Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1-4i3rPZnhiwrP0wq94L_2eq-yY0.roa
File: 1-4i3rPZnhiwrP0wq94L_2eq-yY0.roa (raw, json)
Hash identifier: I0HjzhHXFMK3Ds+s9VoaA1iTRuohIzY2RN0GnD9JDZk=
Subject key identifier: FB:88:B7:AC:F6:67:86:2C:2B:3F:4C:2A:F7:82:FF:D9:EA:BE:C9:8D
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 01969771F6A974758CFFA3E02E8E6D698A4C
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1-4i3rPZnhiwrP0wq94L_2eq-yY0.roa
Signing time: Sat 03 May 2025 18:39:10 +0000
ROA not before: Sat 03 May 2025 18:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21554
IP address blocks: 77.110.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 May 2025 11:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:71:f6:a9:74:75:8c:ff:a3:e0:2e:8e:6d:69:8a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: May 3 18:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb88b7acf667862c2b3f4c2af782ffd9eabec98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:85:95:3d:c7:7d:cb:fe:78:95:eb:6f:cf:
65:8c:39:97:8a:bd:7f:2e:f4:c8:f7:42:51:17:5a:
20:2b:4b:ec:00:a0:cb:64:05:95:4e:e3:fb:18:30:
ef:3e:5f:52:98:1b:6e:08:5b:97:b8:9c:92:d6:79:
d4:96:44:48:92:4f:1f:ec:ee:24:53:3f:f1:13:5b:
a4:dd:7e:5c:4f:33:c6:ae:17:7e:c2:2f:91:00:46:
73:37:7a:20:24:c3:64:f1:1d:61:03:de:55:a3:a2:
b3:94:e3:b1:28:33:d0:08:af:56:91:c4:2e:d6:49:
0f:6e:21:80:4b:13:56:14:67:65:16:d9:e8:c9:c4:
29:16:f3:75:e5:01:98:62:14:d3:81:5d:52:2e:48:
42:f7:98:84:c8:a3:55:9c:ce:fd:75:e7:67:21:e6:
fd:c3:b4:e3:c2:a0:59:6d:9c:cf:2f:1a:4d:69:b8:
73:57:64:9b:e4:28:da:b0:23:db:df:a7:4e:f2:f0:
91:66:4a:7a:3d:a5:82:ef:2c:66:bb:31:b9:d6:e1:
f9:75:d4:59:d8:c2:dd:84:eb:ae:73:6a:7d:c4:e2:
34:d6:4e:60:3b:c7:a2:c4:ab:40:30:24:5f:a7:f4:
23:16:7a:48:36:0b:70:f9:84:5c:17:8b:bf:bb:07:
8b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:88:B7:AC:F6:67:86:2C:2B:3F:4C:2A:F7:82:FF:D9:EA:BE:C9:8D
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1-4i3rPZnhiwrP0wq94L_2eq-yY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.97.0/24
Signature Algorithm: sha256WithRSAEncryption
23:af:c4:13:43:20:31:63:16:82:9f:70:20:05:5a:c2:3e:14:
b4:8a:bc:85:b8:6a:ed:03:a4:17:e6:3f:0a:19:6e:97:d0:49:
69:7b:6f:8f:ed:73:d8:e9:c2:7f:cb:39:23:99:78:4f:27:31:
f7:6b:47:e9:cc:d6:15:9c:17:e0:f5:7d:35:16:88:96:db:46:
01:27:ba:f4:61:9b:c6:a3:9e:02:e6:0c:62:b6:41:4f:90:2b:
92:90:83:76:09:6c:6a:0a:b3:30:75:9a:9c:72:64:75:dc:e5:
34:b5:7b:0e:ab:4b:9b:d2:b9:cc:b3:b1:2c:5a:a2:56:da:e8:
50:3f:a5:77:37:f1:d0:10:34:b1:03:f2:07:55:a0:c3:dc:d7:
bd:7d:05:3d:76:e2:74:50:11:0e:37:49:38:18:4c:67:78:ee:
dc:99:ba:2b:fb:44:6e:08:ad:54:89:bd:9c:11:b2:da:0f:b6:
01:c7:38:9f:49:d6:3f:26:06:2d:21:60:08:f0:27:b0:02:ab:
47:98:32:b6:42:8d:3e:73:71:97:25:3b:33:16:d7:3c:ec:f2:
50:8f:a4:c8:23:a7:2f:6f:0d:7a:a0:e5:1d:5a:92:ae:e3:40:
ca:ae:74:78:d6:84:51:bb:0f:6b:ad:f3:4a:97:9c:3c:3f:cf:
23:a6:07:b4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZaXcfapdHWM/6PgLo5taYpMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw
YjVjN2MwHhcNMjUwNTAzMTgzOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjg4YjdhY2Y2Njc4NjJjMmIzZjRjMmFmNzgyZmZkOWVhYmVjOThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+CFlT3Hfcv+eJXrb89ljDmXir1/
LvTI90JRF1ogK0vsAKDLZAWVTuP7GDDvPl9SmBtuCFuXuJyS1nnUlkRIkk8f7O4k
Uz/xE1uk3X5cTzPGrhd+wi+RAEZzN3ogJMNk8R1hA95Vo6KzlOOxKDPQCK9WkcQu
1kkPbiGASxNWFGdlFtnoycQpFvN15QGYYhTTgV1SLkhC95iEyKNVnM79dednIeb9
w7TjwqBZbZzPLxpNabhzV2Sb5CjasCPb36dO8vCRZkp6PaWC7yxmuzG51uH5ddRZ
2MLdhOuuc2p9xOI01k5gO8eixKtAMCRfp/QjFnpINgtw+YRcF4u/uweLVwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPuIt6z2Z4YsKz9MKveC/9nqvsmNMB8GA1UdIwQY
MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt
MWY1NDMxZTJhNWFmLzEvMS00aTNyUFpuaGl3clAwd3E5NExfMmVxLXlZMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMGYvYmEwYmQzLWIzNjUtNDQ2MS04ZmZhLTFmNTQzMWUyYTVh
Zi8xLzFNNHI4QUFjMUREcEozLXdEdEdyNVJ3TFhIdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1uYTAN
BgkqhkiG9w0BAQsFAAOCAQEAI6/EE0MgMWMWgp9wIAVawj4UtIq8hbhq7QOkF+Y/
Chlul9BJaXtvj+1z2OnCf8s5I5l4Tycx92tH6czWFZwX4PV9NRaIlttGASe69GGb
xqOeAuYMYrZBT5ArkpCDdglsagqzMHWanHJkddzlNLV7DqtLm9K5zLOxLFqiVtro
UD+ldzfx0BA0sQPyB1Wgw9zXvX0FPXbidFARDjdJOBhMZ3ju3Jm6K/tEbgitVIm9
nBGy2g+2Acc4n0nWPyYGLSFgCPAnsAKrR5gytkKNPnNxlyU7MxbXPOzyUI+kyCOn
L28NeqDlHVqSruNAyq50eNaEUbsPa63zSpecPD/PI6YHtA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 08:29:54 2025 by rpki-client