Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IJYoGmBX_qTvB5DU3yI9wYDTafs.roa
File: IJYoGmBX_qTvB5DU3yI9wYDTafs.roa (raw, json)
Hash identifier: m6H1PR6JYNLLPG+wsH1pdqyEYVcTY85NfNgCeKug2+c=
Subject key identifier: 20:96:28:1A:60:57:FE:A4:EF:07:90:D4:DF:22:3D:C1:80:D3:69:FB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019705A20B8A550A41F5DD7F864C71C6178B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IJYoGmBX_qTvB5DU3yI9wYDTafs.roa
Signing time: Sun 25 May 2025 04:09:55 +0000
ROA not before: Sun 25 May 2025 04:09:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214556
IP address blocks: 77.90.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 May 2025 22:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:05:a2:0b:8a:55:0a:41:f5:dd:7f:86:4c:71:c6:17:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 25 04:09:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2096281a6057fea4ef0790d4df223dc180d369fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:07:50:b3:65:4c:6f:30:d9:f3:79:95:b8:
39:45:4f:6d:12:7c:25:50:91:b4:86:cf:34:03:6f:
60:d5:8b:ef:12:71:9a:91:29:00:b8:c8:ef:05:b0:
a6:45:8e:c6:9a:9a:16:7c:2e:4f:73:56:4c:9d:9a:
39:8b:bd:d0:80:6c:6a:91:16:91:73:8a:e4:2d:ea:
19:94:e4:13:78:03:1e:dc:6d:b3:4a:de:18:49:ce:
9c:c8:f7:4e:3d:a5:b8:22:62:06:43:92:be:76:49:
24:f5:ba:69:14:da:66:76:1d:ff:72:03:84:dc:72:
37:45:cf:13:8d:0c:2c:43:bb:bc:40:0b:89:1f:9e:
5f:4f:9b:39:86:30:2b:6b:95:f2:09:9f:11:df:53:
33:e1:98:7d:00:ba:2f:4f:2f:1b:ac:dc:91:ea:49:
0f:bc:f5:ec:09:f0:0d:0c:70:ed:27:c3:04:93:9c:
e3:d1:5e:6e:19:76:c6:0e:91:a9:24:5b:3e:34:2e:
2a:59:dd:8c:9c:86:68:7c:19:d5:14:87:61:49:dc:
d3:b8:26:78:9a:4f:4a:51:63:51:37:cd:a5:1a:a7:
21:72:4b:84:0d:7a:c9:05:81:2e:c6:a5:5d:51:de:
ae:cf:a8:90:c2:da:71:ba:f2:a1:6e:42:a5:c3:27:
26:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:96:28:1A:60:57:FE:A4:EF:07:90:D4:DF:22:3D:C1:80:D3:69:FB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IJYoGmBX_qTvB5DU3yI9wYDTafs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:2e:dc:9e:ef:77:b3:78:87:c5:ad:c4:af:87:b0:03:18:99:
7e:dd:31:87:f3:b6:76:17:fa:37:e0:4a:46:a8:83:a8:49:10:
ce:f6:e0:4e:84:9e:96:46:54:f3:37:d5:8e:f2:e2:68:80:06:
9d:1e:9c:20:69:3a:c7:97:93:b6:9b:a5:d5:f2:e4:71:81:66:
e4:d9:dc:82:87:7f:98:21:b8:a8:f9:61:76:9c:0b:97:51:4f:
e6:85:ec:da:cd:32:5f:01:88:be:68:a4:98:dd:dc:83:af:33:
b8:53:a0:e8:42:ab:dc:3e:65:55:0b:95:ec:6e:44:2e:8a:38:
00:67:38:ff:b2:01:9f:ee:97:58:87:c7:24:8e:d7:83:11:8e:
3f:38:d2:10:c2:ac:35:d9:85:4a:36:05:24:1b:bd:d2:2d:d4:
87:e6:c1:98:05:de:61:2f:65:d9:cb:49:75:e9:89:64:df:82:
9f:2b:e4:c7:1a:cc:a8:bc:92:ba:17:12:6e:07:67:92:12:84:
2e:66:c9:5a:b0:78:a7:9a:69:21:e2:ab:3e:0f:f1:2c:7f:31:
2d:56:e6:78:db:bc:7b:c2:18:3d:23:d1:67:37:47:a6:a7:00:
46:ad:39:6f:21:1e:af:f3:c1:6d:6f:17:8a:c4:13:7a:cf:8b:
13:63:6a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:55:16 2025 by rpki-client