Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/fdzgOEof3HeIf5GgfKlUaNLdciQ.roa
File: fdzgOEof3HeIf5GgfKlUaNLdciQ.roa (raw, json)
Hash identifier: PIRXJnWBpNcxzwzS65URZUrLRb3RJi47R0GYAnnONUA=
Subject key identifier: 7D:DC:E0:38:4A:1F:DC:77:88:7F:91:A0:7C:A9:54:68:D2:DD:72:24
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FBD13BF5E0C9A68BC6170833E037B59A0
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/fdzgOEof3HeIf5GgfKlUaNLdciQ.roa
Signing time: Sat 01 Aug 2026 11:26:55 +0000
ROA not before: Sat 01 Aug 2026 11:26:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 87.76.210.0/24 maxlen: 24
87.76.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Aug 2026 10:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bd:13:bf:5e:0c:9a:68:bc:61:70:83:3e:03:7b:59:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 1 11:26:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ddce0384a1fdc77887f91a07ca95468d2dd7224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:6b:48:67:e9:a6:eb:89:4b:6e:eb:cd:18:
17:62:27:24:5a:98:de:5f:8e:44:9e:4a:a4:80:b6:
c5:b4:bb:8f:a9:54:90:80:0f:f4:e4:3c:47:54:2e:
2b:b8:56:cd:6f:8b:8c:3a:e2:15:75:69:30:39:23:
aa:c9:56:5b:8a:fc:e0:b8:a4:4e:12:e3:33:c4:0a:
6b:49:75:56:cc:19:6e:44:1b:d9:96:5a:74:32:39:
a6:63:08:be:7e:9c:cc:cf:ea:17:7a:ce:d4:fc:48:
e0:8e:25:86:a9:f5:14:ee:81:11:16:62:e1:37:86:
c4:92:d9:f5:1b:d4:12:55:16:96:d2:59:60:57:4a:
8a:30:96:1b:39:6c:2e:8a:a1:94:3e:4b:9e:3b:71:
f0:57:fd:d5:5b:f5:db:7c:48:27:e5:22:d0:ba:4d:
3e:94:c9:43:5e:cc:59:75:0a:dc:f1:19:53:05:de:
94:72:c2:ee:07:e0:79:86:98:c4:6b:c1:c2:d8:a0:
d1:70:63:32:08:dc:26:9d:be:b8:d8:d8:02:e8:e1:
a2:ba:f2:c9:b0:1a:22:0f:de:65:28:81:ea:3d:c3:
6b:7a:9d:20:40:2f:0f:d7:0c:01:08:a9:47:6b:e2:
4c:e2:8d:03:86:82:77:f8:fd:00:c1:04:e7:32:57:
68:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DC:E0:38:4A:1F:DC:77:88:7F:91:A0:7C:A9:54:68:D2:DD:72:24
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/fdzgOEof3HeIf5GgfKlUaNLdciQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.210.0/24
87.76.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:68:cc:7c:7a:ea:b4:51:a4:d3:ab:49:6a:67:5e:f7:a3:1b:
3c:8d:e7:48:e6:00:63:56:a8:f0:37:c4:05:d9:9f:b7:c9:8a:
f0:18:cf:eb:9d:0f:28:cc:40:31:87:f5:ef:79:2e:4e:ea:c2:
d7:5c:fd:a5:25:70:db:b9:d8:fc:8d:90:f4:30:9d:ee:24:19:
df:38:5a:0c:e1:81:8e:1a:6f:ff:d1:f0:17:08:db:8c:65:eb:
b0:e1:ef:cd:9e:35:02:82:1b:f2:bd:1f:29:d5:e6:2b:61:ca:
99:a3:3b:9b:6b:84:c4:c2:bb:1b:ac:2c:c9:28:06:65:6c:83:
77:a2:6a:bf:7f:d2:46:70:d9:f9:7f:f4:64:b2:2e:2e:3f:9b:
c4:3a:05:6e:c4:ee:05:62:bd:de:c3:75:c3:e3:ea:10:20:81:
48:d1:60:f2:9b:4b:bf:36:6d:ec:ff:4b:64:8e:46:9c:c5:83:
e8:25:9b:02:38:12:86:85:5a:c6:16:e5:1d:e9:69:c7:54:e0:
31:11:11:f1:23:c7:aa:59:8c:6c:24:61:9e:36:fe:e0:9d:19:
b3:05:ae:a1:d2:13:03:2b:a5:b8:75:d7:f7:b7:3a:e3:16:14:
58:3e:81:9b:8c:02:a6:63:6e:67:9c:c9:7b:c3:dd:10:71:1e:
2f:18:22:21
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+9E79eDJpovGFwgz4De1mgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwODAxMTEyNjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGRjZTAzODRhMWZkYzc3ODg3ZjkxYTA3Y2E5NTQ2OGQyZGQ3MjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l5rSGfppuuJS27rzRgXYickWpje
X45EnkqkgLbFtLuPqVSQgA/05DxHVC4ruFbNb4uMOuIVdWkwOSOqyVZbivzguKRO
EuMzxAprSXVWzBluRBvZllp0MjmmYwi+fpzMz+oXes7U/EjgjiWGqfUU7oERFmLh
N4bEktn1G9QSVRaW0llgV0qKMJYbOWwuiqGUPkueO3HwV/3VW/XbfEgn5SLQuk0+
lMlDXsxZdQrc8RlTBd6UcsLuB+B5hpjEa8HC2KDRcGMyCNwmnb642NgC6OGiuvLJ
sBoiD95lKIHqPcNrep0gQC8P1wwBCKlHa+JM4o0DhoJ3+P0AwQTnMldoMQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH3c4DhKH9x3iH+RoHypVGjS3XIkMB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvZmR6Z09Fb2YzSGVJZjVHZ2ZLbFVhTkxkY2lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV0zSAwQA
V0zfMA0GCSqGSIb3DQEBCwUAA4IBAQBKaMx8euq0UaTTq0lqZ173oxs8jedI5gBj
VqjwN8QF2Z+3yYrwGM/rnQ8ozEAxh/XveS5O6sLXXP2lJXDbudj8jZD0MJ3uJBnf
OFoM4YGOGm//0fAXCNuMZeuw4e/NnjUCghvyvR8p1eYrYcqZozuba4TEwrsbrCzJ
KAZlbIN3omq/f9JGcNn5f/Rksi4uP5vEOgVuxO4FYr3ew3XD4+oQIIFI0WDym0u/
Nm3s/0tkjkacxYPoJZsCOBKGhVrGFuUd6WnHVOAxERHxI8eqWYxsJGGeNv7gnRmz
Ba6h0hMDK6W4ddf3tzrjFhRYPoGbjAKmY25nnMl7w90QcR4vGCIh
-----END CERTIFICATE-----
Generated at Mon Aug 24 22:23:49 2026 by rpki-client