Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VF4azqzONaubq9mRV4s1wzlmsiQ.roa
File: VF4azqzONaubq9mRV4s1wzlmsiQ.roa (raw, json)
Hash identifier: bbSmCv7PZLJcsT/1Qcx/nOTtoR18MUSxolkpPj6q3VY=
Subject key identifier: 54:5E:1A:CE:AC:CE:35:AB:9B:AB:D9:91:57:8B:35:C3:39:66:B2:24
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01976254DCA58BDBAC50584FCBFDD8458D6D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VF4azqzONaubq9mRV4s1wzlmsiQ.roa
Signing time: Thu 12 Jun 2025 04:10:18 +0000
ROA not before: Thu 12 Jun 2025 04:10:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215039
IP address blocks: 77.90.5.0/24 maxlen: 24
77.90.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jun 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:54:dc:a5:8b:db:ac:50:58:4f:cb:fd:d8:45:8d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 12 04:10:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=545e1aceacce35ab9babd991578b35c33966b224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:23:ee:d3:ed:f6:4b:a5:c2:9d:4c:a4:4b:
a4:58:98:e6:36:e0:0d:b7:b8:7b:2e:f1:44:ff:c2:
49:97:cc:82:ee:dc:51:fe:c7:9b:cf:8b:c0:32:95:
ed:9d:45:d5:71:06:12:06:f8:df:3e:09:fa:e6:13:
fe:0c:95:38:81:f1:67:e1:85:d4:e4:a1:65:35:2b:
41:33:5a:d7:f9:3c:06:c4:7a:d6:ac:29:82:ce:e4:
a8:d0:77:b4:1a:cc:55:4d:8e:94:70:ab:46:28:d4:
b3:7d:ad:09:ba:76:3f:40:32:bb:ae:c9:ab:07:c1:
8d:76:2b:5b:60:bb:b8:48:ea:94:aa:63:dc:40:75:
de:4c:5a:c2:1f:fb:70:51:2c:94:64:d0:ee:0b:53:
05:c5:c5:c8:05:12:84:bf:6c:83:56:ff:7a:93:7b:
d3:4d:6f:d1:4c:6a:b9:9a:95:88:8e:12:a2:56:07:
68:2e:b5:0c:5d:0d:6a:9e:01:c2:52:6b:3c:19:fd:
50:98:ec:e6:16:cb:10:3e:5c:ce:c0:49:7a:b9:78:
29:82:6f:d9:65:41:0f:f1:da:b6:01:ce:86:80:b6:
d1:f8:7c:97:9e:bc:9c:1e:9b:f6:19:e9:f4:8c:0e:
7a:2b:04:7e:89:1c:d1:f6:c2:e6:f1:3f:6a:59:5a:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5E:1A:CE:AC:CE:35:AB:9B:AB:D9:91:57:8B:35:C3:39:66:B2:24
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VF4azqzONaubq9mRV4s1wzlmsiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.5.0/24
77.90.14.0/24
Signature Algorithm: sha256WithRSAEncryption
12:13:69:5e:b6:3e:f6:5c:53:c4:78:83:e6:83:27:82:f3:a3:
df:5e:4f:aa:72:ac:39:99:65:ef:df:2b:1e:00:fa:f9:63:19:
25:54:45:82:12:0a:69:3a:73:f7:73:85:f6:65:a2:bd:67:e4:
47:6d:10:02:fc:9a:75:ac:d8:fd:39:8c:7f:31:74:85:44:11:
91:d0:7a:03:dd:f9:af:14:ea:10:f4:a8:df:cc:10:94:f7:cb:
8c:2d:99:b2:f6:2f:80:08:22:d2:1a:28:37:77:b1:ee:f6:99:
67:05:1d:2d:ec:ac:9b:47:59:59:49:04:b9:e9:b3:e3:f1:96:
ff:66:db:c4:cb:cc:f9:a0:8f:85:29:77:4a:71:69:47:8d:ee:
3d:42:72:c6:2a:be:ee:a2:5a:28:a7:2b:f8:dc:38:8f:85:ae:
98:56:76:a8:1c:f5:ea:4c:2a:1c:36:8a:76:09:fa:9d:0f:24:
44:c3:29:87:2c:a8:14:f9:22:04:98:50:55:6f:82:64:0b:1c:
48:23:c0:6d:b4:d0:eb:24:7a:09:e9:16:c6:b3:2d:95:06:92:
d7:ec:34:61:ab:dc:28:ab:9f:ba:1f:a2:60:3a:3e:ec:43:b7:
ff:7c:e9:c4:dd:a6:28:98:5e:eb:54:6e:68:86:da:e7:72:43:
f0:5e:e2:2c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZdiVNyli9usUFhPy/3YRY1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNjEyMDQxMDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDVlMWFjZWFjY2UzNWFiOWJhYmQ5OTE1NzhiMzVjMzM5NjZiMjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug8j7tPt9kulwp1MpEukWJjmNuAN
t7h7LvFE/8JJl8yC7txR/sebz4vAMpXtnUXVcQYSBvjfPgn65hP+DJU4gfFn4YXU
5KFlNStBM1rX+TwGxHrWrCmCzuSo0He0GsxVTY6UcKtGKNSzfa0JunY/QDK7rsmr
B8GNditbYLu4SOqUqmPcQHXeTFrCH/twUSyUZNDuC1MFxcXIBRKEv2yDVv96k3vT
TW/RTGq5mpWIjhKiVgdoLrUMXQ1qngHCUms8Gf1QmOzmFssQPlzOwEl6uXgpgm/Z
ZUEP8dq2Ac6GgLbR+HyXnrycHpv2Gen0jA56KwR+iRzR9sLm8T9qWVqmQQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFReGs6szjWrm6vZkVeLNcM5ZrIkMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvVkY0YXpxek9OYXVicTltUlY0czF3emxtc2lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVoFAwQA
TVoOMA0GCSqGSIb3DQEBCwUAA4IBAQASE2letj72XFPEeIPmgyeC86PfXk+qcqw5
mWXv3yseAPr5YxklVEWCEgppOnP3c4X2ZaK9Z+RHbRAC/Jp1rNj9OYx/MXSFRBGR
0HoD3fmvFOoQ9KjfzBCU98uMLZmy9i+ACCLSGig3d7Hu9plnBR0t7KybR1lZSQS5
6bPj8Zb/ZtvEy8z5oI+FKXdKcWlHje49QnLGKr7uoloopyv43DiPha6YVnaoHPXq
TCocNop2CfqdDyREwymHLKgU+SIEmFBVb4JkCxxII8BttNDrJHoJ6RbGsy2VBpLX
7DRhq9woq5+6H6JgOj7sQ7f/fOnE3aYomF7rVG5ohtrnckPwXuIs
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:36:39 2025 by rpki-client