Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6qx40FMrV64XdzeaNE_TibApPUg.roa
File: 6qx40FMrV64XdzeaNE_TibApPUg.roa (raw, json)
Hash identifier: tiyq6PMoy9iVEF79vwuJlQBEfPa0UjXDT7CIDkaO66Q=
Subject key identifier: EA:AC:78:D0:53:2B:57:AE:17:77:37:9A:34:4F:D3:89:B0:29:3D:48
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019743760964D069A85F9AF9E7D7C54C5B5E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6qx40FMrV64XdzeaNE_TibApPUg.roa
Signing time: Fri 06 Jun 2025 04:18:18 +0000
ROA not before: Fri 06 Jun 2025 04:18:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207695
IP address blocks: 77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 12:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:76:09:64:d0:69:a8:5f:9a:f9:e7:d7:c5:4c:5b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 6 04:18:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaac78d0532b57ae1777379a344fd389b0293d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:af:27:a2:91:08:b0:2b:78:e7:6f:ae:f4:
35:81:77:04:b5:6e:be:06:2b:b5:18:f3:bb:8d:93:
87:1b:f5:3a:66:4a:ad:62:eb:d0:48:78:6d:c8:3d:
b4:a5:15:5e:16:b6:be:4f:18:97:86:cc:18:8c:c9:
4c:82:5c:3a:30:16:a6:05:3b:95:b8:d5:47:66:5c:
62:74:dc:e4:90:5c:e5:e6:f7:e6:f4:a5:fe:7d:8d:
33:30:67:7f:24:9d:81:17:90:4c:45:c3:e7:93:68:
a5:49:ec:19:ff:a6:e1:8f:0b:00:05:57:63:68:6f:
10:5d:4b:51:5a:1c:72:a4:b6:a9:36:3b:c1:74:c3:
37:94:92:d2:a0:c7:d1:2c:08:de:0c:e3:4a:31:a2:
05:df:ee:6e:c5:15:32:c1:5d:cb:84:8d:9d:9f:f1:
71:07:36:47:0e:32:1b:83:b2:e0:51:08:4e:64:55:
89:76:7a:53:7e:5a:00:a7:d7:4e:77:02:82:a1:0e:
d5:11:9e:b3:68:3b:3e:9b:fb:f4:43:bf:1c:f4:fb:
dd:15:68:a3:2a:73:47:37:90:2a:8f:82:21:ae:ba:
4a:0b:bb:dc:93:10:6b:55:34:0b:0e:2c:43:c8:e7:
a7:a3:ed:bc:e4:f1:18:21:c9:1c:77:e2:82:db:af:
6f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AC:78:D0:53:2B:57:AE:17:77:37:9A:34:4F:D3:89:B0:29:3D:48
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6qx40FMrV64XdzeaNE_TibApPUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.41.0/24
77.90.52.0/24
89.144.25.0/24
89.144.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:33:2a:c5:41:fe:4e:bb:f2:7e:76:33:17:19:b7:ac:8a:a8:
e6:8a:88:84:5c:f9:1b:72:a2:01:69:69:4b:85:36:25:2e:ed:
46:a9:44:8c:2f:a1:4d:af:de:88:41:a2:de:dc:ff:6f:1f:f6:
34:fe:c6:d1:f8:3b:8a:c8:f0:0a:3b:c5:60:a0:ec:94:8d:08:
e4:93:fb:15:43:1f:7f:23:ac:1b:74:18:e2:9d:d3:29:3c:5d:
e5:48:56:0c:15:34:06:0e:8b:4e:91:39:b0:50:4a:e0:ab:19:
ac:e5:90:de:5b:e0:17:10:56:0a:98:02:81:21:74:3d:b2:af:
4f:b0:5d:64:1c:56:8f:72:38:81:ef:2c:a1:44:e2:7d:ca:3e:
01:1c:ae:b1:4a:0c:08:db:1e:eb:ac:57:f8:12:03:23:eb:a9:
76:75:01:a6:07:ee:1f:f8:8c:db:82:c0:a6:00:91:08:b6:5e:
71:b1:1c:62:67:f2:4c:71:78:7f:fd:4e:14:51:ba:7a:e3:50:
cd:34:b8:c0:e4:1c:98:65:dd:2b:35:32:8f:52:a8:ca:b4:8c:
e6:b3:f4:39:ec:69:fe:8b:51:68:8c:a6:10:45:69:ab:59:bd:
cc:a3:ee:a5:d9:f1:14:d2:10:b1:8d:cd:3b:ba:63:91:61:e6:
4b:61:2f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:44:58 2025 by rpki-client