Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bEl8E_yskUS2z6kyaVHZhGdVSKY.roa
File: bEl8E_yskUS2z6kyaVHZhGdVSKY.roa (raw, json)
Hash identifier: gvGx97lEpNuuVVS3aahFMKmsghDh+E3VnWotlbn1dmo=
Subject key identifier: 6C:49:7C:13:FC:AC:91:44:B6:CF:A9:32:69:51:D9:84:67:55:48:A6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01972F0B9B53135F399AF0AC697929367C27
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bEl8E_yskUS2z6kyaVHZhGdVSKY.roa
Signing time: Mon 02 Jun 2025 05:09:39 +0000
ROA not before: Mon 02 Jun 2025 05:09:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207695
IP address blocks: 77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 04:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:0b:9b:53:13:5f:39:9a:f0:ac:69:79:29:36:7c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 2 05:09:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c497c13fcac9144b6cfa9326951d984675548a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ed:d9:d5:e4:d4:60:45:ff:60:e5:81:ee:83:
97:2b:fc:73:c5:a9:1e:3c:4e:d0:38:b4:b9:6d:37:
6c:3f:bb:d6:21:23:7b:1f:e8:90:50:42:2d:da:7e:
e7:5a:2e:1e:9e:9d:5f:40:66:22:82:64:5a:b2:cb:
89:19:2e:e4:5b:83:93:b8:21:e4:3a:b3:5f:b7:dc:
90:a6:14:12:2b:dd:c4:0b:1f:78:b8:00:6d:83:29:
17:20:3c:26:be:1a:b2:b8:89:75:d4:4d:ad:6c:7e:
79:aa:d2:1e:4d:54:66:76:ec:d7:57:68:3f:c2:7c:
3d:9f:db:92:5d:3e:8e:ac:7e:ae:0b:6f:79:38:58:
14:77:ba:6d:d2:2b:96:19:30:82:cf:39:94:c1:f8:
2a:86:a2:92:53:1b:4b:f9:3f:4b:ac:39:e1:f6:26:
61:c0:bd:36:83:a7:32:a9:e9:1f:2f:ee:2c:ed:76:
21:a2:65:7d:62:3d:01:82:4a:fa:c8:19:d2:37:30:
f0:73:a1:16:ea:a2:0a:62:22:95:52:f1:9b:48:7b:
3d:40:2e:67:29:3b:5a:cd:94:89:94:e4:52:ab:51:
09:6f:cd:45:b7:9a:ff:6e:f0:de:c3:55:10:e2:33:
ae:95:4e:28:03:07:34:3d:7e:12:1b:d4:9a:9c:db:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:49:7C:13:FC:AC:91:44:B6:CF:A9:32:69:51:D9:84:67:55:48:A6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bEl8E_yskUS2z6kyaVHZhGdVSKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
89.144.25.0/24
89.144.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d5:e2:f7:94:51:8f:9c:13:11:ba:d8:86:51:c0:14:dc:0a:
42:39:44:cb:2e:18:1c:68:6c:29:dc:fa:4d:bc:58:13:7f:e2:
81:c9:4f:0c:56:7c:a3:81:60:46:d5:d7:f8:12:f4:f7:56:af:
65:9a:5a:66:00:eb:64:9f:a2:79:d0:3d:af:30:c8:da:a6:23:
5b:11:11:27:13:a9:97:3b:46:ea:56:67:e5:14:91:77:ac:a6:
ff:b0:e0:25:39:f9:15:0d:ff:7e:71:a4:42:57:da:82:6c:2f:
ad:37:9c:5f:5a:10:a4:51:57:ab:35:00:62:3c:5c:d0:ec:76:
57:9d:0a:b3:4e:23:9b:63:b8:45:8e:c6:76:5e:17:94:fd:45:
92:f5:b7:88:e8:44:3b:2c:d1:42:d5:22:ba:13:f3:52:4b:4a:
76:5b:bd:5a:83:7f:af:e5:97:ce:03:45:76:34:75:5f:fa:8f:
98:5e:2d:8f:da:bb:b0:c9:21:f7:e8:c4:74:31:c8:cb:d3:6b:
16:45:8d:b7:0c:71:c3:6a:31:78:24:f6:c8:6a:fc:9a:09:15:
7d:22:b0:4c:a1:99:6e:a8:e6:4b:16:ad:c8:cb:28:f2:76:51:
c6:11:54:f8:e3:05:b9:26:d5:ab:ca:d2:0e:66:a3:e1:22:45:
47:97:59:c0
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZcvC5tTE185mvCsaXkpNnwnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNjAyMDUwOTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzQ5N2MxM2ZjYWM5MTQ0YjZjZmE5MzI2OTUxZDk4NDY3NTU0OGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu3Z1eTUYEX/YOWB7oOXK/xzxake
PE7QOLS5bTdsP7vWISN7H+iQUEIt2n7nWi4enp1fQGYigmRassuJGS7kW4OTuCHk
OrNft9yQphQSK93ECx94uABtgykXIDwmvhqyuIl11E2tbH55qtIeTVRmduzXV2g/
wnw9n9uSXT6OrH6uC295OFgUd7pt0iuWGTCCzzmUwfgqhqKSUxtL+T9LrDnh9iZh
wL02g6cyqekfL+4s7XYhomV9Yj0Bgkr6yBnSNzDwc6EW6qIKYiKVUvGbSHs9QC5n
KTtazZSJlORSq1EJb81Ft5r/bvDew1UQ4jOulU4oAwc0PX4SG9SanNvUCQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGxJfBP8rJFEts+pMmlR2YRnVUimMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvYkVsOEVfeXNrVVMyejZreWFWSFpoR2RWU0tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATVopAwQA
TVo0AwQATVo6AwQAWZAZAwQAWZAjMA0GCSqGSIb3DQEBCwUAA4IBAQBr1eL3lFGP
nBMRutiGUcAU3ApCOUTLLhgcaGwp3PpNvFgTf+KByU8MVnyjgWBG1df4EvT3Vq9l
mlpmAOtkn6J50D2vMMjapiNbEREnE6mXO0bqVmflFJF3rKb/sOAlOfkVDf9+caRC
V9qCbC+tN5xfWhCkUVerNQBiPFzQ7HZXnQqzTiObY7hFjsZ2XheU/UWS9beI6EQ7
LNFC1SK6E/NSS0p2W71ag3+v5ZfOA0V2NHVf+o+YXi2P2ruwySH36MR0McjL02sW
RY23DHHDajF4JPbIavyaCRV9IrBMoZluqOZLFq3IyyjydlHGEVT44wW5JtWrytIO
ZqPhIkVHl1nA
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:41:48 2025 by rpki-client