Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cffSJZ2qeW0V_s4LbybehSzB6OM.roa
File: cffSJZ2qeW0V_s4LbybehSzB6OM.roa (raw, json)
Hash identifier: uZGXciR8nwZrV55n09QVCYnurqpPMlTeA0NJ6YLs3xM=
Subject key identifier: 71:F7:D2:25:9D:AA:79:6D:15:FE:CE:0B:6F:26:DE:85:2C:C1:E8:E3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FBC4880C84AADD707AA374B5432D5D08F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cffSJZ2qeW0V_s4LbybehSzB6OM.roa
Signing time: Sat 01 Aug 2026 07:44:55 +0000
ROA not before: Sat 01 Aug 2026 07:44:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 78.17.62.0/24 maxlen: 24
78.17.82.0/24 maxlen: 24
78.17.83.0/24 maxlen: 24
89.125.154.0/24 maxlen: 24
89.125.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Aug 2026 04:11:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bc:48:80:c8:4a:ad:d7:07:aa:37:4b:54:32:d5:d0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 1 07:44:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71f7d2259daa796d15fece0b6f26de852cc1e8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:82:f2:e9:35:89:75:03:8d:a8:22:8b:06:18:
e0:a5:f5:ee:b4:6e:76:d2:6e:1f:08:c4:d1:ad:82:
e1:3a:50:d4:17:f6:88:0d:a6:fe:08:13:5c:53:fe:
f5:51:09:90:74:4b:5a:be:0a:58:98:ac:ea:13:cb:
2e:6d:c0:b8:63:cb:7b:c7:10:d1:97:15:d6:d8:b4:
fd:f9:ee:33:37:aa:ce:65:a1:5e:80:60:00:e6:11:
dd:77:76:da:9a:c1:6d:4c:8a:ca:d4:bf:30:ae:1b:
47:b7:39:59:ba:2e:90:ae:36:0b:24:40:f3:88:06:
10:6e:6a:a2:18:95:95:7d:6d:f1:6e:90:3a:70:4a:
3b:88:89:1d:0e:21:8a:54:6a:45:57:2b:4d:33:c5:
be:e7:fb:3a:b6:54:06:63:7e:db:5f:46:0c:76:ab:
e3:92:af:bb:1d:cd:b7:40:1a:37:3e:2e:b2:de:f0:
9f:26:7c:75:ff:7c:a9:e5:4b:12:11:e5:68:dd:0b:
5a:3f:1b:29:23:37:32:db:fa:35:f4:fc:79:b8:6f:
ea:c5:a9:ed:55:ba:3c:9b:12:71:4e:ab:d5:f9:0a:
2c:03:ba:1c:05:07:6e:74:49:1d:36:31:5d:a4:fb:
81:e0:86:f4:6f:f0:a6:dc:d0:a3:eb:e6:b1:41:c7:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F7:D2:25:9D:AA:79:6D:15:FE:CE:0B:6F:26:DE:85:2C:C1:E8:E3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cffSJZ2qeW0V_s4LbybehSzB6OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.62.0/24
78.17.82.0/23
89.125.154.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:97:e9:f2:f2:90:17:87:c3:5c:00:e2:e0:a4:f4:37:ca:12:
5a:99:00:ad:1a:e6:ca:a7:4b:a2:eb:9f:5b:97:b5:29:79:7e:
a5:56:5c:8e:8c:75:f3:f0:d2:6f:f4:67:a9:12:43:75:f2:1a:
e3:89:18:24:3d:71:8b:53:a3:e8:93:37:85:92:a9:79:6b:d3:
88:60:73:94:0d:2d:1a:e0:dc:b8:e1:47:b3:01:9b:f5:d8:04:
7f:d1:22:86:60:1f:c6:2f:be:a4:3f:b3:3e:4f:90:3b:f5:ac:
c7:9f:2f:39:3c:8f:1b:52:d5:92:9d:1f:a2:4b:25:74:bb:42:
8e:7c:3d:7d:49:26:9c:ba:c9:2f:97:58:7b:05:87:23:c0:d2:
b0:a2:c8:8a:dd:08:ab:ce:b9:f1:36:ce:4e:df:3b:3e:45:9d:
cb:ec:9b:d3:30:8f:f9:b0:fd:0b:96:46:68:0d:e5:3b:7b:db:
4e:20:5e:d7:b4:ad:d0:59:c5:97:25:1c:1d:c7:2c:b1:be:11:
80:e1:b4:06:9f:c7:bc:ee:d9:db:54:18:01:cb:09:41:22:1b:
bb:b6:d7:f1:5c:ce:08:1b:5e:d9:54:c7:d2:d7:e2:20:85:5f:
9f:95:5c:18:57:24:b5:c7:eb:8d:5f:e6:ad:ad:8d:26:c8:fd:
65:bd:9f:47
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ+8SIDISq3XB6o3S1Qy1dCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwODAxMDc0NDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWY3ZDIyNTlkYWE3OTZkMTVmZWNlMGI2ZjI2ZGU4NTJjYzFlOGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ILy6TWJdQONqCKLBhjgpfXutG52
0m4fCMTRrYLhOlDUF/aIDab+CBNcU/71UQmQdEtavgpYmKzqE8subcC4Y8t7xxDR
lxXW2LT9+e4zN6rOZaFegGAA5hHdd3bamsFtTIrK1L8wrhtHtzlZui6QrjYLJEDz
iAYQbmqiGJWVfW3xbpA6cEo7iIkdDiGKVGpFVytNM8W+5/s6tlQGY37bX0YMdqvj
kq+7Hc23QBo3Pi6y3vCfJnx1/3yp5UsSEeVo3QtaPxspIzcy2/o19Px5uG/qxant
Vbo8mxJxTqvV+QosA7ocBQdudEkdNjFdpPuB4Ib0b/Cm3NCj6+axQcdV1wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHH30iWdqnltFf7OC28m3oUswejjMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvY2ZmU0paMnFlVzBWX3M0TGJ5YmVoU3pCNk9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAThE+AwQB
ThFSAwQBWX2aMA0GCSqGSIb3DQEBCwUAA4IBAQBdl+ny8pAXh8NcAOLgpPQ3yhJa
mQCtGubKp0ui659bl7UpeX6lVlyOjHXz8NJv9GepEkN18hrjiRgkPXGLU6PokzeF
kql5a9OIYHOUDS0a4Ny44UezAZv12AR/0SKGYB/GL76kP7M+T5A79azHny85PI8b
UtWSnR+iSyV0u0KOfD19SSacuskvl1h7BYcjwNKwosiK3QirzrnxNs5O3zs+RZ3L
7JvTMI/5sP0LlkZoDeU7e9tOIF7XtK3QWcWXJRwdxyyxvhGA4bQGn8e87tnbVBgB
ywlBIhu7ttfxXM4IG17ZVMfS1+IghV+flVwYVyS1x+uNX+atrY0myP1lvZ9H
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:39 2026 by rpki-client