Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/irpiEtQ345jkaGZGbHO-bteHB1w.roa
File: irpiEtQ345jkaGZGbHO-bteHB1w.roa (raw, json)
Hash identifier: u0kyaeAgECF8a09l6/xktfHlVH4INseO4/C74g5rbxQ=
Subject key identifier: 8A:BA:62:12:D4:37:E3:98:E4:68:66:46:6C:73:BE:6E:D7:87:07:5C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019CFA8735DA07F724EFE158E95E6822A5D0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/irpiEtQ345jkaGZGbHO-bteHB1w.roa
Signing time: Tue 17 Mar 2026 06:41:31 +0000
ROA not before: Tue 17 Mar 2026 06:41:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41798
IP address blocks: 45.88.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Mar 2026 07:51:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:87:35:da:07:f7:24:ef:e1:58:e9:5e:68:22:a5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 17 06:41:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8aba6212d437e398e46866466c73be6ed787075c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:eb:7b:6b:00:ee:0e:e9:4d:7f:e3:e1:5e:
49:f4:c1:05:dd:d1:0a:05:05:cc:9a:09:b7:1a:93:
2e:f9:e6:bd:ea:3b:2f:9d:44:55:3d:74:c8:2e:1c:
3d:25:04:d1:21:23:5a:72:33:90:08:8a:9c:f8:4d:
b1:4f:c2:5c:fc:c8:9f:e2:96:d0:c8:af:85:ed:02:
d3:c6:9a:a2:1b:75:29:ba:e8:e1:8d:0d:3c:50:5c:
7a:cd:1d:00:d4:3e:7b:ec:da:fe:a1:00:c6:49:65:
74:11:6d:2a:12:04:d2:96:15:28:d8:79:cb:83:e1:
7c:fc:96:0f:b0:7e:19:e2:36:e6:b3:eb:7c:49:12:
57:c7:8b:d2:0f:8e:3c:3f:8c:5a:2f:e5:40:aa:0f:
a8:b3:52:95:d1:43:7f:2f:21:1a:7a:1f:b3:2d:2e:
fc:cc:7f:ba:1d:5c:17:ab:42:04:1f:ad:24:10:58:
73:39:79:25:dc:8e:06:8d:da:a3:d6:0c:6e:ed:a6:
b5:5a:81:37:d3:98:97:b3:c0:bc:99:1e:bc:44:8b:
b9:63:4d:f6:f2:2c:e9:49:b8:d7:f2:70:bd:6a:2b:
50:e0:f4:c4:09:06:57:e6:b6:5c:26:bd:0d:f5:56:
25:6b:4d:da:01:b6:1e:09:c3:6e:7a:a4:23:9e:e6:
7b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BA:62:12:D4:37:E3:98:E4:68:66:46:6C:73:BE:6E:D7:87:07:5C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/irpiEtQ345jkaGZGbHO-bteHB1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
Signature Algorithm: sha256WithRSAEncryption
24:bb:55:f0:b5:85:d6:5d:38:ce:91:03:08:54:b5:99:73:8f:
15:69:48:3d:d2:51:66:80:4c:ec:f4:53:94:2b:df:8b:ca:6f:
d1:5b:bd:21:f7:d5:43:ed:1b:bf:c6:a0:32:06:e3:b7:6e:6b:
0a:2d:02:1e:2e:cb:62:fb:96:77:12:39:a3:ac:f1:3a:d7:24:
fb:7e:4d:00:c9:e2:99:74:ae:25:cc:a8:a1:ba:d4:8c:81:84:
16:86:cc:e8:7e:62:58:ed:ef:8c:81:43:b2:e0:75:f4:42:34:
76:41:15:3f:6b:15:27:39:8a:f2:05:70:da:42:15:00:ba:e3:
d7:45:35:37:13:98:4f:65:33:0b:62:0f:4e:fc:38:72:86:02:
8a:d6:46:c2:a7:93:90:f5:bf:5d:18:79:55:f6:13:4f:1f:53:
5d:87:0c:51:5d:4f:5d:71:cd:6e:37:08:68:9a:9f:5e:3d:31:
49:e2:fd:93:39:18:26:b7:d7:03:c8:f2:87:36:0e:72:d2:84:
e7:ed:50:07:53:e7:0a:7f:3a:e3:5f:f7:3f:5f:63:01:7a:fb:
a8:0d:e8:33:c8:0c:ef:ee:91:e0:48:d3:23:eb:8f:f7:2f:52:
02:40:f4:93:f6:09:99:f9:0c:79:30:3b:ff:94:5a:9e:1d:62:
7f:97:1b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 03:32:53 2026 by rpki-client