Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/Kx7mlEfq9g7t-NnbEwe5TKjhwS0.roa
File: Kx7mlEfq9g7t-NnbEwe5TKjhwS0.roa (raw, json)
Hash identifier: pgyX6geZrVdsE6BKeevkFM/AFlH5qguKSWLLTrAlW1w=
Subject key identifier: 2B:1E:E6:94:47:EA:F6:0E:ED:F8:D9:DB:13:07:B9:4C:A8:E1:C1:2D
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 019683733F9D67E5401FBA4D5649E0A086BF
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/Kx7mlEfq9g7t-NnbEwe5TKjhwS0.roa
Signing time: Tue 29 Apr 2025 21:28:10 +0000
ROA not before: Tue 29 Apr 2025 21:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 77.110.96.0/24 maxlen: 24
77.110.97.0/24 maxlen: 24
77.110.98.0/24 maxlen: 24
77.110.99.0/24 maxlen: 24
77.110.100.0/24 maxlen: 24
77.110.101.0/24 maxlen: 24
77.110.102.0/24 maxlen: 24
77.110.103.0/24 maxlen: 24
77.110.104.0/24 maxlen: 24
77.110.105.0/24 maxlen: 24
77.110.106.0/24 maxlen: 24
77.110.107.0/24 maxlen: 24
77.110.108.0/24 maxlen: 24
77.110.109.0/24 maxlen: 24
77.110.110.0/24 maxlen: 24
77.110.111.0/24 maxlen: 24
77.110.112.0/24 maxlen: 24
77.110.113.0/24 maxlen: 24
77.110.114.0/24 maxlen: 24
77.110.115.0/24 maxlen: 24
77.110.116.0/24 maxlen: 24
77.110.117.0/24 maxlen: 24
77.110.118.0/24 maxlen: 24
77.110.119.0/24 maxlen: 24
77.110.120.0/24 maxlen: 24
77.110.121.0/24 maxlen: 24
77.110.122.0/24 maxlen: 24
77.110.123.0/24 maxlen: 24
77.110.124.0/24 maxlen: 24
77.110.125.0/24 maxlen: 24
77.110.126.0/24 maxlen: 24
77.110.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 May 2025 18:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:73:3f:9d:67:e5:40:1f:ba:4d:56:49:e0:a0:86:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Apr 29 21:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b1ee69447eaf60eedf8d9db1307b94ca8e1c12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:e0:be:4d:cd:bb:05:fb:6a:c1:a1:b8:ec:
47:e3:98:75:85:47:31:45:70:35:e1:d6:83:ea:8e:
df:1c:26:51:4f:1a:d9:d8:3e:3a:69:c2:34:11:12:
e9:f0:47:17:f0:27:15:09:23:be:aa:9d:41:41:90:
8b:1f:7b:59:37:a7:86:a1:1b:40:ef:85:11:c0:df:
2b:6d:56:c5:02:8d:6f:01:eb:4b:49:93:48:39:f1:
d3:7a:db:ee:5a:b4:3a:e7:50:38:6d:14:4b:57:fa:
fb:86:63:c0:e9:f9:97:bc:05:b6:c1:20:03:16:6f:
de:5a:07:26:4f:fe:38:24:1a:e0:cc:6d:1b:d9:2e:
28:2c:da:b7:59:0c:9f:ee:28:07:3f:a6:5e:a4:2f:
0c:4e:53:68:f6:b6:a6:70:d8:d0:2f:3c:a4:87:43:
a4:9f:11:21:e9:32:09:f9:38:70:25:08:f0:dd:d2:
40:3e:16:0b:e5:f8:c2:94:08:1d:2c:fc:5c:0f:80:
f2:ce:68:4a:3f:d1:89:ac:a4:60:87:10:d4:6f:93:
ab:31:64:fe:0a:de:cf:08:46:52:38:9d:df:d1:c3:
21:f8:0d:02:6a:70:3e:bb:1a:bf:77:df:6b:e1:89:
e1:97:a9:aa:7f:9c:75:33:d4:9b:a5:7a:f3:5e:73:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1E:E6:94:47:EA:F6:0E:ED:F8:D9:DB:13:07:B9:4C:A8:E1:C1:2D
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/Kx7mlEfq9g7t-NnbEwe5TKjhwS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.96.0/19
Signature Algorithm: sha256WithRSAEncryption
7c:d2:67:d4:3a:7d:f0:85:72:a5:7e:0c:67:a2:4c:19:e9:b6:
9a:bb:9f:71:7b:76:b7:94:03:a5:35:58:3c:30:2b:3f:d9:78:
46:16:dd:d4:5b:7c:a9:30:4b:c3:23:62:e7:b1:9b:40:d5:8e:
ca:50:70:c8:03:3c:73:9c:47:3b:1f:df:b1:96:de:cb:a3:1d:
ef:34:c3:29:74:31:be:c3:a2:32:de:a4:35:9e:fd:6c:b3:d2:
04:21:c1:2f:ee:4c:a7:91:ce:ef:87:7a:45:e5:09:dd:1e:cc:
62:13:cb:60:ef:90:51:3b:4e:42:62:97:b3:14:a4:be:39:cf:
f0:a0:a9:eb:10:40:1e:63:bb:21:08:23:3f:b8:2f:4b:42:e5:
bd:b3:bb:99:07:52:0e:5c:4a:f4:8a:6f:7d:48:23:8d:0d:c4:
3c:cd:91:97:d2:ef:34:da:2d:3f:45:2b:2a:6b:68:18:de:b4:
5b:1c:35:f3:85:53:03:53:98:d6:1d:f8:62:f4:f3:f4:f1:ca:
74:c8:5a:ba:49:e6:77:7a:82:00:c8:0d:0a:26:6d:65:d9:65:
16:55:cb:23:42:06:51:aa:d6:13:2d:c7:c2:75:79:11:d2:1d:
8e:14:29:59:69:a2:b5:65:9f:74:af:61:87:f5:42:d4:df:6f:
b8:3b:0b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:41:48 2025 by rpki-client