Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/SoAG3iUKCx9oRAeYG_teBanQxXs.roa
File: SoAG3iUKCx9oRAeYG_teBanQxXs.roa (raw, json)
Hash identifier: w85rzFr5B5GUPxdRU3WO5gUeqvR6XhqYU+ewTKlbARQ=
Subject key identifier: 4A:80:06:DE:25:0A:0B:1F:68:44:07:98:1B:FB:5E:05:A9:D0:C5:7B
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 019D9071F328829354B7405BBB674F793CA1
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/SoAG3iUKCx9oRAeYG_teBanQxXs.roa
Signing time: Wed 15 Apr 2026 09:21:20 +0000
ROA not before: Wed 15 Apr 2026 09:21:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198969
IP address blocks: 45.93.32.0/22 maxlen: 24
45.129.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Apr 2026 10:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:71:f3:28:82:93:54:b7:40:5b:bb:67:4f:79:3c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Apr 15 09:21:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a8006de250a0b1f684407981bfb5e05a9d0c57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:38:f2:11:3f:91:40:be:6d:79:33:a1:ac:5f:
a1:14:04:f9:9a:0e:9d:6b:57:8f:a7:c9:29:14:1f:
70:67:58:5d:23:bb:2a:07:f0:71:6c:df:21:45:02:
c2:b4:0d:47:fa:68:36:bb:0b:3b:9a:f7:f9:1f:27:
ac:76:b6:8d:a7:ac:b1:a8:24:8d:8d:6e:66:a7:0f:
fe:90:db:5a:7e:8d:ad:c3:29:aa:13:1f:61:43:e5:
d2:2c:c5:e7:33:1a:a2:55:6f:62:ed:8f:bd:6e:1a:
a1:e0:90:d4:9c:11:5b:38:40:96:5e:34:f9:b3:22:
13:f7:55:dd:d6:ea:79:44:73:80:05:86:d7:83:30:
17:af:4e:a3:8f:69:fc:64:77:1c:cd:86:25:7b:2b:
2d:ab:16:d4:5e:38:30:0f:91:b7:47:7c:f0:e2:9d:
8e:92:91:69:2c:8b:57:40:c6:af:cf:33:40:e8:1c:
57:33:c3:83:26:f0:a2:c0:a0:68:3b:c9:1b:86:bd:
95:51:8b:bf:19:80:6a:5e:ae:2f:b5:a6:a1:58:43:
db:f5:d2:58:89:da:4d:e7:a9:4e:d7:6a:f5:9a:52:
a0:fd:eb:23:84:da:15:83:db:e6:64:cf:26:2f:30:
69:71:e9:d7:cc:fe:cd:65:66:07:04:1a:c5:f0:76:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:80:06:DE:25:0A:0B:1F:68:44:07:98:1B:FB:5E:05:A9:D0:C5:7B
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/SoAG3iUKCx9oRAeYG_teBanQxXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.32.0/22
45.129.176.0/22
Signature Algorithm: sha256WithRSAEncryption
47:6e:a0:dd:0c:66:a0:00:33:c9:4d:58:d5:d2:14:2a:4b:67:
1b:ce:a0:91:d6:6f:95:5d:82:53:a8:19:44:e2:de:a4:f2:4b:
6d:9b:47:af:c1:be:94:de:47:4f:cc:e7:cf:ba:c3:1a:3f:04:
f6:26:ca:28:9d:26:a9:95:61:38:a9:44:a0:64:4f:8d:55:ce:
8a:3b:25:e0:e0:92:5c:61:58:48:cb:4a:e0:33:99:98:c1:2f:
62:7a:2e:01:0f:6d:ff:12:86:3c:fd:89:30:cf:b2:57:5a:82:
3e:da:73:4b:11:f8:58:b0:d9:3f:52:5c:ac:39:65:08:fd:c1:
65:1e:51:94:97:c1:63:d2:a9:d2:4f:73:34:d7:4f:0d:1f:ab:
ed:6a:8f:d7:cd:1f:4d:16:eb:17:c1:68:03:40:83:ea:c7:b2:
7d:2d:eb:ea:32:0e:9a:68:64:44:b5:7c:e7:a0:37:6a:fd:9b:
2a:ce:83:a8:f2:31:1a:9c:96:39:08:af:86:e3:c5:0c:d5:71:
e2:f8:5a:8b:c6:47:7a:79:38:e8:7f:6a:b2:9a:3d:ef:3f:5c:
41:87:ee:0f:3f:e5:cb:f8:26:7a:aa:fb:51:5d:81:f7:92:b5:
f6:ac:31:f1:2e:97:88:ae:66:8a:e4:4b:69:6f:df:07:81:e9:
8e:f4:36:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:28 2026 by rpki-client