Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/siyaXulbufYqDn0ODP6LifeDNW8.roa
File: siyaXulbufYqDn0ODP6LifeDNW8.roa (raw, json)
Hash identifier: VyHF5D2im1oYCBtzV9v9AFDH8CVRQeah9W0ofStf2eU=
Subject key identifier: B2:2C:9A:5E:E9:5B:B9:F6:2A:0E:7D:0E:0C:FE:8B:89:F7:83:35:6F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01972045CF0A435B13EDC1BF11690C42E738
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/siyaXulbufYqDn0ODP6LifeDNW8.roa
Signing time: Fri 30 May 2025 08:18:55 +0000
ROA not before: Fri 30 May 2025 08:18:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 94.156.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 May 2025 08:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:20:45:cf:0a:43:5b:13:ed:c1:bf:11:69:0c:42:e7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 30 08:18:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b22c9a5ee95bb9f62a0e7d0e0cfe8b89f783356f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:e4:df:6f:d1:72:72:61:eb:0c:b0:28:37:
2c:d8:75:f3:14:7d:0f:b1:43:a0:14:d0:6e:08:88:
64:e9:3e:74:c6:8f:d6:dc:ff:b7:b0:02:38:b3:ba:
25:7f:4e:2a:6b:55:7c:75:15:b7:f5:62:66:69:88:
40:c7:2f:32:97:47:5c:88:2d:e4:2f:0b:3f:92:65:
33:22:36:4b:9c:01:27:05:f7:05:f3:62:cc:97:db:
bf:72:78:45:63:2d:75:58:cc:11:bb:44:10:37:7f:
9b:10:b6:9e:26:b0:5f:51:4a:9e:f9:99:2f:16:52:
bd:ca:69:f7:8a:51:6f:28:58:3d:ce:c2:e0:05:e1:
f1:2d:e9:11:db:4c:c7:62:6c:c8:f6:be:50:b2:bd:
18:64:10:80:3c:a0:db:23:0f:d5:a6:b7:ef:19:36:
ef:a2:9e:f6:6f:e1:60:07:bb:25:9b:58:82:5d:1a:
94:6b:55:44:91:e4:d8:e6:60:c1:f2:a2:e1:6f:71:
b2:81:54:f2:00:2b:05:2c:73:03:34:23:5f:49:38:
b9:14:35:a8:f4:d6:bf:42:61:fc:cb:ce:67:a4:11:
ce:ee:5a:24:59:81:52:0d:db:c7:fd:ab:55:f7:12:
f4:c4:d3:9e:17:18:e4:d2:22:a0:82:b3:f3:eb:df:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2C:9A:5E:E9:5B:B9:F6:2A:0E:7D:0E:0C:FE:8B:89:F7:83:35:6F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/siyaXulbufYqDn0ODP6LifeDNW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.177.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3a:1c:e3:dd:c4:e4:76:f9:7a:d0:39:21:4d:30:bb:38:d4:
50:c1:75:f1:51:8a:7e:c2:d5:e3:74:9c:62:df:ed:21:d6:fd:
02:c9:ae:79:59:57:82:bd:35:f0:0e:04:ee:ec:bf:3b:d7:96:
87:cd:a9:20:17:90:bc:f1:23:73:01:92:af:87:10:dd:d4:c7:
41:43:fd:9a:71:3e:e8:70:d6:8b:06:18:cc:6f:5a:64:0e:ea:
cd:0b:5a:2d:71:05:3b:74:b9:68:93:05:43:c5:c6:e2:73:98:
b9:53:e8:3f:e8:71:52:bb:d1:d8:ad:45:99:14:e8:c7:44:86:
db:33:5d:24:2c:f5:92:cb:f7:4a:50:82:7a:66:9a:49:0a:f2:
5b:c9:98:29:16:43:b8:a6:65:54:d1:2a:ab:43:d4:d7:7a:fd:
77:68:ec:43:d4:81:6a:0c:31:01:22:28:73:2a:29:3d:2f:00:
59:f5:87:0c:9d:e4:2d:ab:95:ef:ce:8f:4a:38:90:45:01:af:
36:8a:ca:99:cd:99:c1:15:54:6f:29:29:f0:5b:da:33:ff:10:
d8:2c:07:99:21:90:8d:87:c3:d2:35:1d:7a:d3:c8:1a:ba:72:
63:50:fd:e3:59:dc:fa:9d:f1:3d:5c:ae:23:69:91:5a:f6:af:
91:6f:27:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:09:02 2025 by rpki-client