Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/yIyXIyW6j1VnUpi6FhLvdauE7uM.roa
File: yIyXIyW6j1VnUpi6FhLvdauE7uM.roa (raw, json)
Hash identifier: mKgatV57fVQQQI6LFnjm/nr5nzDVy/Ku0zU6nznXCWo=
Subject key identifier: C8:8C:97:23:25:BA:8F:55:67:52:98:BA:16:12:EF:75:AB:84:EE:E3
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 0197F03A18779EF8918925FC44C069E2281C
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/yIyXIyW6j1VnUpi6FhLvdauE7uM.roa
Signing time: Wed 09 Jul 2025 17:27:08 +0000
ROA not before: Wed 09 Jul 2025 17:27:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 176.103.224.0/22 maxlen: 24
176.103.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Jul 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f0:3a:18:77:9e:f8:91:89:25:fc:44:c0:69:e2:28:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jul 9 17:27:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c88c972325ba8f55675298ba1612ef75ab84eee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fc:ba:cd:78:96:59:da:4c:02:e1:77:fe:cf:
65:bd:92:3e:91:3b:a7:15:63:90:02:9e:f8:77:0f:
43:db:c5:b8:b2:98:99:f2:19:f8:bb:e4:a8:e5:2b:
44:f4:1c:d4:a5:a1:7c:9a:c1:44:94:59:f2:92:fa:
61:2c:ad:17:84:5e:d0:88:be:90:1b:6b:c5:d0:83:
f5:b2:de:94:52:ca:2e:88:b8:4e:fb:55:37:f8:e9:
5e:52:1b:bf:50:55:b2:22:d2:31:ca:60:76:14:88:
a0:22:60:ef:13:3e:e8:eb:a0:31:3b:7f:0e:ca:30:
74:44:56:7b:46:42:95:60:7b:70:33:19:21:5a:7a:
dc:7c:e4:41:3b:75:d2:12:a4:ba:00:2e:1d:dd:36:
22:90:aa:4c:d9:34:c7:8f:b1:7b:f6:e6:2b:1f:65:
22:b0:b8:4f:ef:0e:9a:a5:09:d6:be:ff:58:e1:95:
b0:5f:87:70:04:b8:c9:75:48:79:70:7d:eb:4d:0e:
1b:12:27:33:2b:43:eb:40:64:f5:c2:1d:92:b2:d0:
c7:2b:61:34:26:37:4d:5e:24:10:1b:3f:17:6d:73:
19:40:98:eb:28:d2:b4:c2:ec:19:79:e3:d8:62:7c:
3e:ec:87:5c:2a:62:07:6b:c0:0f:99:47:a4:b7:a9:
ef:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8C:97:23:25:BA:8F:55:67:52:98:BA:16:12:EF:75:AB:84:EE:E3
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/yIyXIyW6j1VnUpi6FhLvdauE7uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.224.0/22
176.103.232.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:77:d7:a8:44:2f:f2:1e:a2:5f:d8:5f:8e:10:26:bb:db:eb:
86:f2:46:c1:13:31:bb:49:75:74:5e:93:15:0f:11:ca:ac:72:
7e:d6:0f:a7:71:05:30:bc:d3:31:ce:79:8f:4a:f5:3f:1e:9f:
c2:b5:c9:f5:87:3e:e9:56:57:9a:dc:aa:96:58:fe:d3:10:94:
73:e8:84:ed:09:70:db:a3:ec:78:0c:a8:0e:45:aa:06:8a:c9:
ec:7d:ca:5f:06:a1:00:ed:62:34:1e:ec:16:21:39:d3:fb:cb:
1b:50:92:25:41:4f:4c:93:c6:7e:cf:a4:33:41:4f:48:3e:42:
b7:89:f2:f9:55:5c:22:dc:45:74:43:fd:77:c7:76:d8:d2:bf:
1d:da:75:0a:25:63:44:40:4d:9d:5d:c4:80:90:ab:38:d4:30:
c6:78:f3:fe:0e:38:9e:11:83:1f:f2:c1:d1:19:41:1d:00:b3:
ec:97:46:56:2b:ba:7a:bb:9d:f8:69:89:3b:44:8b:05:f4:f6:
c1:c5:1d:32:e7:34:65:fa:3c:7c:1e:de:d0:58:cb:57:d9:43:
c2:22:34:c4:87:c8:ff:1d:3e:58:6f:f5:86:97:bf:1d:50:b6:
ed:df:14:2b:d9:af:be:e4:d3:54:95:73:01:7b:ee:d2:80:80:
ba:91:db:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:57 2025 by rpki-client