Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2l57rxP9Bh8PMExnnFbkkgWp-zI.roa
File: 2l57rxP9Bh8PMExnnFbkkgWp-zI.roa (raw, json)
Hash identifier: rxSTABTETdfymfaNKC0CritkSSUbjYGun2zxivt+XLE=
Subject key identifier: DA:5E:7B:AF:13:FD:06:1F:0F:30:4C:67:9C:56:E4:92:05:A9:FB:32
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019653ADA34CCD9B9975B365324E5EE1362D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2l57rxP9Bh8PMExnnFbkkgWp-zI.roa
Signing time: Sun 20 Apr 2025 14:50:10 +0000
ROA not before: Sun 20 Apr 2025 14:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8452
IP address blocks: 77.90.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 04:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ad:a3:4c:cd:9b:99:75:b3:65:32:4e:5e:e1:36:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 20 14:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da5e7baf13fd061f0f304c679c56e49205a9fb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:7c:f2:aa:ef:f7:80:f5:de:c6:dd:14:20:
e4:dc:4e:47:48:8b:3e:0c:16:82:e6:dc:d2:d0:63:
9c:33:ce:0c:91:dc:ff:bd:a5:55:07:1b:de:98:ef:
d2:1e:51:02:06:7d:1b:ac:2d:0e:09:8d:0a:b0:ab:
25:95:cb:3d:3a:74:a9:e2:b9:a2:9d:88:e6:7a:e2:
ae:68:3f:42:a8:40:17:96:5e:f3:05:9f:01:64:fe:
9f:db:56:af:dc:08:84:4c:59:55:98:d8:9c:cf:13:
d6:3c:75:d1:a6:cd:6c:77:e7:8f:e0:ce:b3:49:4e:
72:c3:9f:2d:7b:2a:2d:79:c5:32:01:59:bb:59:63:
3e:ee:ca:b1:2d:3e:ba:72:72:2c:ac:c8:fa:c7:c4:
a1:70:1d:6f:a6:7f:1d:dc:17:37:d2:a2:2c:e1:2b:
0b:56:5a:5e:bd:b8:53:9b:a6:f1:33:2b:82:45:f8:
2d:0b:e8:8f:8d:81:e7:12:2c:1e:87:eb:3f:39:4c:
69:48:b6:51:e7:78:0a:a8:3d:30:d9:fa:6a:07:fd:
9c:f0:bd:2e:36:96:d7:4b:3c:6c:f0:67:35:f9:78:
0b:b2:e7:0e:31:43:34:2e:48:2f:ec:b5:b3:9b:92:
12:c3:6f:69:4a:fe:8b:4f:04:5c:67:24:f0:da:e0:
17:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5E:7B:AF:13:FD:06:1F:0F:30:4C:67:9C:56:E4:92:05:A9:FB:32
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2l57rxP9Bh8PMExnnFbkkgWp-zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.21.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ae:ac:5a:d0:9f:65:47:f1:45:74:4a:a4:d9:18:ea:fc:a1:
77:0b:b7:d8:b4:27:ca:b7:28:51:e6:5d:76:78:ec:73:41:09:
5c:b9:6e:75:f6:70:d6:8e:79:92:3b:de:23:3f:7e:06:f4:73:
15:06:ec:0f:8b:b2:49:23:a3:64:2b:79:d0:92:ff:e9:fd:a0:
f9:c1:9f:bf:80:cc:ca:d4:03:b3:48:92:00:7a:6d:74:07:3b:
5d:38:de:0c:b1:73:7c:24:77:bb:bb:b1:82:87:6b:8c:8b:45:
91:71:a0:2e:5e:81:45:8a:b9:05:dd:1c:fa:17:3c:4b:58:4e:
af:5b:6f:83:27:06:41:94:b3:21:be:09:91:32:f4:30:57:d0:
6f:6d:84:56:77:80:dc:07:6a:f1:2d:d1:f6:3c:00:08:f2:58:
09:05:e3:d2:23:d6:45:d9:e1:90:07:ad:2e:b2:c4:e5:dc:b7:
d1:e8:0f:6d:c0:78:56:44:b7:75:e6:8a:e4:58:e8:f5:e3:45:
28:87:0a:5f:99:02:be:07:77:e8:4a:dc:32:3e:f7:18:6b:0d:
b9:31:d3:ea:54:e5:ac:0a:47:6e:2e:36:46:ad:83:c8:4e:3a:
c4:15:e6:56:41:a6:61:1b:0e:f5:14:4f:12:a7:7e:82:bf:65:
d1:0a:25:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:29:39 2025 by rpki-client