Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/irXBPbdZ26TDfnEI6kICQgurQz4.roa
File: irXBPbdZ26TDfnEI6kICQgurQz4.roa (raw, json)
Hash identifier: B93cRz4ijNyexupHvd27lwK+AuNfnyvsrT6n3IPFMiE=
Subject key identifier: 8A:B5:C1:3D:B7:59:DB:A4:C3:7E:71:08:EA:42:02:42:0B:AB:43:3E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1200B32EB81D44BA3C3DC8B0B6113C846
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/irXBPbdZ26TDfnEI6kICQgurQz4.roa
Signing time: Fri 09 Oct 2026 09:42:46 +0000
ROA not before: Fri 09 Oct 2026 09:42:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 82.108.125.0/24 maxlen: 24
87.82.193.0/24 maxlen: 24
87.83.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Oct 2026 07:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:0b:32:eb:81:d4:4b:a3:c3:dc:8b:0b:61:13:c8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 9 09:42:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ab5c13db759dba4c37e7108ea4202420bab433e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:dd:b7:aa:50:5f:83:5a:bd:6c:43:d9:86:
af:26:73:f3:54:34:8f:74:f6:e3:d7:e9:b7:74:f5:
9a:01:b6:e9:17:26:31:56:0d:aa:33:3f:c0:f9:75:
09:47:d4:dc:d7:3e:ed:03:3c:50:56:ef:f2:a7:85:
82:f6:cb:d1:6a:3e:b4:2f:72:10:fb:e4:24:b0:94:
66:ec:2c:24:69:e7:1c:c7:d8:a7:54:94:00:25:ac:
cc:38:0c:4e:bb:d8:b9:08:97:3c:3f:50:5c:64:48:
d5:15:74:25:5a:f7:07:dc:65:d4:3b:fc:5b:24:91:
08:c6:14:00:e3:33:65:9c:65:5d:15:0e:77:78:61:
77:c7:64:9c:34:8c:00:ac:66:19:b9:9d:bd:e0:fa:
27:74:73:d0:59:a2:c4:7b:c0:cd:d3:3e:79:5b:fe:
33:ce:05:b8:95:14:29:b3:00:86:fd:3d:46:f1:04:
96:22:7f:b9:59:14:67:ef:d5:9d:5c:d9:18:0e:02:
30:05:76:63:ff:cb:a3:21:e5:bd:d4:ed:47:50:e7:
a3:c3:db:36:8d:0e:bb:16:3e:e4:ad:b6:70:fa:89:
7a:a9:0c:dc:60:96:13:be:9b:ae:da:ee:32:41:a1:
1d:f8:53:99:09:44:2d:74:3a:7c:f5:ec:78:8f:82:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B5:C1:3D:B7:59:DB:A4:C3:7E:71:08:EA:42:02:42:0B:AB:43:3E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/irXBPbdZ26TDfnEI6kICQgurQz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.125.0/24
87.82.193.0/24
87.83.220.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b2:38:0e:19:50:b5:3e:00:a9:bf:e2:6e:0e:de:a2:81:fb:
f6:6b:a4:c5:12:9f:51:9c:d9:7c:23:25:9f:56:30:6f:39:d3:
6e:1d:a8:8f:be:74:ba:b8:a6:6d:c3:f0:a2:b3:7f:b5:ac:15:
20:d7:d4:58:ac:86:ac:07:49:a3:e2:3e:64:c6:8c:58:9d:4c:
0b:24:1f:df:1a:17:eb:31:90:46:f5:3d:8a:62:b3:95:6e:b0:
a4:c9:f1:cd:0a:72:fb:8b:80:16:11:61:a3:1a:6a:7d:93:b6:
0c:83:68:df:7c:83:64:26:37:1e:35:5c:56:6f:9b:64:6d:41:
15:61:ee:94:fd:e7:8a:2a:a9:0f:64:82:ce:b2:8a:bc:35:df:
80:a4:29:81:3a:62:0a:8f:11:3b:24:b8:07:81:ca:8a:3d:eb:
da:4f:25:2c:25:e0:f2:ca:2a:e9:61:de:2e:80:7f:89:a1:70:
ea:16:e1:28:2b:ba:0f:15:c9:d7:44:72:4c:85:98:c9:d1:fb:
34:8d:10:65:36:b9:d6:f5:22:b0:68:3b:09:33:d0:27:32:f3:
42:47:a1:4a:8d:c9:8e:23:09:a2:f1:28:bf:cd:69:d7:4e:cb:
ac:f6:02:e0:65:2f:87:32:e4:01:ae:0d:96:4e:5a:43:59:16:
0e:12:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:20:23 2026 by rpki-client