cc:56:
1c:6d:f9:91:45:d1:83:46:70:8e:ba:28:c9:ca:87:
f0:97:5f:e3:f3:b9:87:6c:ad:c7:91:8d:2a:ee:27:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C9:1B:27:4F:4A:71:E0:EE:4E:A1:32:81:19:03:5B:DE:37:82:0A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/t8kbJ09KceDuTqEygRkDW943ggo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.145.0/24
82.110.153.0/24
82.110.157.0/24
82.110.225.0/24
87.82.213.0/24
87.84.218.0/24
87.84.237.0/24
87.86.100.0/24
87.86.105.0/24
87.86.169.0/24
212.134.105.0/24
212.134.111.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c9:8f:0e:09:7e:6c:7d:c1:c0:c5:dc:c4:40:4f:48:fd:f0:
d4:0b:af:3a:9a:c1:e5:c4:d4:7b:92:62:3b:f7:4c:1f:15:24:
0f:31:55:58:5c:b8:a7:a2:d3:f8:8f:d2:71:e8:e1:2c:c5:59:
ec:d0:af:07:31:f0:46:ac:a1:73:a5:4f:be:63:9c:d8:86:0a:
06:a6:79:5a:41:98:a7:7d:f8:51:60:71:db:3d:90:27:b5:23:
40:b7:5e:ef:a9:4b:b6:a6:b7:d0:04:2d:b2:ab:93:4d:a9:3a:
61:60:ef:d4:e4:90:7b:04:e5:01:93:77:fd:b9:65:4d:ea:c1:
11:aa:0b:b3:a1:5f:13:b2:b1:a5:0d:bb:a5:22:3f:63:a6:76:
a2:ce:74:f3:b4:32:e9:b5:15:03:a1:ef:5b:03:29:c1:9b:bd:
a4:d8:96:c5:3c:5b:d9:f3:35:2b:7e:9b:4d:d7:33:1b:c6:8e:
d3:4e:b9:70:58:0b:73:50:fd:29:9e:94:e5:93:81:9d:6d:b1:
c8:40:3b:12:4f:c4:86:e6:2d:ae:74:f1:10:33:95:75:7f:4f:
b2:a7:db:26:af:77:b6:42:16:48:b7:f2:19:2f:4f:e7:c9:d6:
34:34:cf:d8:91:a5:52:b2:55:b4:89:5b:b6:8e:e0:0c:0e:0d:
e0:40:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:00:38 2026 by rpki-client