Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/ryUmDQ4WGElvgoDxlk99Tyj0zMg.roa
File: ryUmDQ4WGElvgoDxlk99Tyj0zMg.roa (raw, json)
Hash identifier: 8jLCwwNCUiUyvUehohJI0er/4oEItVPnIxs8AhbVd+Y=
Subject key identifier: AF:25:26:0D:0E:16:18:49:6F:82:80:F1:96:4F:7D:4F:28:F4:CC:C8
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0198E06F412C2E7302AD8470584D0B779A41
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/ryUmDQ4WGElvgoDxlk99Tyj0zMg.roa
Signing time: Mon 25 Aug 2025 08:54:04 +0000
ROA not before: Mon 25 Aug 2025 08:54:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 5.56.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Sep 2025 12:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:6f:41:2c:2e:73:02:ad:84:70:58:4d:0b:77:9a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Aug 25 08:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af25260d0e1618496f8280f1964f7d4f28f4ccc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:b0:02:36:31:17:48:41:26:12:ec:bd:6f:
7d:3c:02:81:60:8c:75:63:04:01:cf:d0:fb:e4:41:
8a:9d:0e:97:01:69:d5:94:1d:10:44:63:e1:79:4a:
73:b1:fe:20:d8:e6:63:19:f9:3d:82:a3:cf:2a:43:
b6:78:bf:e6:ae:9c:e7:3e:24:ac:ce:01:3d:db:64:
78:d0:99:b7:ae:49:c8:c7:6c:62:70:d6:aa:fa:60:
31:3e:7e:ff:b8:52:4f:04:aa:32:91:35:d5:b7:71:
0a:b4:54:ca:24:30:91:64:69:1c:ab:20:ce:85:ce:
4b:09:17:88:9e:15:98:4f:33:15:65:fb:a9:30:94:
38:b9:e5:71:00:1e:99:96:93:98:df:b0:4b:9b:e0:
9b:cf:66:50:f5:f1:c4:42:f3:4e:5c:af:b7:07:69:
a0:1b:f4:93:4b:a3:61:1c:31:14:fd:a7:46:48:4f:
e1:85:fe:13:e3:90:31:54:fb:8a:77:12:71:f0:bc:
ec:18:b3:85:99:5b:61:bd:e2:a0:e6:3f:93:f0:1a:
2d:09:03:e9:53:38:8c:93:b3:6a:10:5e:08:18:78:
2f:d6:b7:0e:8c:85:27:1a:d3:45:20:38:2c:e8:fd:
88:3a:9d:9d:cc:10:5b:6e:9b:7a:94:67:b0:03:c1:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:25:26:0D:0E:16:18:49:6F:82:80:F1:96:4F:7D:4F:28:F4:CC:C8
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/ryUmDQ4WGElvgoDxlk99Tyj0zMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.26.0/24
Signature Algorithm: sha256WithRSAEncryption
17:1e:be:bc:50:bd:1b:ea:cf:b0:52:c9:ab:d0:8d:d8:74:16:
3a:2f:29:6c:43:81:c0:b4:73:61:ab:90:09:da:bd:35:a4:18:
2f:1c:44:cc:9c:9c:be:28:e9:cf:46:5a:4e:44:f8:c8:7f:18:
16:14:e9:34:cb:b1:c1:88:55:2d:23:cf:63:54:e2:5a:ec:1f:
73:10:fb:eb:c1:6d:f6:5a:b7:9e:0c:56:be:b6:de:77:06:63:
d7:6f:fe:f1:84:62:dc:05:5a:28:7f:62:67:61:58:5d:ea:b0:
67:7e:2a:c0:17:d3:fd:33:0c:be:63:68:6c:eb:3e:b7:59:d4:
0c:a2:10:92:35:36:d4:cf:c1:8e:b3:82:83:85:ad:d0:8f:1e:
90:1d:5a:68:73:35:02:68:e6:83:ef:42:31:ac:15:dd:3a:c8:
b1:71:39:8d:48:c2:11:c7:ab:0a:18:78:64:46:fa:29:b3:9d:
f7:24:a3:f6:76:b3:b2:52:5e:75:48:d2:eb:72:f2:cf:b6:0e:
12:01:ab:90:05:7a:e3:bf:9c:a9:f9:8a:eb:f2:0f:16:d3:82:
e5:be:44:91:fc:96:f6:4a:9a:d8:9c:d4:b8:03:83:0d:19:bf:
c0:12:cd:90:c7:65:77:83:50:72:11:2b:59:43:2a:90:48:11:
96:b6:a8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:08:06 2025 by rpki-client