Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/pyvDjODiPHkAxN6-QiS3Bwjt5rU.roa
File: pyvDjODiPHkAxN6-QiS3Bwjt5rU.roa (raw, json)
Hash identifier: jqfy9tM9gc1fFIYB2QLYTyq7G/zrF5GzYLadxFIN+0U=
Subject key identifier: A7:2B:C3:8C:E0:E2:3C:79:00:C4:DE:BE:42:24:B7:07:08:ED:E6:B5
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 0197354B9FAB3F76A518E13DD9F7D34105DB
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/pyvDjODiPHkAxN6-QiS3Bwjt5rU.roa
Signing time: Tue 03 Jun 2025 10:17:17 +0000
ROA not before: Tue 03 Jun 2025 10:17:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215070
IP address blocks: 90.156.244.0/22 maxlen: 24
90.156.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 08:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:4b:9f:ab:3f:76:a5:18:e1:3d:d9:f7:d3:41:05:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Jun 3 10:17:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a72bc38ce0e23c7900c4debe4224b70708ede6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:27:82:5b:d6:08:f6:e3:68:1e:e6:58:0d:
8d:04:3d:c3:b7:26:60:9e:6c:c6:fb:87:af:80:e8:
36:c4:a1:c6:cb:c6:86:4d:38:c3:c2:80:26:20:a3:
ec:23:59:f1:14:db:e0:ed:b0:c1:fe:dd:bb:28:d5:
a8:52:e6:46:29:33:dc:7e:6b:3c:d6:06:22:8f:ba:
50:89:9d:7e:f7:02:91:61:51:6f:36:0d:2a:32:9c:
24:13:f1:4e:4f:f2:7e:e3:18:78:cb:b2:87:be:93:
42:4f:ae:71:e2:af:8f:f4:ea:ed:cd:15:f8:57:8d:
1d:09:3b:e8:7d:a8:6b:de:0b:b6:71:1a:f0:ac:61:
05:bd:b2:de:95:6d:22:58:1c:c4:85:70:05:80:68:
58:b7:a7:a9:f7:66:f8:cd:33:b2:50:3a:3c:08:1b:
3d:d3:93:5a:fe:8f:46:b4:cf:fa:84:fa:02:0e:33:
43:ef:3d:f1:82:1c:f3:65:72:f0:26:7d:f8:8c:1e:
36:8f:6f:2d:0d:9d:c3:30:a7:62:11:0f:4a:4a:e9:
cd:d1:5d:be:e3:ee:b3:d8:7c:b9:89:f4:47:b5:d8:
4e:bb:5f:af:0f:fd:23:e7:ba:c5:47:9b:f8:cb:73:
39:50:f4:7d:c0:3d:dc:42:3e:92:bf:86:25:5c:f6:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2B:C3:8C:E0:E2:3C:79:00:C4:DE:BE:42:24:B7:07:08:ED:E6:B5
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/pyvDjODiPHkAxN6-QiS3Bwjt5rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.244.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:39:b1:01:d7:04:3e:78:e4:94:c8:a2:05:00:e2:3e:8e:3d:
8b:24:d5:c9:59:9c:51:65:bd:6a:0f:2d:d3:68:1b:db:97:b0:
50:6e:fd:c3:25:02:6e:b3:2b:90:97:e0:4f:16:f1:ef:07:0c:
6d:c5:2a:46:00:be:6c:3f:64:1d:c6:58:f6:1e:8b:77:c1:42:
5b:b0:1e:4f:2b:61:83:07:18:56:bd:80:e4:b3:41:35:82:7a:
f8:90:93:1b:9c:e5:c8:b4:7c:58:47:69:3a:a2:86:a0:eb:4c:
a9:ec:3d:ff:62:4c:fe:3f:15:c1:66:84:bf:fb:0f:9a:ca:60:
2a:86:21:4d:a4:d0:50:70:3b:6b:4a:46:91:5e:af:01:6d:ab:
12:67:bb:57:e1:3a:41:fe:9b:83:a2:86:f4:e6:65:64:4d:c3:
19:bb:69:ec:f3:bd:c6:04:f3:1e:57:e2:fd:e4:1f:ec:fa:5e:
8e:a9:8e:d0:38:9d:3e:25:15:00:79:85:b4:aa:22:0f:24:df:
64:eb:81:cc:83:ea:b9:f0:cf:32:a0:fc:55:03:7a:61:99:2f:
ed:16:c0:ee:3a:91:48:8b:c4:95:7a:1b:fd:ce:c1:c1:c0:9c:
ce:26:a9:25:2a:7d:d5:89:40:90:80:e5:c0:3b:f8:9f:37:1c:
22:e2:c3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:30:14 2025 by rpki-client