Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rO6D6Pwuo_WT5LPDKHsf-HlqtkA.roa
File: rO6D6Pwuo_WT5LPDKHsf-HlqtkA.roa (raw, json)
Hash identifier: 4UYePDUebCNjK2SpOemlfdYCnEJOl4CMVR7s16zLqjk=
Subject key identifier: AC:EE:83:E8:FC:2E:A3:F5:93:E4:B3:C3:28:7B:1F:F8:79:6A:B6:40
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01954CF0BEC1CB406A4C5D6AB0513780F774
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rO6D6Pwuo_WT5LPDKHsf-HlqtkA.roa
Signing time: Fri 28 Feb 2025 14:23:20 +0000
ROA not before: Fri 28 Feb 2025 14:23:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 77.81.50.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 14:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:f0:be:c1:cb:40:6a:4c:5d:6a:b0:51:37:80:f7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 28 14:23:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acee83e8fc2ea3f593e4b3c3287b1ff8796ab640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:9a:9f:fe:34:7c:ac:06:00:9f:86:bc:5b:
1f:cf:60:be:64:20:a1:01:cc:d0:e9:ca:c7:0e:84:
be:51:5b:01:b4:c6:ae:ff:5b:65:df:28:fa:25:b9:
81:3a:16:04:97:02:eb:7d:0c:6d:3d:5f:14:70:3b:
ac:c1:95:9d:6f:86:b4:9b:e7:b7:aa:e8:70:13:46:
4c:60:6f:3d:6d:e7:77:c3:36:4c:6c:aa:a4:d9:69:
c1:d5:70:b7:28:ce:bd:69:7a:ed:33:d4:d4:46:8d:
2a:77:91:cb:1f:b4:a1:d5:c3:11:b4:4c:57:9a:c5:
f6:83:cb:69:94:65:4d:15:78:8d:9f:87:90:9d:53:
86:30:49:7f:9c:88:cf:64:16:eb:77:53:b0:c8:df:
a0:36:f5:63:73:b0:5a:a0:7f:ef:c9:43:f3:30:ba:
ac:81:4b:20:ed:f7:5d:67:56:6a:e5:7d:83:5d:cd:
ff:aa:ed:20:e2:0d:44:80:e3:b4:c2:b4:e1:22:61:
77:0f:cd:c7:e9:be:a9:20:25:c9:b2:80:50:ee:73:
83:12:bb:7b:c4:f2:05:f1:da:0c:4c:bb:a7:bf:39:
8d:02:d3:48:cd:eb:56:5a:18:a2:24:fa:2c:41:e6:
e9:d9:4a:51:dd:8f:98:41:04:6a:62:8b:e2:14:ca:
0e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EE:83:E8:FC:2E:A3:F5:93:E4:B3:C3:28:7B:1F:F8:79:6A:B6:40
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rO6D6Pwuo_WT5LPDKHsf-HlqtkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.50.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:b1:93:9a:83:e1:c1:7c:7e:e6:3f:3a:c6:52:76:69:3c:34:
e0:dd:35:82:a9:4e:86:28:1c:fd:41:42:3d:97:c2:9f:26:0d:
39:3f:fb:65:14:83:1d:c6:6d:2d:ab:d2:1f:a7:b1:8c:bd:52:
3d:7d:07:54:d7:37:9e:a5:01:27:fd:b3:2a:2e:d4:8b:ea:6a:
67:31:db:03:65:2a:30:cd:27:e2:bf:67:75:70:8d:98:6d:dd:
cd:e5:69:70:cc:c5:bd:c1:75:65:c6:5b:95:35:01:b2:cd:65:
e9:ee:7e:26:2c:00:b0:33:f5:6d:d6:0d:11:9f:8b:46:b7:71:
d9:74:29:72:14:31:6d:96:9c:c0:8d:30:35:b9:c1:ec:f7:5b:
2d:90:c0:d9:c4:a7:25:45:d2:48:4a:fd:2d:e5:8c:e2:41:52:
15:a2:53:39:0a:61:a0:fd:43:8a:c1:52:75:4b:1c:2d:82:47:
14:d0:ee:81:37:08:20:05:c1:fb:f4:53:fa:9b:56:ea:a8:11:
06:87:c2:b4:c2:10:88:de:18:b0:26:86:c3:17:40:60:6a:1b:
8b:de:2a:8c:c8:5a:c3:7d:22:04:0a:66:36:ca:fc:d1:ea:8c:
ce:7d:d6:db:fb:35:ec:e8:0e:58:60:db:b0:b9:83:80:0f:d8:
38:dc:92:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVM8L7By0BqTF1qsFE3gPd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMjI4MTQyMzIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2VlODNlOGZjMmVhM2Y1OTNlNGIzYzMyODdiMWZmODc5NmFiNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDSan/40fKwGAJ+GvFsfz2C+ZCCh
AczQ6crHDoS+UVsBtMau/1tl3yj6JbmBOhYElwLrfQxtPV8UcDuswZWdb4a0m+e3
quhwE0ZMYG89bed3wzZMbKqk2WnB1XC3KM69aXrtM9TURo0qd5HLH7Sh1cMRtExX
msX2g8tplGVNFXiNn4eQnVOGMEl/nIjPZBbrd1OwyN+gNvVjc7BaoH/vyUPzMLqs
gUsg7fddZ1Zq5X2DXc3/qu0g4g1EgOO0wrThImF3D83H6b6pICXJsoBQ7nODErt7
xPIF8doMTLunvzmNAtNIzetWWhiiJPosQebp2UpR3Y+YQQRqYoviFMoOcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKzug+j8LqP1k+Szwyh7H/h5arZAMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvck82RDZQd3VvX1dUNUxQREtIc2YtSGxxdGtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTVEyMA0G
CSqGSIb3DQEBCwUAA4IBAQCrsZOag+HBfH7mPzrGUnZpPDTg3TWCqU6GKBz9QUI9
l8KfJg05P/tlFIMdxm0tq9Ifp7GMvVI9fQdU1zeepQEn/bMqLtSL6mpnMdsDZSow
zSfiv2d1cI2Ybd3N5WlwzMW9wXVlxluVNQGyzWXp7n4mLACwM/Vt1g0Rn4tGt3HZ
dClyFDFtlpzAjTA1ucHs91stkMDZxKclRdJISv0t5YziQVIVolM5CmGg/UOKwVJ1
SxwtgkcU0O6BNwggBcH79FP6m1bqqBEGh8K0whCI3hiwJobDF0BgahuL3iqMyFrD
fSIECmY2yvzR6ozOfdbb+zXs6A5YYNuwuYOAD9g43JLT
-----END CERTIFICATE-----
Generated at Thu Jun 19 03:01:12 2025 by rpki-client