Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS53667.roa
File:                     AS53667.roa (raw, json)
Hash identifier:          R61DccpQqEkOqLqmfy7BZi8Y8dYUMyWrH7kscCAedS4=
Subject key identifier:   52:7C:93:12:05:8C:4D:D0:88:C4:72:16:F7:D1:23:20:50:4F:92:64
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       4B5BB09CD346E7A887EF6ECB9E1AF4026CE99AD7
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS53667.roa
Signing time:             Sat 31 Jan 2026 08:00:08 +0000
ROA not before:           Sat 31 Jan 2026 07:55:08 +0000
ROA not after:            Sat 30 Jan 2027 08:00:08 +0000
asID:                     53667
IP address blocks:        2a0f:6284:8000::/40 maxlen: 40
Validation:               Failed, certificate revoked on Tue 03 Feb 2026 06:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5b:b0:9c:d3:46:e7:a8:87:ef:6e:cb:9e:1a:f4:02:6c:e9:9a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jan 31 07:55:08 2026 GMT
            Not After : Jan 30 08:00:08 2027 GMT
        Subject: CN=527C9312058C4DD088C47216F7D12320504F9264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:54:73:21:42:43:4e:a2:2a:8f:d1:6a:94:
                    18:67:25:c5:63:0d:ef:39:be:3a:42:4b:40:b0:78:
                    c1:c5:7a:c1:47:86:a7:50:73:6f:2e:f3:b7:d0:97:
                    a6:c3:6e:d0:f5:a3:f7:31:81:dc:0c:6b:a6:9d:3c:
                    68:35:9a:1c:81:8f:e4:c9:1e:61:4a:89:d8:42:60:
                    92:70:c4:95:a1:ac:c1:5e:7a:5b:69:7d:d9:5c:de:
                    d9:7c:3b:f5:34:f9:51:db:dc:4a:ec:55:ff:d7:2e:
                    54:86:cd:ce:04:66:bc:6c:58:af:26:1c:da:e2:c3:
                    5a:29:17:ad:fe:5c:95:03:a2:bc:4d:32:c5:c1:c1:
                    e8:2c:c7:16:0e:d1:77:93:a1:da:f5:06:8c:f7:14:
                    52:3a:6f:2b:a5:f9:c1:13:a2:d0:ec:f8:3e:9a:49:
                    2f:b8:cb:d4:c5:b6:13:17:8a:53:f8:4e:2e:54:d0:
                    98:3e:cd:e6:4c:0e:21:54:82:13:b6:5f:c2:15:66:
                    f6:c3:74:56:84:04:ff:c3:c2:f4:c9:df:e9:0d:7f:
                    b2:de:53:d6:fc:fc:31:81:8a:ca:79:5b:31:8f:fc:
                    6f:a2:1a:77:0a:f0:cd:b9:a1:62:ee:c4:1d:71:4a:
                    5d:bc:93:09:db:09:94:cb:48:2a:50:24:67:0d:be:
                    17:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7C:93:12:05:8C:4D:D0:88:C4:72:16:F7:D1:23:20:50:4F:92:64
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS53667.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:e9:ee:4c:23:69:33:3b:63:0f:42:0e:8f:af:78:e6:b1:13:
         eb:cc:bd:24:14:cc:bc:45:f6:3d:d7:3b:46:40:55:ac:70:9a:
         af:aa:65:25:d3:11:f4:9e:cf:7c:d9:8b:8f:9d:3a:07:5e:c7:
         97:84:c5:c8:50:8b:cb:21:f6:4b:36:0f:61:39:37:70:ec:fb:
         d3:22:98:1e:94:64:d1:09:a9:bc:a0:f1:b8:44:ba:18:9f:68:
         5d:3c:61:a6:c4:8f:f9:47:2c:81:e9:97:df:50:80:f1:3e:75:
         76:3d:1d:02:8b:62:dc:db:2f:6e:0e:91:5d:c4:f6:77:2b:57:
         f5:0e:a9:3c:b4:53:8c:14:ba:b1:ce:e4:00:99:b6:31:81:2e:
         47:89:26:13:16:07:be:13:43:f4:8d:c9:5c:8c:3f:21:d5:06:
         fa:7f:26:73:41:b6:1c:4d:56:f2:52:ab:bc:67:86:da:d0:98:
         be:b9:00:74:84:6c:39:43:12:b9:c7:34:96:e7:62:ca:92:50:
         01:13:bd:3b:d7:32:9b:bd:60:33:5b:e1:dd:88:1b:70:3b:18:
         1d:69:3f:d4:c9:ee:f0:2d:dd:31:42:cd:7d:d8:1d:55:f7:9d:
         62:20:17:eb:41:4b:68:bd:0a:14:70:92:48:2e:15:75:38:41:
         36:69:06:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 01:05:13 2026 by rpki-client