Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AjeifJxXULMoeyfZfSgbAiCidww.roa
File: AjeifJxXULMoeyfZfSgbAiCidww.roa (raw, json)
Hash identifier: t7yElc8E6Gjy0xcQbcvHbiHZTBEFZilaR8vgmYLCedk=
Subject key identifier: 02:37:A2:7C:9C:57:50:B3:28:7B:27:D9:7D:28:1B:02:20:A2:77:0C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A15EE7FBFF3168A57AA6A3AFD6DE7C54BD
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AjeifJxXULMoeyfZfSgbAiCidww.roa
Signing time: Wed 21 Oct 2026 14:40:24 +0000
ROA not before: Wed 21 Oct 2026 14:40:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 87.83.66.0/24 maxlen: 24
87.86.181.0/24 maxlen: 24
87.86.252.0/24 maxlen: 24
185.3.73.0/24 maxlen: 24
212.134.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Oct 2026 07:39:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:e7:fb:ff:31:68:a5:7a:a6:a3:af:d6:de:7c:54:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 21 14:40:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0237a27c9c5750b3287b27d97d281b0220a2770c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:6f:6d:dd:36:aa:a3:72:6a:91:ad:05:4f:
6b:73:9f:4a:2f:b3:2b:17:1c:33:66:de:ff:33:7c:
98:b5:ff:5f:07:ab:9f:1a:bc:45:e0:a7:b7:03:2b:
3b:29:9e:6e:ff:1b:78:b4:45:68:aa:55:95:87:e0:
2d:b1:e6:f7:43:13:b5:4f:d5:8f:e8:13:18:2e:14:
44:d1:64:f5:38:c6:1a:c9:b4:bb:65:57:06:3d:70:
de:d6:05:b0:da:c3:e3:8a:dc:7d:57:fd:83:a7:94:
92:06:32:e3:9a:c4:12:5d:9a:a8:ed:2f:60:1e:0a:
cf:8d:3e:11:58:ac:75:c1:9d:e9:1b:28:a6:fd:bf:
f9:5a:5f:a9:74:62:fb:88:62:14:ff:14:12:53:49:
3d:a0:11:eb:9e:f1:91:66:e0:37:44:cc:e3:dd:ae:
7a:87:e6:8d:23:8e:01:a4:24:7e:82:17:0b:2c:fd:
71:93:56:3b:07:e4:0f:10:e8:6e:8c:db:40:01:ee:
63:94:1f:dc:80:dd:87:99:58:8e:93:9d:70:c2:56:
bf:79:20:c9:e7:79:72:6a:a5:d7:4e:cc:7d:26:b2:
39:26:31:87:ff:f7:f2:c7:ed:c1:f2:3c:58:8f:99:
6c:bd:e6:06:0d:0a:4d:cf:c6:27:cb:ed:62:37:64:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:37:A2:7C:9C:57:50:B3:28:7B:27:D9:7D:28:1B:02:20:A2:77:0C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AjeifJxXULMoeyfZfSgbAiCidww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.66.0/24
87.86.181.0/24
87.86.252.0/24
185.3.73.0/24
212.134.90.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:03:3b:0b:7a:4f:a3:9f:dc:7c:10:df:01:ee:f3:0c:4f:83:
ea:84:dd:7b:ab:fc:ed:44:3e:dd:65:3f:00:3a:10:56:e0:42:
64:35:46:55:7b:c7:c2:a6:b0:42:6f:84:34:f7:4e:a0:78:80:
b8:2b:f5:3f:e7:49:53:76:3d:f4:01:80:f1:23:a5:ba:34:c0:
56:c5:98:e7:e9:9e:0b:ca:d9:3b:4a:45:16:39:2b:c3:1f:b7:
f3:b0:a7:9c:59:e1:1a:81:2a:1b:17:fd:ca:4c:eb:50:8e:bb:
a8:3b:a4:e0:0f:ed:21:b1:52:21:04:ad:a8:e7:1f:ca:83:f7:
2a:b8:db:98:eb:b3:b7:f9:87:68:1d:31:b0:2c:d6:ca:1f:02:
06:97:71:a0:b0:4f:60:ae:3a:67:c5:2c:40:26:1f:ef:e8:ea:
76:1e:ee:a4:a0:03:58:ba:fc:14:3a:a4:93:2a:46:e1:fa:2c:
bb:3a:f7:72:31:3b:e5:e9:30:16:fa:07:2b:02:c1:d1:ce:60:
bb:86:a1:77:95:61:c1:9d:d8:a2:17:97:c8:3d:1e:af:9d:f4:
44:e3:62:67:8a:8a:11:59:6f:8e:0c:91:65:89:39:91:79:11:
ed:37:06:f3:e0:90:9f:17:ea:a5:75:da:f9:ef:10:69:0e:9e:
22:bf:52:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:14:50 2026 by rpki-client