Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/egzRM6xVf8VFhtl0JxENkYxhEiM.roa
File: egzRM6xVf8VFhtl0JxENkYxhEiM.roa (raw, json)
Hash identifier: NSqee1SsjVY6P0uQQK08j0fm5UyYYofp08ZnzlV767I=
Subject key identifier: 7A:0C:D1:33:AC:55:7F:C5:45:86:D9:74:27:11:0D:91:8C:61:12:23
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019812AE953BC547CB9B5ADDCE8F95559508
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/egzRM6xVf8VFhtl0JxENkYxhEiM.roa
Signing time: Wed 16 Jul 2025 10:01:28 +0000
ROA not before: Wed 16 Jul 2025 10:01:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 77.83.244.0/24 maxlen: 24
95.81.72.0/24 maxlen: 24
95.81.73.0/24 maxlen: 24
95.81.74.0/24 maxlen: 24
95.81.75.0/24 maxlen: 24
160.20.158.0/24 maxlen: 24
160.20.159.0/24 maxlen: 24
185.113.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Jul 2025 08:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:ae:95:3b:c5:47:cb:9b:5a:dd:ce:8f:95:55:95:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jul 16 10:01:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a0cd133ac557fc54586d97427110d918c611223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:79:4c:f4:f6:dc:35:6b:f8:57:74:d0:71:ab:
40:f1:a5:9f:eb:27:fc:92:b4:6b:f7:ed:f3:ff:fe:
04:e7:fb:3a:93:b2:d5:53:bb:68:3e:69:13:27:82:
de:3d:f8:3c:6e:d6:77:f8:c8:5a:f4:4a:47:60:fe:
6f:23:c4:f1:89:60:81:0c:4e:3a:bd:59:ac:bf:82:
43:92:f0:76:a4:61:b2:5c:fe:31:92:da:d0:62:0b:
4f:41:29:bb:44:72:f5:e2:d8:63:56:86:ce:f2:28:
83:c1:9a:74:9e:61:97:85:c3:24:5a:83:f8:a7:b6:
1b:db:be:6a:6c:52:d7:d2:e5:9f:69:54:ba:93:0e:
14:d1:44:5c:b4:c0:a6:87:3f:1e:87:25:6b:85:99:
13:49:de:b0:0a:35:af:20:c1:90:30:7d:18:bd:f1:
7d:75:d9:83:44:93:e1:ca:0b:25:43:bf:c2:41:24:
37:25:de:0c:a3:71:b6:9c:9f:ca:f7:af:18:6b:18:
09:09:c2:e3:07:06:3c:fd:bd:2c:8a:c2:d6:7c:fb:
31:14:d2:6a:09:9d:7d:ac:c9:f6:23:67:83:dc:76:
5e:3a:cc:ab:a8:a5:45:7d:4e:7a:05:85:2b:28:5a:
52:14:e6:72:80:29:ff:a5:82:08:47:82:75:0a:36:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0C:D1:33:AC:55:7F:C5:45:86:D9:74:27:11:0D:91:8C:61:12:23
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/egzRM6xVf8VFhtl0JxENkYxhEiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.244.0/24
95.81.72.0/22
160.20.158.0/23
185.113.138.0/24
Signature Algorithm: sha256WithRSAEncryption
36:60:53:8f:93:f2:84:73:79:52:37:d7:01:34:07:0f:00:18:
5a:88:a7:12:5b:f0:dd:1b:6f:61:6c:45:04:d2:32:c2:94:05:
aa:c0:36:a5:1a:b9:44:9a:30:ef:17:0e:a7:0c:5c:7d:1d:02:
e8:4c:24:58:d0:b7:65:37:c9:dd:a0:c2:66:28:8f:6a:2e:a1:
f7:3e:1a:2b:d5:29:ea:3d:be:52:38:f7:3e:2b:26:70:f5:cc:
4d:9d:eb:1b:c2:9c:39:d4:a2:a5:1e:20:45:08:c7:3b:f8:ef:
c9:0c:96:66:7c:6b:f0:9e:c0:70:93:43:33:e6:f5:b9:9b:6e:
37:ad:4d:82:77:bf:fd:d5:3a:63:ee:f1:92:2e:3b:1e:6a:f6:
58:08:a5:dc:ed:af:18:0c:e1:84:19:ef:fa:03:59:16:e3:23:
30:91:e8:3f:81:da:e0:83:6d:49:cc:dc:bc:b1:bd:dc:83:3a:
58:67:df:52:a8:79:8c:29:72:6e:c2:53:e7:89:48:ab:5a:29:
81:61:d2:9f:e1:3c:53:73:54:b2:ec:82:33:70:22:75:f7:1b:
ed:9e:81:08:b6:b3:ea:32:a8:f5:75:c8:05:11:19:40:46:82:
91:8d:7f:a2:cb:ee:93:72:f8:cc:63:68:d0:92:e0:15:dc:e5:
91:18:a8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:02:10 2025 by rpki-client