Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cSr8t5HmWNYM_4gej7kWyNrRA0I.roa
File: cSr8t5HmWNYM_4gej7kWyNrRA0I.roa (raw, json)
Hash identifier: B38eR1qT3+tr/pMSXLHzd6t70pgATdIjvzqK9kVtKSM=
Subject key identifier: 71:2A:FC:B7:91:E6:58:D6:0C:FF:88:1E:8F:B9:16:C8:DA:D1:03:42
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01960426BED40C09680EEB3B4AF59FF8243A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cSr8t5HmWNYM_4gej7kWyNrRA0I.roa
Signing time: Sat 05 Apr 2025 04:12:50 +0000
ROA not before: Sat 05 Apr 2025 04:12:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60345
IP address blocks: 77.90.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Apr 2025 05:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:26:be:d4:0c:09:68:0e:eb:3b:4a:f5:9f:f8:24:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 5 04:12:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=712afcb791e658d60cff881e8fb916c8dad10342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:c0:0a:10:c9:84:c9:24:c3:f7:9c:0e:79:
4f:39:e3:a1:89:b1:1b:cd:20:bd:04:56:36:a1:6c:
56:cd:99:fc:bc:e4:39:de:b6:a9:b8:2a:18:2a:d0:
eb:40:aa:2a:7f:bb:e9:56:5c:ef:70:97:29:57:b3:
2b:7a:1f:23:c4:1b:49:4f:47:1e:82:4c:4e:5a:c9:
b8:0b:fb:ac:2f:a4:5b:aa:d5:48:ff:43:e6:79:60:
be:55:30:46:d8:61:06:ca:14:a1:6a:c0:7e:e5:a2:
cb:74:2e:1f:7c:07:a7:7c:1d:19:bb:8b:2e:0d:2b:
45:d1:0d:57:ea:76:ce:da:5e:50:32:06:92:4a:e1:
73:cf:c3:54:b6:93:23:b4:9f:b0:cb:d5:fb:6a:fb:
8a:9a:41:6f:eb:00:1e:7c:ad:a0:d3:3c:70:8a:bd:
65:c5:47:59:a1:03:a4:cc:96:d0:34:f3:58:87:0e:
bd:77:38:2f:d7:90:5b:5d:1f:e8:94:f8:37:35:d2:
da:57:4a:8e:41:76:6b:b9:eb:f2:e1:a2:4f:e5:3c:
44:94:d6:b6:73:e6:20:33:9e:15:36:90:0d:57:58:
c6:8e:7d:e0:79:47:bb:e3:ea:cb:fc:ef:54:06:bb:
54:8e:71:18:65:3e:0c:e3:ed:a4:c3:d8:87:ed:74:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2A:FC:B7:91:E6:58:D6:0C:FF:88:1E:8F:B9:16:C8:DA:D1:03:42
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cSr8t5HmWNYM_4gej7kWyNrRA0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.55.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:5d:68:6a:dc:51:34:73:64:54:5a:50:32:15:a2:f5:62:4d:
ea:1d:84:5a:4a:62:f8:37:26:d9:56:a4:73:75:32:b1:cf:85:
12:52:75:bc:5f:7f:cf:9e:60:13:f4:39:eb:73:7e:4e:5f:b0:
e4:62:44:b8:fb:d6:b8:20:d1:b0:aa:c7:23:9f:2a:73:1f:45:
c1:9e:85:2a:87:af:20:c5:5b:c2:db:c5:9d:58:d0:1c:3c:70:
fa:58:43:d1:4d:9e:a1:87:67:bc:22:bf:2c:db:06:88:82:a8:
e7:5a:80:1f:46:5a:5d:50:cc:ff:9e:11:f2:f3:1e:21:b2:35:
ff:7e:65:47:08:31:14:17:5e:fa:ab:70:2c:f3:26:8b:f4:1c:
87:df:59:57:e3:b8:ed:89:32:e0:49:46:2e:77:78:1b:29:af:
7f:22:96:ff:26:f1:b3:64:0b:db:d2:a1:a1:48:89:c1:2d:97:
56:8b:39:e9:06:8b:e0:64:d4:1b:04:1f:fd:08:79:a1:ae:ec:
93:0d:5f:48:7f:9c:fa:45:4c:41:a0:73:e6:17:b9:df:fb:7e:
37:9e:2a:98:3e:ff:70:84:d1:b5:ca:48:6b:da:71:07:06:9f:
3c:2a:15:84:6f:62:40:9a:e2:ef:12:6c:f8:fb:13:37:11:6e:
45:43:88:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:34:23 2025 by rpki-client