Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SBo-TSsd63vT-7kvQihjbVLotYQ.roa
File: SBo-TSsd63vT-7kvQihjbVLotYQ.roa (raw, json)
Hash identifier: cfFPFEfw6tHJh9hFX4X9BEePlOQAt2DUe/q5/cbHQ3I=
Subject key identifier: 48:1A:3E:4D:2B:1D:EB:7B:D3:FB:B9:2F:42:28:63:6D:52:E8:B5:84
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019C41C7B5330125B478663C55E9074E2B85
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SBo-TSsd63vT-7kvQihjbVLotYQ.roa
Signing time: Mon 09 Feb 2026 09:42:12 +0000
ROA not before: Mon 09 Feb 2026 09:42:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32002
IP address blocks: 80.71.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Feb 2026 15:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:c7:b5:33:01:25:b4:78:66:3c:55:e9:07:4e:2b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Feb 9 09:42:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=481a3e4d2b1deb7bd3fbb92f4228636d52e8b584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:83:d5:9a:5e:f3:45:65:18:3d:4d:9c:89:bb:
a5:44:ee:72:4a:3f:09:65:ee:7d:3f:c2:d1:89:39:
2b:eb:18:36:2f:c4:3a:dd:3f:05:ab:fa:89:ea:12:
29:8c:69:fa:2e:3f:72:0b:c1:2f:fd:1a:8b:8a:81:
9e:68:4d:68:f0:0c:c8:59:dc:18:48:33:e6:98:9b:
b0:a8:dd:fb:0d:fe:58:35:d4:73:05:7c:4f:9f:63:
3b:6d:4c:eb:a0:b3:4d:01:84:84:2a:41:ee:d3:24:
4b:ae:1f:ba:23:3d:1c:32:07:38:12:2e:39:a2:6a:
5f:00:71:ae:2c:d1:38:ed:9e:bb:a0:3b:c2:8a:b7:
26:eb:4a:db:ef:3e:92:69:c2:4f:c4:b4:fc:6f:f4:
86:a7:8b:00:19:b3:39:67:df:30:da:f8:b8:97:b5:
ac:f2:9b:03:a8:30:e5:14:b2:63:4e:24:de:7b:26:
e8:13:d4:2c:4b:eb:8d:49:ac:c2:89:b0:d4:27:27:
f4:c1:8b:40:9a:c3:66:2c:24:42:7d:bc:3b:a0:b9:
36:88:b2:9e:71:b1:a6:b2:48:fd:c4:33:7e:42:73:
0c:4e:e4:e5:6e:07:72:c7:a3:74:3a:e4:2b:36:bb:
c3:c3:c2:91:48:e9:35:3d:aa:b7:cc:86:38:20:98:
90:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1A:3E:4D:2B:1D:EB:7B:D3:FB:B9:2F:42:28:63:6D:52:E8:B5:84
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SBo-TSsd63vT-7kvQihjbVLotYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.228.0/24
Signature Algorithm: sha256WithRSAEncryption
68:46:6b:8f:9c:92:ee:b1:8f:b8:b6:10:c3:0a:49:7f:18:17:
df:b3:a6:36:1c:e8:74:07:fa:72:1e:0c:29:78:67:15:10:e3:
97:2f:db:a1:5c:eb:69:5b:fe:f7:15:74:f4:44:4b:e7:ee:97:
2a:50:20:17:3a:9f:17:06:be:2e:1b:61:73:cd:73:f6:0c:f4:
55:1c:67:06:48:40:97:f7:7f:fc:89:7d:0b:a0:d0:c8:78:8b:
c7:cf:b5:d8:c8:67:a1:98:3b:5b:00:f4:d4:4b:54:2b:28:17:
ad:49:35:0b:1d:1c:fa:5f:2c:7f:7a:41:40:14:52:c7:c7:12:
c5:ad:13:cc:49:e1:eb:97:b3:b6:28:5a:e5:28:05:c7:70:09:
02:6b:7e:af:2c:a1:13:b9:e0:b9:78:33:f9:0a:36:17:83:d9:
d7:3d:d5:dc:11:5c:ff:28:4d:17:ef:29:e7:50:ed:1c:8f:3c:
30:0c:2a:50:4e:f2:03:c1:b8:e9:3f:f5:dd:0f:47:ea:fb:61:
48:ff:de:d8:7a:38:45:78:84:93:25:e5:21:6b:83:39:e6:3e:
d3:36:bc:27:c4:a0:24:6d:78:14:16:82:0c:f2:e4:c1:69:56:
d1:92:ab:eb:f9:cc:52:eb:e0:75:4d:a1:b1:93:92:06:a2:4c:
18:15:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:30:52 2026 by rpki-client