Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/yOjCBviCyn_fuczRo2PPXBtJu4s.roa
File: yOjCBviCyn_fuczRo2PPXBtJu4s.roa (raw, json)
Hash identifier: WbUA+Njue6EwYM61YmZvk9GLyLE3S5J2+d/u2/lL8Mo=
Subject key identifier: C8:E8:C2:06:F8:82:CA:7F:DF:B9:CC:D1:A3:63:CF:5C:1B:49:BB:8B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019D9B1FBABA89566B54932609FC95903A23
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/yOjCBviCyn_fuczRo2PPXBtJu4s.roa
Signing time: Fri 17 Apr 2026 11:07:20 +0000
ROA not before: Fri 17 Apr 2026 11:07:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198846
IP address blocks: 77.92.152.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Apr 2026 22:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1f:ba:ba:89:56:6b:54:93:26:09:fc:95:90:3a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 17 11:07:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8e8c206f882ca7fdfb9ccd1a363cf5c1b49bb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:46:d8:df:05:1d:fd:9c:70:7a:d2:70:ba:c6:
d4:6f:d5:3b:ab:92:c4:cc:eb:dc:f5:ef:5a:56:93:
0e:5a:cb:51:49:a4:d5:b9:84:87:4a:64:42:42:ac:
7c:7a:d4:ab:56:08:47:e8:fb:73:3d:9b:21:08:c1:
ec:f4:a4:8f:a3:0d:8e:1c:ca:c4:f8:6f:fb:a7:55:
69:41:36:60:4b:3a:46:0e:24:fc:1b:59:02:59:2e:
75:56:2c:57:0d:82:a8:54:4f:41:2e:86:b5:7f:b1:
41:13:64:90:b8:2c:df:6d:76:dc:1d:a2:98:56:76:
13:34:3e:cf:f1:29:54:56:cd:18:3a:6e:f4:f2:97:
ef:8c:6d:ae:8d:c0:55:cb:cd:fc:da:87:99:7f:33:
19:54:af:75:1f:f6:29:86:2d:41:43:b0:6a:3b:5c:
de:fb:48:d8:83:8d:58:3e:9f:17:29:60:c8:55:30:
ed:e4:6d:c0:b2:9e:a4:85:c1:f8:9e:54:e0:c5:c3:
7b:fc:b8:18:79:aa:0c:5c:b4:a7:f9:76:4a:7e:85:
b3:56:82:c6:2b:ba:f5:b1:45:83:01:4b:5e:58:3a:
8f:50:8d:df:b6:e2:14:5d:d9:6b:ec:2f:87:97:e0:
7f:27:70:3a:72:49:10:b4:90:49:de:68:a6:f1:a1:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E8:C2:06:F8:82:CA:7F:DF:B9:CC:D1:A3:63:CF:5C:1B:49:BB:8B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/yOjCBviCyn_fuczRo2PPXBtJu4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.152.0/24
78.135.86.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:fa:4a:a7:5a:23:47:e6:6d:e2:0d:1c:f0:79:fb:69:d8:68:
ee:82:6e:fd:7d:ca:30:3a:92:97:12:02:e7:e5:f9:4d:a4:b9:
cb:d3:82:bd:3a:dd:da:8b:45:6e:97:0d:ba:18:3e:df:b4:fc:
9f:27:58:fe:eb:b9:bb:77:4f:e3:56:41:13:84:42:9a:d2:d5:
7e:60:a1:f8:aa:ab:18:eb:4e:ba:c6:ed:be:b9:04:46:d0:4e:
2a:6b:48:24:32:a5:76:31:23:4c:41:a3:b8:3a:43:eb:55:d1:
75:85:bd:d8:9f:a4:5e:92:93:dd:4c:e8:a9:4c:aa:84:48:68:
00:82:aa:aa:30:a9:34:2d:f9:be:b0:e1:f5:8f:4c:57:8a:10:
54:00:56:d8:c6:6f:a3:aa:0c:8f:ea:ba:16:c2:97:c3:da:5a:
b9:42:89:2c:d4:e6:b8:59:37:14:b1:bd:a2:4c:a6:9c:01:e4:
de:b9:b7:7d:37:38:38:5c:db:f0:6f:74:cc:dd:c4:43:bb:60:
1b:ec:29:45:ca:33:4a:24:a6:5e:82:c5:5b:e9:ce:b0:da:48:
74:84:15:98:96:a0:01:14:e5:f3:48:33:42:33:2c:d0:21:c6:
b2:98:23:3b:40:ea:71:08:36:94:04:bb:aa:fa:f2:cf:d7:94:
a5:b1:63:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:29 2026 by rpki-client