Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9THRWYLmJ1LxHDPNs-DXZby1rls.roa
File: 9THRWYLmJ1LxHDPNs-DXZby1rls.roa (raw, json)
Hash identifier: PZzAvRF87ul1sNU/CKE+qphifjEFXvJZXpDRsL14VPU=
Subject key identifier: F5:31:D1:59:82:E6:27:52:F1:1C:33:CD:B3:E0:D7:65:BC:B5:AE:5B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019422201772830014E2DE2E3ACD3CBE56FA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9THRWYLmJ1LxHDPNs-DXZby1rls.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214537
IP address blocks: 77.90.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 05:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:17:72:83:00:14:e2:de:2e:3a:cd:3c:be:56:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f531d15982e62752f11c33cdb3e0d765bcb5ae5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:db:bb:27:b6:cc:ea:39:d5:a8:3e:3b:ef:
bd:00:49:a8:ee:83:99:f2:b0:53:3b:e2:59:27:97:
fa:ab:29:42:57:c5:f9:de:93:fa:0a:23:86:ca:46:
ca:32:33:1b:9d:0f:7b:b3:7c:8e:42:2e:0a:3d:57:
24:dd:ba:a9:5d:a3:2b:8a:48:df:6a:eb:dc:46:0d:
bb:96:46:13:00:4e:9a:54:24:d6:b2:25:dc:24:95:
c4:f0:0c:27:9f:ad:ad:35:c6:4d:e0:f1:86:c6:bc:
0b:ac:09:f6:f7:9c:40:a9:c0:51:60:8a:9a:4e:d2:
1b:53:6c:63:51:bb:29:d9:d2:ac:23:82:b2:1d:f7:
dd:28:cd:ef:5b:7a:4d:04:42:cb:86:33:78:4c:d1:
54:16:19:54:fd:d1:72:a7:7d:81:4a:97:a7:8b:c5:
14:41:9a:44:d5:a7:01:e0:0b:08:c5:9e:73:b3:91:
c5:a4:73:a2:bf:b4:4d:73:47:16:a5:7c:28:5d:e0:
95:d6:f4:24:4d:0f:95:57:27:59:c9:d3:ac:0b:07:
e1:24:a7:81:b9:73:5e:ca:7c:b2:1f:2e:28:cd:7d:
17:46:4a:14:a7:e2:6c:5a:90:69:88:ca:12:12:2a:
38:fa:8c:a3:f5:de:64:45:be:94:e2:b3:91:34:69:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:31:D1:59:82:E6:27:52:F1:1C:33:CD:B3:E0:D7:65:BC:B5:AE:5B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9THRWYLmJ1LxHDPNs-DXZby1rls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.44.0/24
Signature Algorithm: sha256WithRSAEncryption
26:25:04:cb:74:7b:55:25:16:aa:25:36:26:b9:e6:e8:20:67:
e5:b6:bf:5a:d4:b8:67:35:e4:38:a4:c8:63:3b:91:f2:30:dd:
ec:44:c5:20:ff:eb:6a:74:d4:d5:ec:31:03:d2:8c:26:6a:66:
92:2e:88:49:d9:49:3a:4c:ee:dc:52:14:1f:b2:fb:19:85:2d:
6e:3a:b0:6e:37:7d:fb:d3:d6:db:c8:15:f9:05:e5:cb:41:41:
73:b9:d0:1e:d3:74:39:a5:64:d3:13:2b:94:73:91:64:c5:32:
4e:f2:83:5e:93:d7:a3:56:64:3b:bf:f0:bb:6d:f1:41:8b:22:
9f:61:4b:2b:86:2c:7e:68:18:08:68:da:43:fc:37:78:97:76:
a9:ea:21:76:42:1d:10:81:ce:ce:16:67:0a:e8:61:17:ef:54:
ad:c5:80:56:ad:aa:f0:54:e1:b2:9f:05:e1:5c:92:25:7c:48:
d1:f3:3b:a0:34:37:bc:61:85:81:d3:29:94:cf:15:53:ee:6b:
f5:41:c5:63:34:e8:69:d1:21:ae:d9:26:01:23:28:c4:a9:37:
2d:86:bc:0a:a2:e1:3e:95:c7:7f:f4:df:ff:17:38:44:9d:52:
08:98:fa:9e:8b:89:27:89:2c:11:60:1e:d0:96:77:ff:ac:44:
e8:fe:f6:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIBdygwAU4t4uOs08vlb6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTAxMTM0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTMxZDE1OTgyZTYyNzUyZjExYzMzY2RiM2UwZDc2NWJjYjVhZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri3buye2zOo51ag+O++9AEmo7oOZ
8rBTO+JZJ5f6qylCV8X53pP6CiOGykbKMjMbnQ97s3yOQi4KPVck3bqpXaMrikjf
auvcRg27lkYTAE6aVCTWsiXcJJXE8Awnn62tNcZN4PGGxrwLrAn295xAqcBRYIqa
TtIbU2xjUbsp2dKsI4KyHffdKM3vW3pNBELLhjN4TNFUFhlU/dFyp32BSpeni8UU
QZpE1acB4AsIxZ5zs5HFpHOiv7RNc0cWpXwoXeCV1vQkTQ+VVydZydOsCwfhJKeB
uXNeynyyHy4ozX0XRkoUp+JsWpBpiMoSEio4+oyj9d5kRb6U4rORNGmsIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPUx0VmC5idS8RwzzbPg12W8ta5bMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvOVRIUldZTG1KMUx4SERQTnMtRFhaYnkxcmxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVosMA0G
CSqGSIb3DQEBCwUAA4IBAQAmJQTLdHtVJRaqJTYmueboIGfltr9a1LhnNeQ4pMhj
O5HyMN3sRMUg/+tqdNTV7DED0owmamaSLohJ2Uk6TO7cUhQfsvsZhS1uOrBuN337
09bbyBX5BeXLQUFzudAe03Q5pWTTEyuUc5FkxTJO8oNek9ejVmQ7v/C7bfFBiyKf
YUsrhix+aBgIaNpD/Dd4l3ap6iF2Qh0Qgc7OFmcK6GEX71StxYBWrarwVOGynwXh
XJIlfEjR8zugNDe8YYWB0ymUzxVT7mv1QcVjNOhp0SGu2SYBIyjEqTcthrwKouE+
lcd/9N//FzhEnVIImPqei4kniSwRYB7Qlnf/rETo/vY+
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:16:04 2025 by rpki-client