Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2n2h3m-mpJSa80Mhwwu-7bfJwm4.roa
File: 2n2h3m-mpJSa80Mhwwu-7bfJwm4.roa (raw, json)
Hash identifier: uCfo/Mc3j86t2mqNFcr7Fozal12KS2B4LnQP/AnA50s=
Subject key identifier: DA:7D:A1:DE:6F:A6:A4:94:9A:F3:43:21:C3:0B:BE:ED:B7:C9:C2:6E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196CEFD04DDF8754384636F831DEC33179F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2n2h3m-mpJSa80Mhwwu-7bfJwm4.roa
Signing time: Wed 14 May 2025 13:30:10 +0000
ROA not before: Wed 14 May 2025 13:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138997
IP address blocks: 77.90.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 07:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:fd:04:dd:f8:75:43:84:63:6f:83:1d:ec:33:17:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 14 13:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da7da1de6fa6a4949af34321c30bbeedb7c9c26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:65:18:37:ed:2f:f2:35:3f:d4:5f:bd:c8:f5:
94:49:74:7a:c8:12:ac:af:e2:be:ff:6d:51:78:01:
e3:ad:54:ec:04:7b:84:76:7e:e2:9e:10:ed:52:7c:
32:3b:e2:36:e6:78:97:17:53:44:97:2b:aa:5f:ee:
f5:35:a9:f4:42:a3:64:8c:f1:c2:a9:a3:08:6a:c9:
6c:91:f7:15:b2:e9:5b:e9:8a:5f:9a:a9:19:61:8a:
6d:7e:39:0c:24:b6:67:88:de:45:21:40:26:14:a9:
5b:49:75:69:b8:80:8a:5b:2b:dd:cc:2c:63:4a:69:
6a:e9:a8:3e:79:a0:2b:6c:d3:f5:66:a0:dc:a2:52:
03:b5:15:70:eb:3c:c3:a6:13:47:24:37:b8:60:8a:
a8:e6:a9:2d:af:fb:20:1b:39:65:87:eb:0c:bc:a1:
49:d3:6b:9d:6c:67:e1:aa:7e:9c:01:7b:dd:14:1c:
31:f1:61:14:73:58:42:32:f7:54:78:95:e1:f3:92:
99:4c:ef:ed:f5:7f:ae:b6:99:38:dd:d0:25:1e:f2:
15:b2:d4:12:57:0a:eb:85:22:d4:5c:91:6a:56:79:
c4:f1:0f:54:61:69:ac:15:d1:01:fd:b1:d0:32:72:
01:5a:5e:b1:82:42:d0:23:31:c3:e4:a8:5f:b8:f5:
66:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7D:A1:DE:6F:A6:A4:94:9A:F3:43:21:C3:0B:BE:ED:B7:C9:C2:6E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2n2h3m-mpJSa80Mhwwu-7bfJwm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.21.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d9:09:64:e4:8b:e4:d4:92:e5:9e:0e:65:26:76:f6:47:1f:
7e:f7:09:ca:43:55:d7:0e:ec:63:ab:2e:cd:30:dd:08:4c:b2:
da:c8:25:fa:b8:49:d3:2b:77:d8:4e:88:9b:a2:a1:d6:e2:2b:
b7:97:7c:7a:b7:88:42:98:8c:af:e0:12:f6:38:e5:59:1d:34:
5f:25:e4:53:26:b0:52:56:36:87:02:83:68:e1:f2:c9:4c:55:
42:c0:6e:a3:48:6e:fd:2c:5e:be:43:b5:8c:b9:c9:44:ca:5f:
a2:98:cf:bf:4e:75:6b:c5:14:f7:23:3e:97:11:65:62:c9:db:
9f:13:16:07:3f:6e:3f:b8:90:47:6b:2b:bc:b7:9a:36:f6:8a:
60:18:0b:61:b9:c5:cf:e9:46:73:bb:40:7a:03:43:9a:e8:82:
20:1d:17:fc:ef:b3:50:7e:eb:0c:46:6b:db:e6:7d:c0:2d:ce:
8f:db:e7:4a:43:11:6e:41:a1:e0:bc:33:fa:ef:e4:e0:b1:f2:
93:9c:b8:51:37:3e:78:fc:c4:cd:15:70:3e:6f:8e:f3:0b:04:
2b:42:9a:f4:69:af:05:50:31:e3:49:fa:7a:63:8b:da:f4:fa:
08:d6:50:a8:52:a3:a3:6d:53:6b:c0:0f:a5:a3:a4:b0:db:8a:
e7:a9:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:29:38 2025 by rpki-client