Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YgZ3VHip-S81rOoq040c_1Vq_ck.roa
File: YgZ3VHip-S81rOoq040c_1Vq_ck.roa (raw, json)
Hash identifier: 3UF5yssSbeqOOyhmZ6/0Oft6bLB22FtX6nxg1uocQRc=
Subject key identifier: 62:06:77:54:78:A9:F9:2F:35:AC:EA:2A:D3:8D:1C:FF:55:6A:FD:C9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0A9F8C5406CE4D819DF1023E0D6CEA5A9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YgZ3VHip-S81rOoq040c_1Vq_ck.roa
Signing time: Wed 16 Sep 2026 11:27:27 +0000
ROA not before: Wed 16 Sep 2026 11:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218897
IP address blocks: 45.95.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Sep 2026 09:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:f8:c5:40:6c:e4:d8:19:df:10:23:e0:d6:ce:a5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 16 11:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6206775478a9f92f35acea2ad38d1cff556afdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:ed:1b:36:58:0f:e0:b9:b8:f3:d3:6c:88:
d2:21:21:32:da:af:36:f6:52:8a:75:0f:9a:87:9d:
9e:52:e9:e5:ee:15:3d:e0:94:ca:40:50:19:50:95:
15:eb:e3:9e:98:be:88:39:20:b6:cf:e9:24:a8:0d:
25:70:e8:f4:2c:ac:9e:e0:56:61:8e:be:49:54:4c:
2f:50:56:4e:05:d8:46:93:ce:75:c8:9a:13:ae:f3:
c7:5a:79:64:eb:64:4f:c7:8c:99:64:8a:02:ab:39:
2a:28:1f:83:0c:62:48:0e:b2:c2:7a:d0:ae:a2:2c:
34:bc:19:a6:c8:2b:65:be:81:15:e5:09:94:15:4d:
80:39:18:9a:af:6e:69:c7:ec:28:51:a4:50:e4:56:
47:26:82:82:c4:ab:34:54:cb:81:a8:31:73:97:e4:
61:58:3f:48:de:ce:53:65:bd:f0:3a:06:5e:49:a0:
be:54:dd:83:c5:92:2d:74:1b:6d:bf:49:f0:4d:75:
da:48:f7:1b:14:02:ba:a0:97:09:9e:05:46:ce:bf:
94:37:f0:52:42:33:f6:d8:d1:8f:f3:0a:bf:60:27:
4d:70:e0:b1:6d:8d:9b:3b:2b:35:7d:ac:ca:4a:4d:
6d:16:22:3a:17:d6:f5:14:6c:f7:29:c6:14:cf:64:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:06:77:54:78:A9:F9:2F:35:AC:EA:2A:D3:8D:1C:FF:55:6A:FD:C9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YgZ3VHip-S81rOoq040c_1Vq_ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.98.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f3:92:a3:93:af:f1:4a:e5:ee:f7:26:c4:46:a1:b4:98:b3:
e1:16:dc:85:ec:c0:a1:38:cc:36:6a:f1:38:22:b5:d2:cd:ca:
b7:0b:2b:c0:83:3c:b8:81:d3:57:14:10:9d:d8:39:e5:6c:e4:
09:1c:a5:9b:82:25:70:c3:2f:4b:18:f4:e8:31:1e:4b:ba:90:
e3:30:37:5b:2f:2d:ca:8f:9e:0d:92:b5:2c:1f:9c:1d:5e:56:
e2:b5:68:c7:23:19:c0:1c:4d:75:1a:d4:51:14:6c:cd:ce:fa:
e5:f2:74:80:de:c4:35:04:2c:00:c8:d6:d9:3a:64:11:dd:87:
49:d6:88:31:0c:df:f9:f0:6b:0f:c7:5a:88:db:ae:5e:88:0a:
fa:5b:0a:d2:2f:38:c9:14:40:dd:2e:70:d2:0f:2c:77:60:94:
8e:9d:81:df:12:92:f7:47:76:17:58:d0:10:68:d6:a9:bd:ba:
d9:ff:66:89:48:7c:4a:f8:5a:be:d3:1f:7a:21:38:d6:b1:79:
f4:da:29:c0:fe:cf:18:c2:8c:7c:8d:d3:1c:02:68:1c:2e:cc:
02:6f:c6:ac:74:6c:6c:d7:87:81:a7:dd:29:cf:7d:e6:e1:1f:
4d:40:dc:98:fe:6a:87:dd:6e:0e:69:f6:24:92:9a:2e:bf:6e:
71:71:85:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCp+MVAbOTYGd8QI+DWzqWpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwOTE2MTEyNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjA2Nzc1NDc4YTlmOTJmMzVhY2VhMmFkMzhkMWNmZjU1NmFmZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRHtGzZYD+C5uPPTbIjSISEy2q82
9lKKdQ+ah52eUunl7hU94JTKQFAZUJUV6+OemL6IOSC2z+kkqA0lcOj0LKye4FZh
jr5JVEwvUFZOBdhGk851yJoTrvPHWnlk62RPx4yZZIoCqzkqKB+DDGJIDrLCetCu
oiw0vBmmyCtlvoEV5QmUFU2AORiar25px+woUaRQ5FZHJoKCxKs0VMuBqDFzl+Rh
WD9I3s5TZb3wOgZeSaC+VN2DxZItdBttv0nwTXXaSPcbFAK6oJcJngVGzr+UN/BS
QjP22NGP8wq/YCdNcOCxbY2bOys1fazKSk1tFiI6F9b1FGz3KcYUz2TNNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGIGd1R4qfkvNazqKtONHP9Vav3JMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvWWdaM1ZIaXAtUzgxck9vcTA0MGNfMVZxX2NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV9iMA0G
CSqGSIb3DQEBCwUAA4IBAQAN85Kjk6/xSuXu9ybERqG0mLPhFtyF7MChOMw2avE4
IrXSzcq3CyvAgzy4gdNXFBCd2DnlbOQJHKWbgiVwwy9LGPToMR5LupDjMDdbLy3K
j54NkrUsH5wdXlbitWjHIxnAHE11GtRRFGzNzvrl8nSA3sQ1BCwAyNbZOmQR3YdJ
1ogxDN/58GsPx1qI265eiAr6WwrSLzjJFEDdLnDSDyx3YJSOnYHfEpL3R3YXWNAQ
aNapvbrZ/2aJSHxK+Fq+0x96ITjWsXn02inA/s8Ywox8jdMcAmgcLswCb8asdGxs
14eBp90pz33m4R9NQNyY/mqH3W4OafYkkpouv25xcYXA
-----END CERTIFICATE-----
Generated at Tue Oct 6 21:28:08 2026 by rpki-client