Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-77UZ6xi5prehNNnQlg6hTZv1OU.roa
File: 1-77UZ6xi5prehNNnQlg6hTZv1OU.roa (raw, json)
Hash identifier: 5xcSI4lEjuBAliV0213VPWIpSBu3YwIyEKQ/snbP4uY=
Subject key identifier: FB:BE:D4:67:AC:62:E6:9A:DE:84:D3:67:42:58:3A:85:36:6F:D4:E5
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0197E41AFA81FEEE60EF721D663FD5F00DB4
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-77UZ6xi5prehNNnQlg6hTZv1OU.roa
Signing time: Mon 07 Jul 2025 08:57:42 +0000
ROA not before: Mon 07 Jul 2025 08:57:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.9.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Jul 2025 10:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:1a:fa:81:fe:ee:60:ef:72:1d:66:3f:d5:f0:0d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 7 08:57:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbbed467ac62e69ade84d36742583a85366fd4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:27:a8:27:55:83:f4:8c:ad:4c:fe:4d:22:7a:
cc:1f:d2:ca:0d:c8:33:a5:5b:4f:8c:a5:e3:2b:69:
55:47:96:1a:3a:c3:aa:ce:31:dc:13:bb:49:ac:31:
9a:ee:7c:45:79:b2:da:f6:e6:45:9f:de:b0:2a:bb:
8c:74:c2:8d:7a:55:d6:d8:99:68:b3:d1:6a:d7:96:
6b:f0:47:24:88:d4:38:2c:6a:77:e4:8d:f9:8b:6d:
76:30:f0:12:e8:0c:08:21:65:34:0d:57:b3:64:bd:
4e:61:67:d1:30:ed:92:d6:4f:a2:1f:6f:af:b3:a9:
4e:f5:54:77:22:da:e9:94:0a:ac:a4:7a:00:8f:31:
84:c3:e8:43:66:03:68:23:69:46:48:ef:e3:19:db:
6f:ee:66:a1:7e:8c:f4:e7:88:fa:db:56:0d:3d:ad:
b6:65:a0:c8:a0:80:04:b4:ac:87:2d:be:6c:62:21:
1c:5d:b2:98:a8:b0:f9:5f:22:26:89:53:1f:1e:75:
62:a3:4e:92:6e:25:e4:76:4b:d0:d2:d6:bf:e7:f6:
ea:a9:18:ef:81:87:77:1a:10:8a:fd:95:33:02:ea:
72:c7:21:f4:7c:77:18:7a:8f:ee:41:be:7b:c7:bb:
b2:7c:e2:96:d1:21:5a:a8:4c:24:0b:00:d9:2a:9f:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BE:D4:67:AC:62:E6:9A:DE:84:D3:67:42:58:3A:85:36:6F:D4:E5
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-77UZ6xi5prehNNnQlg6hTZv1OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.5.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:bd:d9:33:34:7b:13:ce:c4:82:3e:fd:95:ed:2b:04:ba:eb:
2d:61:35:a8:14:0f:05:0c:2f:30:55:2b:3f:8a:30:54:d4:99:
83:c0:d7:08:1f:3c:f4:d2:9f:89:45:81:08:02:f6:41:3a:9b:
51:0e:f4:00:66:63:a5:9f:0c:29:36:1c:4b:f9:69:8d:d4:f9:
98:8f:1e:77:a7:22:b0:6c:60:52:5e:58:b9:4e:77:99:81:67:
86:dc:d7:37:ce:3b:fc:32:9a:d7:ce:4a:b6:0c:9c:81:fe:5c:
4f:f3:b7:4d:ad:a2:37:58:45:89:d9:49:5a:f9:74:87:1c:4b:
0c:86:fe:d5:04:88:d7:87:3e:27:69:a8:25:18:93:b9:9f:aa:
fe:09:13:16:67:89:c1:86:13:f6:cd:7f:45:ec:4a:a3:11:66:
21:1d:ee:31:15:89:5f:42:19:50:7c:5c:f7:1d:a7:5f:36:e9:
a7:82:32:f2:a3:aa:84:2b:60:4b:69:f1:c0:4c:48:7c:5f:fb:
b8:10:9a:e9:62:cf:80:7e:24:43:00:5f:fe:20:6c:32:01:b2:
92:b9:1b:1d:04:22:f4:ee:5a:df:27:be:ce:c3:ab:74:8a:87:
8d:1f:48:c7:36:53:c3:f5:e5:92:70:67:49:f0:e8:d9:e6:a0:
7a:6e:2a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:28:07 2025 by rpki-client