Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ARCyQETIfBqcttBfp0jx1ZBjUsY.roa
File: ARCyQETIfBqcttBfp0jx1ZBjUsY.roa (raw, json)
Hash identifier: /UoLoZ3UZfncUEqxRRmxt3KmnWhVUOcT6QevxYsQ8ro=
Subject key identifier: 01:10:B2:40:44:C8:7C:1A:9C:B6:D0:5F:A7:48:F1:D5:90:63:52:C6
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019814C0A55BC25E3F5E12DE052211E9A34F
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ARCyQETIfBqcttBfp0jx1ZBjUsY.roa
Signing time: Wed 16 Jul 2025 19:40:26 +0000
ROA not before: Wed 16 Jul 2025 19:40:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64494
IP address blocks: 185.161.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Jul 2025 08:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:14:c0:a5:5b:c2:5e:3f:5e:12:de:05:22:11:e9:a3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jul 16 19:40:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0110b24044c87c1a9cb6d05fa748f1d5906352c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:2a:37:30:a0:5c:38:50:ea:44:c5:0f:52:
78:6b:4b:d1:34:18:39:00:c7:72:a3:e1:32:21:59:
ec:59:43:99:fe:a8:98:65:5e:d7:07:0e:e8:c6:22:
9e:db:01:31:3f:1b:e8:52:90:fb:bd:aa:29:80:0e:
3a:6f:ed:47:a1:db:9b:db:52:88:36:63:a1:02:8f:
03:10:b6:ad:c9:74:dd:f2:9a:52:e7:c5:d3:56:76:
30:45:60:5e:f8:7e:f1:38:49:4c:f4:0b:d4:9d:88:
dc:b8:45:d5:44:e9:e0:cb:45:0e:ab:7b:77:98:cd:
fc:bc:f0:34:af:a8:77:74:68:e1:68:0e:1e:ec:14:
aa:53:54:a6:ff:5e:bb:d5:9f:52:97:a5:c6:83:74:
9f:bc:5f:7c:75:6f:5a:ed:3b:44:11:1e:f8:0f:90:
80:bc:8f:9f:b6:4f:6d:5e:52:f3:a8:91:37:ad:73:
1c:67:63:c6:e3:13:8f:db:d0:21:ab:8d:9f:8d:a8:
f4:c8:5a:96:92:9a:c2:3a:e7:a2:9e:08:92:75:cd:
f9:66:89:06:9b:bc:7b:40:94:4b:4d:68:5a:4d:59:
fb:e0:12:92:f4:4d:38:84:ff:b2:3a:ba:f4:52:65:
3a:37:97:14:1b:84:ed:15:ca:82:8e:19:41:11:70:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:10:B2:40:44:C8:7C:1A:9C:B6:D0:5F:A7:48:F1:D5:90:63:52:C6
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ARCyQETIfBqcttBfp0jx1ZBjUsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.79.0/24
Signature Algorithm: sha256WithRSAEncryption
30:86:2e:9b:30:09:76:1b:91:8f:b9:77:21:e2:eb:75:d5:b1:
5a:bd:27:ef:8e:cf:5a:dd:f5:29:f1:b6:8e:df:91:9a:82:c5:
89:31:85:c2:62:3a:4c:fb:4d:92:d9:5c:a5:44:22:ad:f7:95:
4e:55:ae:1d:fa:28:30:5a:77:fd:f5:14:e9:fa:25:ff:61:d3:
21:5e:fa:99:a4:b8:99:0f:cd:a9:1c:59:27:b3:ae:f4:27:20:
68:74:11:67:91:c7:a2:0c:62:e5:aa:2d:7e:6f:f8:df:4d:f4:
96:01:02:7a:9a:f6:b6:b8:84:f6:a0:b3:a2:88:6f:bd:c4:e7:
9a:e8:f6:50:66:3d:25:7f:b2:19:93:d9:da:ee:f7:bd:70:fa:
c4:37:5c:b4:07:3a:a7:c2:48:dd:10:49:51:b6:cd:53:e4:8b:
e9:2f:89:d1:52:a8:f5:b1:52:31:89:4d:8d:89:44:db:06:7f:
bf:f6:35:fd:0e:cd:d8:39:77:2a:c6:2e:4d:d8:21:0a:82:33:
76:db:52:5c:76:f1:55:be:aa:9e:61:03:e0:99:4f:73:4c:e1:
c5:34:76:50:57:af:16:c1:b6:70:ae:9c:15:4c:b6:88:50:19:
1b:75:90:56:d4:75:54:be:f4:dc:0a:b2:9c:4f:92:a4:fd:35:
88:49:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:07:34 2025 by rpki-client