Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/B8gkN6F3Lj2K_N6uBVGZ_MO59Dc.roa
File: B8gkN6F3Lj2K_N6uBVGZ_MO59Dc.roa (raw, json)
Hash identifier: kpNfnhgvsl+tx7n0VUprnWmGek6cKOh2ggYKa7zAe30=
Subject key identifier: 07:C8:24:37:A1:77:2E:3D:8A:FC:DE:AE:05:51:99:FC:C3:B9:F4:37
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 01969773CB878C69F060CFAB75F99BEF602A
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/B8gkN6F3Lj2K_N6uBVGZ_MO59Dc.roa
Signing time: Sat 03 May 2025 18:41:10 +0000
ROA not before: Sat 03 May 2025 18:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 77.110.96.0/24 maxlen: 24
77.110.97.0/24 maxlen: 24
77.110.98.0/24 maxlen: 24
77.110.99.0/24 maxlen: 24
77.110.100.0/24 maxlen: 24
77.110.101.0/24 maxlen: 24
77.110.102.0/24 maxlen: 24
77.110.103.0/24 maxlen: 24
77.110.104.0/24 maxlen: 24
77.110.105.0/24 maxlen: 24
77.110.106.0/24 maxlen: 24
77.110.107.0/24 maxlen: 24
77.110.108.0/24 maxlen: 24
77.110.109.0/24 maxlen: 24
77.110.110.0/24 maxlen: 24
77.110.111.0/24 maxlen: 24
77.110.114.0/24 maxlen: 24
77.110.115.0/24 maxlen: 24
77.110.116.0/24 maxlen: 24
77.110.117.0/24 maxlen: 24
77.110.118.0/24 maxlen: 24
77.110.119.0/24 maxlen: 24
77.110.120.0/24 maxlen: 24
77.110.121.0/24 maxlen: 24
77.110.122.0/24 maxlen: 24
77.110.123.0/24 maxlen: 24
77.110.124.0/24 maxlen: 24
77.110.125.0/24 maxlen: 24
77.110.126.0/24 maxlen: 24
77.110.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 May 2025 19:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:73:cb:87:8c:69:f0:60:cf:ab:75:f9:9b:ef:60:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: May 3 18:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07c82437a1772e3d8afcdeae055199fcc3b9f437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:60:c5:8c:43:35:de:43:e0:03:00:8b:ea:
c4:05:6f:ea:31:5a:e6:93:b4:f5:33:5c:bf:49:b6:
b1:ab:5c:d3:a7:ad:06:0e:97:ff:06:05:87:72:ea:
97:28:59:80:ef:bd:45:29:7c:27:95:65:c7:6d:54:
15:06:ce:2e:63:4f:9c:22:84:aa:33:5a:6f:2e:da:
60:6a:cc:a4:2b:82:27:1f:10:fe:2e:eb:28:55:ad:
72:44:7a:5b:17:3c:4f:97:0e:2d:17:da:38:43:eb:
ce:1a:c3:93:b7:00:10:bf:71:8a:27:73:0b:9f:ae:
8e:c6:d8:b0:51:70:c6:92:e5:3a:14:9e:8c:d9:6e:
77:f4:d8:9d:7c:a2:83:bb:6d:37:74:3e:10:69:a2:
b2:ca:f6:77:9a:7b:fc:1d:e3:f4:5d:53:ab:58:45:
89:f4:2e:94:c1:39:a4:ca:d6:1c:67:1b:55:ce:84:
ab:7a:ba:2e:90:ef:f1:c6:4f:d4:ad:cb:1b:e8:0d:
c4:90:91:6e:6e:23:92:94:ae:5d:58:a6:f2:b3:21:
24:da:19:86:56:56:0b:09:4b:46:d9:f5:2e:e8:96:
24:3d:07:ba:d4:77:c9:88:7a:67:11:16:01:9b:2e:
60:27:09:f1:93:e8:d2:ef:b2:78:09:76:77:08:c1:
8f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C8:24:37:A1:77:2E:3D:8A:FC:DE:AE:05:51:99:FC:C3:B9:F4:37
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/B8gkN6F3Lj2K_N6uBVGZ_MO59Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.96.0/20
77.110.114.0-77.110.127.255
Signature Algorithm: sha256WithRSAEncryption
43:17:ea:81:85:8b:79:c1:be:9f:5c:72:1b:89:a0:fa:5b:f0:
35:97:5a:2d:a9:b0:f1:3e:dd:97:c3:a0:9c:63:29:94:cb:d0:
39:ce:3e:ff:89:23:3b:54:8d:4c:cb:13:1d:90:f1:14:85:a9:
93:4d:eb:b4:1f:7d:5e:d9:12:69:4e:a1:bb:0d:6f:61:82:81:
2e:6e:67:c9:7a:3a:ab:73:07:33:52:2e:dc:a3:72:2b:dd:52:
8b:20:e4:c6:34:ab:f2:8a:ee:2f:09:32:f9:97:b8:93:94:b6:
0a:83:1f:fa:a3:07:a7:46:08:6a:f9:1d:10:95:41:be:fe:58:
a5:a3:8a:3f:3d:10:39:84:f2:9b:1b:82:c8:e5:04:f3:d7:2b:
01:67:f8:5e:fe:bf:c1:45:10:d4:04:41:04:af:18:37:b3:6a:
78:aa:a5:69:c5:80:d0:85:11:e3:80:a1:32:1c:db:31:e9:ed:
f0:23:a0:1a:b1:12:14:73:2a:91:79:49:ff:27:36:97:b2:e6:
78:53:78:67:aa:a9:6d:96:71:0c:a0:7a:12:a8:d1:2e:61:14:
09:35:be:a4:c3:a6:36:f3:f3:22:9e:9b:39:93:7a:c7:97:36:
45:f2:4c:27:76:2b:72:ed:74:2a:7d:bf:cb:d8:09:9d:12:d6:
f2:55:37:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:15:54 2025 by rpki-client