Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PXdc9OIhHm8AASFYIr_IXKf1PsE.roa
File: PXdc9OIhHm8AASFYIr_IXKf1PsE.roa (raw, json)
Hash identifier: rcbm1hCDQEj1oZCVyhgwqogM0pXsKoFJr+WBh/zLy90=
Subject key identifier: 3D:77:5C:F4:E2:21:1E:6F:00:01:21:58:22:BF:C8:5C:A7:F5:3E:C1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FCAD2203FCA2DEDDD4C5D3CB3AE79DF91
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PXdc9OIhHm8AASFYIr_IXKf1PsE.roa
Signing time: Tue 04 Aug 2026 03:29:56 +0000
ROA not before: Tue 04 Aug 2026 03:29:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 82.110.120.0/22 maxlen: 24
87.86.160.0/22 maxlen: 24
212.134.168.0/23 maxlen: 24
212.135.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Aug 2026 12:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ca:d2:20:3f:ca:2d:ed:dd:4c:5d:3c:b3:ae:79:df:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 4 03:29:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d775cf4e2211e6f0001215822bfc85ca7f53ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:ed:f6:d9:ad:09:98:fc:5d:b6:61:0e:dd:
bb:bb:76:d2:2c:dd:56:03:fb:17:c5:28:80:cf:2d:
dd:05:5a:33:e6:3c:41:2e:5f:e4:3a:b6:2e:aa:9e:
7e:06:a8:46:dc:d8:05:49:ca:b7:6f:a7:2b:ba:9a:
1a:5d:56:2e:ef:b8:f4:e5:a7:65:bb:cb:b5:2b:83:
d2:06:8c:1a:23:28:7c:c7:6c:e7:fb:37:47:d6:59:
76:42:f4:ac:1d:04:23:74:19:ec:2d:19:b7:cb:4e:
60:43:0b:b7:8f:97:67:54:41:16:ee:39:0c:26:dd:
ee:55:dd:7e:c9:13:76:1a:33:cc:e1:08:64:be:f4:
e8:ea:2f:f9:22:a2:cb:42:29:c1:b8:96:e6:a7:ba:
c1:79:df:5d:91:84:0e:76:28:1e:85:c6:02:15:54:
ef:db:fb:b3:02:bb:14:55:37:20:63:20:6f:66:9f:
a1:85:a2:59:75:5b:6b:7c:41:53:e9:86:6a:2c:03:
d1:fc:ad:a9:96:91:df:2f:ce:54:7b:31:33:4a:d3:
06:f1:d0:28:27:d0:73:37:e2:f3:ed:dc:c1:94:5a:
50:5a:bf:e2:09:75:a8:3d:02:03:d5:e4:b7:80:26:
11:01:6d:00:3d:0e:d3:00:38:67:2f:67:24:ae:b3:
fb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:77:5C:F4:E2:21:1E:6F:00:01:21:58:22:BF:C8:5C:A7:F5:3E:C1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PXdc9OIhHm8AASFYIr_IXKf1PsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.120.0/22
87.86.160.0/22
212.134.168.0/23
212.135.192.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:f5:3f:18:cd:65:81:9e:55:b4:70:1c:83:0c:d2:62:cc:7c:
e3:05:64:b5:5e:a3:57:88:27:85:26:03:5b:46:ea:6b:1e:86:
d4:4c:3b:8f:3e:4a:c5:5c:0c:48:82:fa:0c:8d:19:8b:3f:03:
fb:3f:fc:11:e6:6f:27:2b:20:ff:b1:9c:14:bf:0d:37:bc:e1:
20:a9:49:7f:53:af:eb:15:bc:5f:9f:bc:63:0f:f8:d6:1d:7c:
8b:76:09:ce:71:42:35:6b:11:6a:b2:5b:63:36:e8:16:65:a4:
44:a7:fa:df:8e:68:91:d3:52:f2:65:ae:0e:d7:c9:34:17:70:
3a:92:49:9b:b4:22:ec:53:96:95:98:2f:6c:13:e8:00:0c:33:
5d:80:e8:ff:5a:a7:49:42:18:b5:92:e6:14:7d:25:ce:d2:07:
f6:18:d8:d2:8e:e0:3b:79:60:5f:69:f2:8c:63:e6:03:b7:59:
ca:43:6d:c5:71:f0:18:25:0d:d7:66:be:b7:ba:fc:a1:ac:7f:
c8:36:24:94:39:9f:ec:42:83:f3:0b:6f:48:5b:31:ad:9b:8c:
20:20:e4:b0:79:36:f3:31:2f:b6:3b:70:e8:07:a9:af:9b:ed:
b2:8d:f3:c1:d1:b2:71:b0:4d:7c:bf:7d:96:be:da:a0:51:ce:
78:08:a8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:10:27 2026 by rpki-client