Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/NV0rx2BYNKVO62IDAz1sUgQm1oc.roa
File: NV0rx2BYNKVO62IDAz1sUgQm1oc.roa (raw, json)
Hash identifier: 8+Gu9drfAqSY1UfIUn8tQKEToziS5cNPEuOcUW/pMsk=
Subject key identifier: 35:5D:2B:C7:60:58:34:A5:4E:EB:62:03:03:3D:6C:52:04:26:D6:87
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019F6B44EB94D54CB26C821F1D58E3B14B0D
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/NV0rx2BYNKVO62IDAz1sUgQm1oc.roa
Signing time: Thu 16 Jul 2026 14:11:46 +0000
ROA not before: Thu 16 Jul 2026 14:11:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42375
IP address blocks: 90.156.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jul 2026 09:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:44:eb:94:d5:4c:b2:6c:82:1f:1d:58:e3:b1:4b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 16 14:11:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=355d2bc7605834a54eeb6203033d6c520426d687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:90:21:ba:2e:9b:d4:13:62:b0:ef:1f:f9:
57:46:40:4f:4a:d8:7b:df:0b:99:e1:9d:65:3a:aa:
79:9d:c3:e0:19:42:cf:91:63:fc:9e:96:8b:7c:b0:
ce:a0:9c:31:42:9e:6f:63:21:68:ae:cf:58:f0:73:
30:09:02:e0:1e:e8:5d:68:19:08:aa:38:fe:f0:78:
40:02:c0:0b:96:a0:77:ba:7b:c1:6e:98:f2:3f:42:
b8:fe:df:c3:50:8a:18:61:2a:a4:72:04:e8:2a:41:
9b:96:c9:84:65:a0:a1:b7:84:2d:21:05:19:68:14:
54:97:65:72:f2:01:12:e5:54:8d:80:50:47:71:ee:
43:53:2f:cc:96:b7:b8:18:22:ca:0a:61:53:12:6f:
a0:fd:79:1c:0a:1c:c9:6b:95:59:68:60:91:8e:10:
45:d6:16:1b:75:db:a1:88:22:a9:41:80:73:59:5e:
09:d9:f4:f1:a9:a1:4b:42:86:90:0e:9c:2d:45:ae:
fe:27:61:af:21:dc:b5:28:5e:fe:85:50:57:93:a4:
a8:75:1c:5f:36:63:7c:a1:66:3f:e1:1e:2c:53:d8:
07:6c:c2:84:27:32:d3:05:d4:33:ff:9f:4f:e0:9d:
06:81:12:eb:54:dd:cc:09:5f:b8:1c:90:80:82:00:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5D:2B:C7:60:58:34:A5:4E:EB:62:03:03:3D:6C:52:04:26:D6:87
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/NV0rx2BYNKVO62IDAz1sUgQm1oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.146.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:a7:f7:50:ec:6d:47:ad:1a:67:88:b2:fd:62:25:4d:05:cb:
db:6a:a0:db:56:77:f1:19:58:4f:df:99:53:f0:be:ee:db:c4:
44:25:61:4f:5e:8f:b4:ff:4d:98:c9:d4:68:85:f1:84:97:42:
d1:b9:ba:fe:28:a9:b6:75:76:95:ac:08:1e:bb:80:32:4c:72:
d7:e8:ec:43:e5:dd:e1:0f:8d:92:4e:ae:3d:42:09:c8:e9:47:
b4:01:8d:49:ad:74:aa:01:9d:58:75:66:65:61:28:e6:4d:17:
1e:d3:cd:8a:7c:ac:3d:a0:c9:bd:2e:e7:8a:33:e4:75:55:08:
cf:e6:49:1f:fc:66:6d:df:1b:7f:57:a5:9d:d5:44:f2:a2:a2:
9f:47:b8:3e:22:f1:1d:8b:26:38:a3:ad:7f:ef:c2:da:01:b3:
ad:fd:98:bf:59:ab:57:9d:7e:0a:8e:1c:60:a7:6c:ec:46:24:
ef:12:01:77:64:60:3b:b8:93:c2:c0:df:14:6d:9c:68:e2:36:
87:b2:8d:7a:81:76:d1:de:99:48:4f:a9:bd:5e:06:83:17:c8:
66:a0:c8:a0:7a:17:a9:c9:f7:2e:76:06:6d:ca:31:ed:65:f2:
4a:7d:cc:94:30:49:47:f8:70:f4:bf:74:0c:a9:a8:f7:82:9b:
92:08:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:25 2026 by rpki-client