Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tf-RVOZYxQlwFJuyhyOFnzujToc.roa
File: tf-RVOZYxQlwFJuyhyOFnzujToc.roa (raw, json)
Hash identifier: CO0c1Uc48zd/JM6w6iJeXw3qw8MMjGaric96LkK66Ds=
Subject key identifier: B5:FF:91:54:E6:58:C5:09:70:14:9B:B2:87:23:85:9F:3B:A3:4E:87
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FB2A180B3C38749F47661604B7733BBDF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tf-RVOZYxQlwFJuyhyOFnzujToc.roa
Signing time: Thu 30 Jul 2026 10:45:56 +0000
ROA not before: Thu 30 Jul 2026 10:45:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 87.86.181.0/24 maxlen: 24
87.86.252.0/24 maxlen: 24
212.134.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Aug 2026 12:23:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:a1:80:b3:c3:87:49:f4:76:61:60:4b:77:33:bb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 30 10:45:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5ff9154e658c50970149bb28723859f3ba34e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:7e:a0:6f:11:94:20:15:eb:b0:f6:e7:b7:
a0:19:30:63:b4:75:2a:81:34:aa:78:6f:7b:f9:29:
59:b9:a8:55:6c:57:c4:83:5f:fb:0b:30:28:6d:69:
92:dc:c5:e6:62:09:3e:73:41:d1:ba:8e:62:f9:53:
dc:38:50:d5:bb:b9:49:4b:1b:a4:6a:14:31:e4:f5:
df:ef:e4:c6:c8:eb:6f:28:7f:68:e1:53:89:f8:01:
86:fb:46:60:b3:0d:11:18:a0:15:30:28:ec:5d:7a:
36:46:e5:43:71:e4:0c:a0:10:84:ff:14:09:59:84:
ea:6f:22:fe:4a:18:f6:a9:5b:8c:35:22:43:66:7b:
df:72:32:f0:41:67:5e:19:a5:00:c2:ec:94:0c:7d:
d9:5f:59:c8:79:57:8d:d9:5f:97:3f:c4:8a:df:70:
16:2a:66:2d:b9:69:d9:92:06:4b:1f:4c:07:5a:b7:
5e:2f:2b:d2:df:0f:e2:61:24:ad:03:1b:b2:71:f4:
c7:c7:b7:eb:9e:9d:cf:f3:a0:d2:5e:b6:63:ea:07:
1d:a6:df:0c:f5:36:2d:ac:07:f1:c5:a4:02:9a:3c:
db:60:f5:c5:65:56:bf:da:1d:18:3e:38:d9:9c:ed:
d5:7e:96:f9:03:d3:a8:86:99:52:95:dd:0e:d0:e0:
34:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FF:91:54:E6:58:C5:09:70:14:9B:B2:87:23:85:9F:3B:A3:4E:87
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tf-RVOZYxQlwFJuyhyOFnzujToc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.181.0/24
87.86.252.0/24
212.134.90.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:43:6f:dd:de:82:17:bf:cb:83:cb:0b:34:21:66:47:48:d5:
fa:72:26:92:c7:0f:c8:34:c3:54:4c:37:15:61:83:b0:57:ef:
4d:57:f4:ee:b1:41:60:40:51:a2:cc:7b:27:7d:99:d8:77:78:
57:27:63:65:a1:e9:0f:2d:3a:bf:07:44:a0:70:27:01:5f:a5:
58:c3:22:5f:6c:b0:96:6a:8d:d4:68:b4:e2:75:92:24:f4:0d:
7e:d7:ad:7c:4d:9b:f6:61:f3:ab:ce:a8:df:63:d8:d9:bd:d0:
75:93:11:05:3a:50:e7:30:b8:9c:4e:98:d1:97:7e:64:b0:bb:
12:44:06:55:af:66:a6:9a:c0:ed:8f:ba:d2:16:30:15:b3:60:
4a:d2:ff:11:81:ad:55:2c:85:31:45:da:d5:c6:78:94:44:8d:
6a:1f:a1:72:d4:42:8d:b0:e5:d1:61:87:87:b1:54:e6:3c:9a:
ba:4a:ee:23:25:03:1c:fd:c2:c2:c7:9e:ce:fe:2b:64:17:85:
ee:d8:bd:c1:d6:a6:f4:e3:96:ba:07:72:98:fb:93:e9:9f:cb:
8c:ce:ec:64:cf:35:db:cd:eb:0e:02:18:c8:5c:a7:d6:68:27:
f5:6a:fc:2c:cb:c2:ca:8c:ec:41:76:fc:3c:c0:f3:1e:94:f6:
cc:82:fc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:36:32 2026 by rpki-client