Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8CBLMInZQg00AQ5mPSHE-hSlCys.roa
File: 8CBLMInZQg00AQ5mPSHE-hSlCys.roa (raw, json)
Hash identifier: ody9pmkkAu4Z2+azWtzKdKaz0Ageo3D551t98AqGnGA=
Subject key identifier: F0:20:4B:30:89:D9:42:0D:34:01:0E:66:3D:21:C4:FA:14:A5:0B:2B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196B343DD258E76DDF8AACF7489E328AACB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8CBLMInZQg00AQ5mPSHE-hSlCys.roa
Signing time: Fri 09 May 2025 04:18:11 +0000
ROA not before: Fri 09 May 2025 04:18:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 77.90.38.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 May 2025 04:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:43:dd:25:8e:76:dd:f8:aa:cf:74:89:e3:28:aa:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 9 04:18:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0204b3089d9420d34010e663d21c4fa14a50b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:ae:02:d3:96:b5:b1:b5:fd:28:fd:3e:da:
51:f0:89:d9:9d:ef:ac:01:05:b4:84:4b:6e:f6:01:
4d:54:0a:93:25:5e:d5:d6:e2:27:d3:a3:d3:c1:54:
dd:ae:7a:ed:7a:7f:fb:c4:6b:97:47:65:ea:cb:c2:
1b:cc:0d:18:77:49:35:7a:45:69:90:21:d9:b5:39:
0d:81:87:d4:bb:28:a2:91:d2:2f:52:1a:a9:b1:de:
a6:da:e8:10:c2:fc:40:48:94:eb:73:40:f1:a9:4d:
d6:6b:19:17:4f:1c:bc:ad:d4:f4:ec:01:fa:82:e7:
e3:32:8a:85:16:a1:3c:31:5f:88:d8:90:9c:7d:9b:
eb:af:2b:d7:05:f7:a5:df:30:98:c6:5e:9e:c8:e5:
a2:d6:4f:ec:19:29:f4:72:fe:42:88:d7:3d:2e:e5:
3b:f8:84:83:c9:e2:73:93:21:83:fe:d4:63:d5:4e:
fe:7a:0f:78:04:b5:5f:72:6d:23:9c:04:16:a3:9b:
ed:3d:ff:b9:fa:00:81:00:3a:da:ac:d4:cc:e0:f9:
b7:9e:8b:09:f8:b0:58:2a:95:2d:41:30:58:5f:10:
af:78:d0:19:32:56:99:d4:f2:96:95:19:55:74:53:
53:45:08:60:90:78:b2:06:fd:f7:b5:16:22:d8:51:
ef:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:20:4B:30:89:D9:42:0D:34:01:0E:66:3D:21:C4:FA:14:A5:0B:2B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8CBLMInZQg00AQ5mPSHE-hSlCys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.38.0/24
94.103.170.0/23
Signature Algorithm: sha256WithRSAEncryption
69:5d:50:f8:27:20:06:59:1c:4b:35:5c:7f:dd:1e:ca:41:a9:
69:50:2a:cf:c7:b6:fe:df:e0:cb:48:78:a4:64:09:c6:b6:ab:
1c:e2:99:e4:9c:46:c1:53:af:8b:ca:f7:e8:85:44:81:ea:69:
d0:b0:bd:ff:c6:d0:20:42:83:9f:42:b2:6f:f2:61:78:df:23:
19:be:c8:ca:46:8e:05:db:0c:ef:a4:67:4e:ce:e3:b1:d2:b2:
a6:96:37:7f:1d:be:df:81:8f:9d:45:57:c4:5f:4a:04:58:2d:
39:c4:73:c5:51:5e:71:6b:81:51:90:03:cb:c5:55:ca:be:57:
82:21:a8:41:16:20:79:ff:3a:d1:46:ee:43:27:a1:75:b8:31:
65:ed:ed:a1:34:cc:20:ac:f9:9d:c4:f1:3e:65:3f:14:27:6a:
0b:51:3f:63:d3:63:4b:bb:50:43:68:ce:25:c6:5c:fd:2f:f1:
e7:c4:f9:b5:a1:6a:46:f3:16:94:11:75:54:96:fc:5c:8b:87:
57:ae:26:24:18:ac:ec:53:cc:ca:d7:19:27:e0:2c:37:88:99:
cb:ce:39:23:3c:b9:5b:33:7f:b6:72:f7:85:93:e1:2d:ae:c5:
41:8a:3a:0d:47:c7:be:34:ed:83:7f:eb:a5:f8:9e:f0:58:28:
c0:24:ea:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:23:44 2025 by rpki-client