Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/9vH3lziW7soHdiGdT-LnRFDJS9k.roa
File: 9vH3lziW7soHdiGdT-LnRFDJS9k.roa (raw, json)
Hash identifier: mmygIWu1oZtY3UqKLUVaKVsgrr49KhUES+4oq2scMnA=
Subject key identifier: F6:F1:F7:97:38:96:EE:CA:07:76:21:9D:4F:E2:E7:44:50:C9:4B:D9
Certificate issuer: /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Certificate serial: 019D29B0646B25EC93CE65866FA32BC05769
Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/9vH3lziW7soHdiGdT-LnRFDJS9k.roa
Signing time: Thu 26 Mar 2026 10:28:38 +0000
ROA not before: Thu 26 Mar 2026 10:28:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48147
IP address blocks: 109.206.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Mar 2026 10:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:b0:64:6b:25:ec:93:ce:65:86:6f:a3:2b:c0:57:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Validity
Not Before: Mar 26 10:28:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6f1f7973896eeca0776219d4fe2e74450c94bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:42:20:1a:4e:82:48:e2:9c:ce:73:1a:c9:
dc:c7:0c:e8:83:90:5a:19:3a:fd:f2:00:fe:af:3d:
45:a1:e4:62:7e:5d:3e:b2:7b:ff:e7:ad:3d:4a:b7:
2a:ad:88:77:e1:38:ab:6b:15:b8:c9:8c:ca:7c:08:
ac:c3:dd:f3:05:d2:d4:e2:99:2f:f8:52:5b:c8:12:
80:46:7b:f6:90:73:9c:c0:2a:1c:ee:95:92:81:20:
54:0f:4d:27:37:ff:a7:e0:e9:c0:61:35:2e:1e:bc:
4c:95:de:18:0a:61:30:3a:f3:40:fd:51:57:aa:a5:
13:33:6f:ef:f6:cb:86:45:3a:d9:63:c2:19:c2:bf:
88:90:ee:e1:34:cd:54:0f:8b:b3:75:d3:9c:bc:7f:
8e:05:12:ac:f7:68:4d:74:49:c1:c8:ef:ae:e1:85:
d0:82:4f:c4:6c:c5:cf:93:0e:32:33:6a:9f:b9:7e:
95:5f:b3:3c:c7:b3:36:c1:68:7a:69:78:3d:bf:96:
18:29:4e:df:d6:39:25:3b:e6:01:a1:90:b8:5b:9c:
99:22:d4:e3:f5:d6:82:2d:64:e5:0f:27:5b:25:10:
54:84:8a:40:79:af:12:49:32:8c:fd:bb:0a:9b:3a:
dc:6c:84:96:71:82:1c:7a:9f:18:85:74:b7:4f:ec:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F1:F7:97:38:96:EE:CA:07:76:21:9D:4F:E2:E7:44:50:C9:4B:D9
X509v3 Authority Key Identifier:
keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/9vH3lziW7soHdiGdT-LnRFDJS9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:90:65:e1:60:22:a3:2d:89:32:01:57:6a:e8:c8:84:d5:13:
f7:9d:11:53:2e:75:f6:74:47:89:52:25:9e:a2:6b:b1:82:aa:
ed:89:8d:b8:d4:4d:10:72:5a:a2:c4:ff:45:23:8a:29:1e:6e:
77:ef:76:fe:27:df:c6:91:00:ca:00:55:72:26:a0:2f:e5:15:
30:4c:b1:77:52:75:e8:6f:31:4e:a2:6f:7c:eb:b1:79:fe:d9:
11:df:29:2e:d7:36:3e:f0:4f:41:d5:74:3f:67:aa:93:31:f8:
e1:cb:4a:cb:d7:a3:c4:d8:c6:63:31:75:09:b6:29:83:61:3e:
1d:ec:91:e8:fc:23:dc:5c:67:5c:be:b3:70:00:8c:38:c0:77:
3d:86:4b:c3:ee:f2:a4:70:11:06:e1:9d:29:e5:7f:bc:7a:bf:
a7:85:86:7f:f0:65:f8:f9:cb:15:98:b8:2d:73:b1:89:39:a3:
65:75:03:a2:ab:70:00:75:52:d4:90:ff:9d:56:07:cc:ff:87:
cb:01:76:ac:63:fc:44:e4:10:c7:24:2e:c4:09:e3:72:a8:d3:
73:47:0c:ed:a1:d4:09:b2:d6:47:86:f3:ec:5a:1e:41:a5:79:
1a:53:c2:b3:2e:db:80:8f:2f:12:6a:a8:9e:22:04:df:78:c0:
25:fb:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:12:00 2026 by rpki-client