Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/yYQpz_9q7p__nsm4_d8NCBPMxfg.roa
File: yYQpz_9q7p__nsm4_d8NCBPMxfg.roa (raw, json)
Hash identifier: Ta2MCXIw9yxmLy+MQAAwFCOGGh/RvPH3O7n+vULQyck=
Subject key identifier: C9:84:29:CF:FF:6A:EE:9F:FF:9E:C9:B8:FD:DF:0D:08:13:CC:C5:F8
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 0197E1DA3848EB0BA0EC5A59AA3C2F38E7D5
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/yYQpz_9q7p__nsm4_d8NCBPMxfg.roa
Signing time: Sun 06 Jul 2025 22:27:44 +0000
ROA not before: Sun 06 Jul 2025 22:27:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205090
IP address blocks: 45.95.202.0/24 maxlen: 24
45.95.203.0/24 maxlen: 24
45.132.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Jul 2025 16:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e1:da:38:48:eb:0b:a0:ec:5a:59:aa:3c:2f:38:e7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 6 22:27:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c98429cfff6aee9fff9ec9b8fddf0d0813ccc5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:3a:e5:32:c2:75:6f:1b:c2:3b:01:2a:84:
13:9f:76:49:84:d2:14:d4:81:68:f0:70:30:46:a6:
1b:7b:d1:30:6c:58:79:82:b6:d3:aa:86:21:1a:93:
4f:8e:14:bc:7d:82:de:25:a8:c2:ef:bc:76:3c:80:
04:46:cd:5d:52:a8:cc:31:96:58:48:27:ba:a3:2c:
33:3f:0e:dd:ff:7d:89:0f:82:78:be:5f:88:d0:0d:
11:42:9f:71:da:f0:0b:07:d8:a1:d9:75:16:28:3a:
76:f1:e5:97:ae:39:46:ea:3b:54:a8:04:ce:a8:dc:
fa:9c:da:7d:92:98:13:74:f9:1c:7a:02:22:21:90:
39:8b:86:44:7e:ec:d7:8d:45:3b:2b:4a:18:d2:77:
3e:a5:f4:b0:61:4b:18:8c:99:6e:dd:fb:79:e1:ad:
2a:f8:a4:9c:0b:05:5a:02:30:be:6f:b9:85:68:5b:
7a:7c:a1:8b:c9:99:e4:1a:71:e8:0c:91:41:4c:c7:
9b:6e:cb:37:f1:01:0f:29:f1:f2:f0:cb:53:06:21:
db:4a:2b:4f:9e:80:35:e9:1b:17:09:e0:d4:e1:88:
f0:fe:87:85:47:b2:1c:d3:22:50:29:ad:be:34:41:
84:e9:80:9f:cf:be:09:73:20:bd:21:bd:02:83:3d:
31:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:84:29:CF:FF:6A:EE:9F:FF:9E:C9:B8:FD:DF:0D:08:13:CC:C5:F8
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/yYQpz_9q7p__nsm4_d8NCBPMxfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.202.0/23
45.132.255.0/24
Signature Algorithm: sha256WithRSAEncryption
84:47:ff:d3:fb:02:a4:26:58:9d:f8:76:a0:76:0c:25:1f:b1:
c9:c6:09:b9:d2:2b:1c:df:02:27:8b:f0:71:10:69:e1:9f:b1:
fc:33:7b:db:78:45:5f:76:77:81:25:9a:d0:e5:53:dd:80:2a:
11:7b:a9:bc:e8:fb:be:c0:a9:05:70:cf:b3:a4:ec:8f:5a:d0:
5b:41:b4:cc:6d:15:8a:49:d1:c5:1f:f9:84:59:63:8d:dd:fc:
63:75:62:ca:4a:81:16:e8:93:61:44:f7:b3:9a:8b:9f:5f:e0:
ce:99:a1:1e:f2:22:80:09:30:f5:66:5c:84:ee:dd:22:95:51:
c3:31:0c:89:5e:a4:6f:db:34:5c:47:0b:08:03:d1:9e:1f:c5:
f6:e4:7d:23:ef:17:08:7a:1f:7c:68:25:72:af:03:06:21:f0:
6c:74:f8:23:a6:4b:22:78:3f:38:38:14:38:36:1d:e1:88:18:
84:9d:33:e7:67:7f:e5:2b:d9:5a:03:06:9f:b8:c4:73:d6:c5:
78:7e:d3:1b:b1:b6:06:c4:23:7a:af:6c:58:55:45:bd:e1:52:
8b:3d:e8:8d:49:19:84:ec:28:e1:6a:7e:eb:00:ee:f3:7e:47:
09:14:17:93:4a:f3:b4:3f:cd:cb:38:36:f9:d7:76:9c:33:a4:
5f:2c:c9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:39:15 2025 by rpki-client