Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tRAsSprmCuUMm284KlXHKXw6aQU.roa
File: tRAsSprmCuUMm284KlXHKXw6aQU.roa (raw, json)
Hash identifier: huIDTe9s9O/ktC0bl3R6+8My6ZKKknJk0h+pvepvTo4=
Subject key identifier: B5:10:2C:4A:9A:E6:0A:E5:0C:9B:6F:38:2A:55:C7:29:7C:3A:69:05
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D502B45E605D12D1FCECFF992EE75C6AF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tRAsSprmCuUMm284KlXHKXw6aQU.roa
Signing time: Thu 02 Apr 2026 21:48:26 +0000
ROA not before: Thu 02 Apr 2026 21:48:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.54.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Apr 2026 04:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:50:2b:45:e6:05:d1:2d:1f:ce:cf:f9:92:ee:75:c6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 2 21:48:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5102c4a9ae60ae50c9b6f382a55c7297c3a6905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:7f:e9:bb:24:45:1d:d5:d9:dd:39:94:52:
da:43:d2:8e:1b:10:81:d6:1e:5d:83:66:20:18:1a:
0b:24:2d:e0:eb:80:ab:cf:d7:0c:41:3c:11:9f:6c:
30:c4:52:ac:96:cc:3f:da:c0:0f:27:7f:fa:eb:39:
a9:41:17:7f:43:58:6e:f1:bb:8b:75:d7:d0:be:e5:
eb:46:0a:8d:67:06:a5:0f:f0:f3:10:e6:dd:ae:77:
ac:0f:a1:25:29:79:e4:8f:29:dc:8c:01:2c:bd:3e:
62:9e:23:af:e5:a9:e4:38:b6:35:00:5f:34:ef:d9:
41:29:fa:ee:96:33:d9:77:2d:11:6a:a0:8d:9a:ca:
0f:65:b2:91:b2:d3:f5:bd:3e:27:9f:eb:c8:91:e4:
c6:83:3d:1f:49:1d:a4:b7:89:7c:2f:6a:e0:82:fe:
7f:8c:59:f0:cd:bc:d3:8e:76:6e:27:f4:1e:da:25:
c9:6c:c4:50:b5:e5:a4:65:6f:86:0f:ed:87:c8:df:
11:ca:6d:e5:65:40:72:67:d4:28:68:53:7a:0c:8c:
78:eb:63:05:c7:19:57:cf:93:90:c9:90:f8:00:58:
d2:8d:b0:31:7f:29:3a:1b:6f:b2:9d:e7:f6:70:b0:
bc:ac:b9:38:28:d8:99:84:e7:5d:73:1c:1a:0f:da:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:10:2C:4A:9A:E6:0A:E5:0C:9B:6F:38:2A:55:C7:29:7C:3A:69:05
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tRAsSprmCuUMm284KlXHKXw6aQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.54.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:6b:27:55:42:d5:e5:42:02:8e:11:55:e9:bc:8a:ae:01:1b:
7e:54:3c:97:ea:f1:c5:48:dc:26:01:23:db:0b:d2:e2:b8:06:
09:ba:cf:eb:a5:a2:17:ea:8b:3f:31:d0:04:cf:67:ca:68:55:
98:4d:79:c2:25:0e:71:b9:76:11:75:a1:57:ad:1e:ec:bd:61:
b8:1c:be:1e:9a:02:52:93:b5:83:02:bc:49:93:2e:70:c9:7e:
7a:f5:84:72:56:cd:f9:f5:ec:b4:e3:b9:16:45:6a:38:34:f0:
d3:9b:e9:b7:85:87:7b:74:d7:08:ae:8b:04:9c:ae:a8:fb:f5:
50:d1:b0:7b:3f:00:c2:3c:e6:4d:cc:04:90:5e:ff:9b:88:f8:
c3:ea:76:24:21:2c:7d:3d:c2:e0:13:b1:01:e5:19:0e:4d:9d:
cd:23:2d:2d:c5:2e:1f:04:1a:04:bb:1d:35:6a:cd:ac:86:ea:
f8:d1:e5:18:41:4b:94:af:1e:6d:48:1d:82:33:bb:f9:ca:3d:
f5:2f:62:be:6b:2d:5f:af:33:bc:69:64:5f:9f:b9:40:c2:b5:
df:cf:b3:33:e8:55:a9:59:3d:8d:c8:45:3c:be:a1:94:29:ea:
e3:22:96:f4:e4:76:82:3d:0a:cd:c5:a6:df:90:24:e9:ae:1c:
e0:16:83:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:04:05 2026 by rpki-client