Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GBKBUZAg-Z61I9rW640XvEl0tgM.roa
File: GBKBUZAg-Z61I9rW640XvEl0tgM.roa (raw, json)
Hash identifier: JXaOmOBfYTQVRl4lLaMFciVeiqcxm25gyh/Cnz9gQ3g=
Subject key identifier: 18:12:81:51:90:20:F9:9E:B5:23:DA:D6:EB:8D:17:BC:49:74:B6:03
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019EDD4E2ECB157A6AD884A1A2503D200D05
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GBKBUZAg-Z61I9rW640XvEl0tgM.roa
Signing time: Fri 19 Jun 2026 00:35:48 +0000
ROA not before: Fri 19 Jun 2026 00:35:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/24 maxlen: 24
87.120.192.0/23 maxlen: 23
87.121.147.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jun 2026 05:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:4e:2e:cb:15:7a:6a:d8:84:a1:a2:50:3d:20:0d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 19 00:35:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=181281519020f99eb523dad6eb8d17bc4974b603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:13:64:75:a3:4f:41:59:f2:33:99:b8:04:
41:1a:25:43:2d:66:c4:10:77:2d:75:a2:fb:1d:8d:
78:ec:a9:07:63:f0:19:57:27:f6:1a:fc:b4:df:40:
a0:54:94:f7:3f:9e:c1:f6:b8:8a:ca:47:b7:f2:27:
e7:74:37:9e:c2:e0:07:90:2e:7d:6f:96:53:3e:83:
42:9d:97:70:d9:c4:74:8b:61:40:e2:13:06:36:26:
34:ec:09:5a:b2:9b:ff:1f:ad:c3:6a:4a:8a:4c:0e:
fa:d3:29:00:d3:92:78:7a:2e:c5:1e:fa:fa:d3:3e:
68:d7:30:02:48:03:68:68:f1:8d:4a:46:10:c7:de:
95:74:79:a0:d1:88:2e:a0:62:84:5a:61:f2:c9:77:
14:02:aa:5f:06:5f:c5:67:46:68:4a:61:74:a1:d5:
da:e2:a8:67:65:60:8d:26:c0:55:50:f9:68:80:2a:
5a:9d:c0:e9:80:e2:d1:25:c2:37:11:83:79:35:c6:
8c:3f:5a:d2:ba:13:87:f7:36:82:11:95:34:15:9b:
62:7b:56:1a:c4:58:20:3c:a9:29:ca:aa:d5:78:8f:
b9:e9:73:08:75:bb:a3:60:cb:fc:d0:0d:2a:75:2c:
85:3d:47:8b:29:fe:1c:19:83:4c:6f:3a:2c:b3:01:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:12:81:51:90:20:F9:9E:B5:23:DA:D6:EB:8D:17:BC:49:74:B6:03
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GBKBUZAg-Z61I9rW640XvEl0tgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/24
87.120.192.0/23
87.121.147.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:a8:9f:2e:df:13:1e:9e:6f:85:63:36:51:86:f0:b1:ae:6f:
e0:6f:c4:a1:a2:d2:1c:c8:49:c1:7a:3f:5f:36:76:fe:63:50:
b8:21:5d:b1:7d:28:74:86:19:2e:da:ce:d9:22:d2:7e:d8:c1:
e8:8e:b3:25:94:a0:4a:91:10:b9:8d:05:38:c2:fa:4a:7f:15:
55:22:67:42:67:f1:9f:28:1a:b2:4d:cd:b8:97:ec:0b:43:e5:
8d:42:ec:b6:b4:84:43:0e:7b:5b:4b:70:6e:11:5c:d5:62:1f:
be:9c:31:99:c9:ed:a8:da:df:2a:25:b4:33:b7:93:56:03:24:
72:ff:99:0a:d5:99:53:a8:91:a9:01:d2:d5:3a:63:c7:10:c5:
42:41:4f:cb:a3:f0:dc:08:b9:9e:d0:8c:6c:d7:f5:12:b6:23:
35:ef:20:cd:13:ff:2b:14:11:6e:2a:56:31:43:53:4f:fd:c3:
32:13:20:29:ea:99:02:56:14:68:36:99:68:00:c7:34:77:c2:
61:e6:5d:44:a7:f4:94:62:8a:3f:f9:2d:69:4e:f8:57:fc:c4:
f5:58:0c:3d:28:f5:55:b6:0b:5c:0c:8e:b8:37:5a:28:2e:29:
b5:39:ff:be:c6:50:82:8f:e5:02:2b:6b:7a:18:14:5e:f2:24:
8d:ee:0d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:25:31 2026 by rpki-client