Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/Dixzas4-7WEMs7f44txX7RZM5ME.roa
File: Dixzas4-7WEMs7f44txX7RZM5ME.roa (raw, json)
Hash identifier: oAQnlq+v8OXy80jazzEYOw/8AYP40sf75d+XxUgyvx8=
Subject key identifier: 0E:2C:73:6A:CE:3E:ED:61:0C:B3:B7:F8:E2:DC:57:ED:16:4C:E4:C1
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019697AD79595645E4D73A1938589ADDC0D0
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/Dixzas4-7WEMs7f44txX7RZM5ME.roa
Signing time: Sat 03 May 2025 19:44:10 +0000
ROA not before: Sat 03 May 2025 19:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 77.110.96.0/24 maxlen: 24
77.110.98.0/24 maxlen: 24
77.110.99.0/24 maxlen: 24
77.110.100.0/24 maxlen: 24
77.110.101.0/24 maxlen: 24
77.110.102.0/24 maxlen: 24
77.110.103.0/24 maxlen: 24
77.110.104.0/24 maxlen: 24
77.110.105.0/24 maxlen: 24
77.110.106.0/24 maxlen: 24
77.110.107.0/24 maxlen: 24
77.110.108.0/24 maxlen: 24
77.110.109.0/24 maxlen: 24
77.110.110.0/24 maxlen: 24
77.110.111.0/24 maxlen: 24
77.110.114.0/24 maxlen: 24
77.110.115.0/24 maxlen: 24
77.110.116.0/24 maxlen: 24
77.110.117.0/24 maxlen: 24
77.110.118.0/24 maxlen: 24
77.110.119.0/24 maxlen: 24
77.110.120.0/24 maxlen: 24
77.110.121.0/24 maxlen: 24
77.110.122.0/24 maxlen: 24
77.110.123.0/24 maxlen: 24
77.110.124.0/24 maxlen: 24
77.110.125.0/24 maxlen: 24
77.110.126.0/24 maxlen: 24
77.110.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 May 2025 10:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:ad:79:59:56:45:e4:d7:3a:19:38:58:9a:dd:c0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: May 3 19:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e2c736ace3eed610cb3b7f8e2dc57ed164ce4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:22:d8:1a:e6:4e:24:1c:08:bb:16:d0:a3:
63:cc:b4:c6:e7:2e:e8:0a:54:82:59:42:97:fb:ba:
63:db:39:41:7d:eb:42:00:bb:0f:72:0f:f8:ff:67:
05:0c:04:48:1e:7c:04:fd:35:f8:8e:92:87:aa:34:
cf:bf:9b:16:87:de:7a:37:33:9b:b3:f1:b4:dc:ba:
00:63:24:48:1c:c6:03:4b:ab:af:81:78:f2:fd:c4:
d2:8e:10:e2:4d:41:d4:11:4d:9d:f8:91:4f:24:6b:
87:54:8a:14:13:81:cb:dc:51:b5:a1:98:d8:94:fe:
6b:27:81:99:81:51:0e:46:cb:5d:2a:76:0f:70:45:
5a:ce:73:8a:d1:53:76:60:7a:bd:8d:fe:61:eb:b0:
40:61:23:06:bf:dd:15:c4:13:d5:52:55:62:1e:92:
14:de:6c:a0:f4:eb:e8:45:1e:64:ac:e0:a1:d8:9c:
95:3c:fd:6f:d2:a5:1a:a9:75:f1:b4:61:aa:67:47:
68:da:49:95:8d:96:ec:81:40:d0:48:53:9c:dc:0d:
bb:f5:e8:2d:f5:d3:c0:46:cd:77:73:a0:92:ef:88:
f9:a1:03:c5:3a:61:82:5b:cb:5f:e5:e3:75:73:53:
cb:20:bf:da:d4:7e:a0:0b:bb:87:7e:37:ca:fc:05:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2C:73:6A:CE:3E:ED:61:0C:B3:B7:F8:E2:DC:57:ED:16:4C:E4:C1
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/Dixzas4-7WEMs7f44txX7RZM5ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.96.0/24
77.110.98.0-77.110.111.255
77.110.114.0-77.110.127.255
Signature Algorithm: sha256WithRSAEncryption
85:9a:18:b7:95:f8:f8:1e:43:b2:a0:98:61:ce:76:20:b0:5d:
20:8a:73:ca:91:d4:b9:c0:04:35:f0:a7:2d:35:82:9e:11:22:
85:a0:64:21:77:73:0c:9d:d4:8d:f3:f0:11:01:f7:37:1b:79:
7a:79:6f:80:b9:58:19:46:18:eb:34:b3:64:ad:bd:3a:d7:1d:
9b:15:99:25:2e:0e:64:18:7e:fb:a4:02:82:96:57:a8:c7:a0:
9c:15:51:dd:93:10:63:92:13:09:c1:d2:74:d5:c9:d6:62:81:
05:ce:4a:0c:f6:2d:c2:af:d3:a3:64:28:7b:4c:ff:22:46:f0:
03:cf:62:6f:c1:f9:8f:58:6b:f7:85:a5:d3:e4:e7:71:ee:66:
62:ca:d4:3c:17:76:96:a2:d0:42:1c:20:5c:8b:58:b9:1b:37:
b4:31:f3:88:e7:98:10:45:29:32:f3:0f:2e:a5:6d:05:14:19:
72:11:3a:cf:0b:96:b4:d1:80:c4:af:30:96:0f:5b:76:67:c1:
79:f7:8c:75:14:5f:43:62:21:72:47:59:96:be:2d:6f:40:da:
43:5c:80:26:81:24:16:19:a4:7a:a6:a6:e1:5e:83:6e:0b:ea:
14:dd:4d:f5:28:8d:f7:43:49:12:a6:cf:0c:d0:53:e7:ed:43:
6d:17:7c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:23:34 2025 by rpki-client