Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/kDlZp7hQq4eXz6YSIyQWKVdo0rw.roa
File: kDlZp7hQq4eXz6YSIyQWKVdo0rw.roa (raw, json)
Hash identifier: 9n5IyEW+HDEhUV2KbF5SnDnpw8xrlo/f/fc/nRpUn7Q=
Subject key identifier: 90:39:59:A7:B8:50:AB:87:97:CF:A6:12:23:24:16:29:57:68:D2:BC
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01980D567D9312E7AAD86FFB5471A25D2896
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/kDlZp7hQq4eXz6YSIyQWKVdo0rw.roa
Signing time: Tue 15 Jul 2025 09:07:08 +0000
ROA not before: Tue 15 Jul 2025 09:07:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 77.83.244.0/24 maxlen: 24
95.81.72.0/24 maxlen: 24
95.81.73.0/24 maxlen: 24
95.81.74.0/24 maxlen: 24
95.81.75.0/24 maxlen: 24
185.113.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Jul 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:56:7d:93:12:e7:aa:d8:6f:fb:54:71:a2:5d:28:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jul 15 09:07:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=903959a7b850ab8797cfa612232416295768d2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:d8:0f:46:14:53:7f:82:07:58:a3:2c:f4:
bc:55:0b:39:76:3f:8f:d3:39:23:c9:89:cf:4a:67:
47:c4:e8:ec:df:ea:01:f2:2a:70:65:73:ba:36:30:
41:28:61:56:d2:94:e7:b1:6b:b6:de:56:8a:b9:fa:
0c:8e:ab:b6:9e:30:3e:8d:f4:c8:26:54:a2:60:b1:
20:7c:34:64:2b:72:e4:8e:4b:b9:4b:5b:bd:61:e4:
08:59:83:af:3b:b5:da:90:13:22:fb:fb:19:2f:48:
2c:49:49:f3:83:66:0e:cb:06:bd:0a:2f:dc:58:23:
75:52:f5:dc:85:f0:e6:73:c3:57:21:8b:5d:a2:b7:
64:1a:32:f8:bf:99:71:e8:b7:ef:83:4b:14:e4:2b:
76:aa:0e:09:3b:62:0d:0c:93:6f:08:22:1b:1f:97:
37:ac:40:5f:9f:91:34:a7:2e:21:c4:c0:63:89:ca:
41:10:9c:e1:2a:cb:88:ad:3b:89:0a:01:7f:af:a5:
79:cd:b5:28:43:56:df:e8:27:47:8b:ba:b0:74:19:
e9:24:86:cd:6c:03:ee:a3:aa:0e:12:65:5b:a0:00:
7c:f9:b2:7e:b0:2a:48:c6:ce:2b:56:d7:b1:43:43:
ce:64:ee:9a:98:e0:7e:27:04:b4:44:c4:f9:9c:6a:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:39:59:A7:B8:50:AB:87:97:CF:A6:12:23:24:16:29:57:68:D2:BC
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/kDlZp7hQq4eXz6YSIyQWKVdo0rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.244.0/24
95.81.72.0/22
185.113.138.0/24
Signature Algorithm: sha256WithRSAEncryption
87:30:54:47:ee:87:2f:ed:91:9d:a5:44:2f:29:2e:f9:0c:b3:
6f:6a:c7:71:0f:d2:eb:06:50:7b:43:5f:e2:5b:7f:00:00:a9:
88:c7:25:84:69:d0:8d:3f:c1:1b:2a:b0:32:6e:22:1a:e2:97:
51:6e:fa:9f:bc:eb:2b:0b:6c:c6:94:b2:ac:b1:89:ce:46:fa:
34:28:cc:30:fb:7e:1d:26:ab:f7:dc:a3:d0:be:8d:72:4b:2e:
2c:71:7c:9e:6f:3b:8f:66:ee:03:83:47:1a:5c:f5:2e:32:02:
a0:4b:14:29:f6:4b:8f:a2:1a:ac:1e:3c:99:e6:4e:a6:6a:16:
19:88:32:76:fd:f8:5b:15:9d:48:85:d5:5c:a9:08:57:2f:b6:
df:fb:bb:bc:51:2f:70:a7:69:5f:b4:8b:34:7a:01:96:b0:fc:
d4:78:b7:0e:a9:11:a6:63:e8:35:9f:06:dc:a6:ba:b5:da:a9:
51:23:87:80:3c:35:ed:b1:9d:b8:45:f0:b8:d6:5e:4c:01:3a:
82:e7:7d:02:5f:0b:f6:ca:94:04:3f:ad:ce:51:85:a3:6f:d1:
1f:95:35:47:38:41:7d:d5:c4:d8:6d:b7:9e:15:6f:09:e7:f4:
22:6c:80:19:32:12:86:53:b3:e9:ab:7d:20:51:9b:71:09:c0:
82:75:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:58:54 2025 by rpki-client