Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/eI5x7A4iEqcTdRpdiigbgD47VUc.roa
File: eI5x7A4iEqcTdRpdiigbgD47VUc.roa (raw, json)
Hash identifier: oFW5zxrAzoMQayJRMK2xFh/pGmIvmfy+crdirVSNC+g=
Subject key identifier: 78:8E:71:EC:0E:22:12:A7:13:75:1A:5D:8A:28:1B:80:3E:3B:55:47
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 01969ABFE8E610CF024A860A22B21B1429A3
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/eI5x7A4iEqcTdRpdiigbgD47VUc.roa
Signing time: Sun 04 May 2025 10:03:10 +0000
ROA not before: Sun 04 May 2025 10:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 77.110.96.0/24 maxlen: 24
77.110.97.0/24 maxlen: 24
77.110.98.0/24 maxlen: 24
77.110.99.0/24 maxlen: 24
77.110.100.0/24 maxlen: 24
77.110.101.0/24 maxlen: 24
77.110.102.0/24 maxlen: 24
77.110.103.0/24 maxlen: 24
77.110.104.0/24 maxlen: 24
77.110.105.0/24 maxlen: 24
77.110.106.0/24 maxlen: 24
77.110.107.0/24 maxlen: 24
77.110.108.0/24 maxlen: 24
77.110.109.0/24 maxlen: 24
77.110.110.0/24 maxlen: 24
77.110.111.0/24 maxlen: 24
77.110.114.0/24 maxlen: 24
77.110.115.0/24 maxlen: 24
77.110.116.0/24 maxlen: 24
77.110.117.0/24 maxlen: 24
77.110.118.0/24 maxlen: 24
77.110.119.0/24 maxlen: 24
77.110.120.0/24 maxlen: 24
77.110.121.0/24 maxlen: 24
77.110.122.0/24 maxlen: 24
77.110.123.0/24 maxlen: 24
77.110.124.0/24 maxlen: 24
77.110.125.0/24 maxlen: 24
77.110.126.0/24 maxlen: 24
77.110.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 May 2025 11:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:bf:e8:e6:10:cf:02:4a:86:0a:22:b2:1b:14:29:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: May 4 10:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=788e71ec0e2212a713751a5d8a281b803e3b5547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:97:6f:61:d5:1b:60:e5:28:80:28:bd:71:
e4:5d:c1:cc:7d:19:c5:2c:99:78:1e:8d:8c:d7:a4:
c4:ba:54:a4:b7:dd:de:e8:15:6a:31:04:65:56:0c:
6c:c6:36:c6:09:5a:cd:97:cb:1f:a4:31:0f:be:64:
03:e4:29:f1:d4:3c:1e:96:71:1c:0a:17:aa:04:ac:
4a:0b:a0:67:9c:69:b4:18:c5:1c:37:14:7f:29:50:
6c:3d:d1:64:44:83:90:11:62:b0:b4:04:72:65:1f:
00:14:72:b2:17:e9:fd:7a:e3:73:3f:e3:b5:8c:b3:
e6:e0:d5:40:0b:7d:10:c6:26:26:83:18:e8:81:52:
52:77:1e:e6:f5:9b:68:1a:8e:0b:00:ac:88:be:89:
56:9a:98:ba:a7:4a:be:e6:16:e9:fd:67:d1:7b:bb:
36:c2:97:04:fd:26:9d:05:cb:4b:58:a6:25:4f:fb:
89:19:95:c9:51:2a:c5:7b:17:f7:3a:4b:c2:21:d9:
57:90:1a:ad:51:ff:2c:80:08:b7:b9:64:cb:a3:90:
79:fe:01:24:d2:41:36:1a:ce:61:a9:ca:96:00:a9:
c3:7d:c9:5e:ae:eb:a3:2f:4e:9e:b1:62:4d:f2:bf:
a2:9d:ee:53:9d:da:9a:f8:35:d4:31:a6:e8:42:ab:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8E:71:EC:0E:22:12:A7:13:75:1A:5D:8A:28:1B:80:3E:3B:55:47
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/eI5x7A4iEqcTdRpdiigbgD47VUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.96.0/20
77.110.114.0-77.110.127.255
Signature Algorithm: sha256WithRSAEncryption
85:29:31:bb:5e:16:3a:7a:07:3a:2e:86:57:45:8e:3e:c0:23:
e1:cc:d5:96:ab:6b:be:15:9a:9b:a3:3f:e3:05:24:61:8a:49:
6e:32:25:bc:f1:70:e5:0c:bc:93:49:62:fa:12:1a:9c:8e:3f:
4c:3c:6b:6e:ad:41:24:d9:fd:65:4b:f3:9c:56:6a:44:c3:c6:
2f:74:4a:00:eb:c5:29:df:4a:73:e1:d1:26:20:cd:ed:1c:2c:
71:20:47:e0:39:ee:9d:50:52:03:ce:32:4e:11:18:54:f7:98:
cb:75:9f:bc:f5:1d:d2:c9:90:ba:23:89:85:e1:13:99:e5:d6:
e3:e0:bd:f4:a9:6c:b2:45:5b:e6:9c:5f:e7:38:0b:fc:3c:34:
9b:9a:a0:a7:99:b4:82:40:c5:7e:86:66:2a:a6:12:b2:0d:3b:
de:98:d6:6b:2e:9f:8c:43:cf:f6:f1:f4:1e:61:25:49:d6:ac:
05:6c:78:9b:da:12:37:ec:10:52:e3:fb:a8:a2:58:ae:07:46:
dc:92:87:4f:69:32:fe:df:5a:44:cc:f8:63:0f:23:6e:6c:57:
61:fb:1f:d3:90:bb:4e:a7:08:e0:20:31:3d:83:75:53:2c:c3:
4b:0e:a2:3e:ad:c7:0f:31:15:c5:ae:06:92:39:e9:47:dc:8e:
03:87:ac:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:55:02 2025 by rpki-client