Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CkKQywMtlMglhE549V2Mf9n-oco.roa
File: CkKQywMtlMglhE549V2Mf9n-oco.roa (raw, json)
Hash identifier: YU+6P+UkDaXHIOr3VCKSgJ8Q7s5OO89S9HQw+x6Dpig=
Subject key identifier: 0A:42:90:CB:03:2D:94:C8:25:84:4E:78:F5:5D:8C:7F:D9:FE:A1:CA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019422201C93F7B3692D924F214CA9774071
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CkKQywMtlMglhE549V2Mf9n-oco.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215365
IP address blocks: 77.90.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 21:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1c:93:f7:b3:69:2d:92:4f:21:4c:a9:77:40:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a4290cb032d94c825844e78f55d8c7fd9fea1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:29:02:0d:9d:96:69:db:73:fd:5c:dd:c6:
e1:53:86:c3:36:55:14:1a:b1:dc:ec:99:1d:a6:18:
a2:8a:30:a2:ef:98:ff:4e:8d:8e:af:a2:b6:17:86:
9b:23:70:2e:54:9f:eb:a0:90:10:0a:99:0f:e2:9b:
24:df:e9:90:ac:0b:3d:a9:4b:1a:aa:ea:39:54:ae:
5c:17:21:6d:32:3d:40:25:9f:88:3d:b9:ae:f0:38:
3c:a4:32:b6:f6:dc:06:d6:3f:22:31:7b:63:c1:63:
0a:8f:fe:4c:aa:2d:f0:57:8e:49:5c:38:e9:9a:91:
74:62:70:a0:94:f8:29:85:55:8c:89:7b:10:06:17:
b8:7d:00:ed:c2:c7:37:5f:79:06:e3:72:e7:aa:69:
40:cb:c8:7a:44:f0:08:8f:45:84:71:2d:f3:f9:ef:
3a:86:3b:9a:27:df:7f:70:88:57:49:d3:97:20:05:
f0:3e:f6:14:72:b6:8c:51:ed:2f:e1:87:ae:9d:25:
9f:56:b9:f9:77:3c:38:7b:f8:82:6c:78:3b:e1:7a:
f0:1b:71:24:3b:1b:71:fb:f1:4c:df:8b:23:94:b5:
8a:e6:f1:b6:e6:39:59:a3:72:be:3f:d0:bd:e7:bd:
47:9d:fc:13:d9:42:e4:95:3e:a6:3d:e6:7a:98:07:
d4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:42:90:CB:03:2D:94:C8:25:84:4E:78:F5:5D:8C:7F:D9:FE:A1:CA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CkKQywMtlMglhE549V2Mf9n-oco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.60.0/24
Signature Algorithm: sha256WithRSAEncryption
25:7e:d6:3b:1f:33:7d:7f:cf:43:64:aa:cc:a7:16:88:63:fd:
ac:1f:47:83:09:dc:19:99:f1:09:2f:72:79:dd:7d:d0:fa:98:
fd:96:fb:17:0f:61:42:98:1b:ab:53:52:fb:3b:12:75:d4:2e:
78:c6:e4:16:77:25:c9:d2:12:51:f5:f5:fe:90:b1:6a:ea:e4:
4d:f7:e9:0f:bd:60:3e:29:56:7e:d9:62:23:92:7e:0b:99:84:
c3:2c:be:de:cc:fa:06:46:e7:61:49:d5:1d:b8:f3:21:dd:16:
6f:29:6d:f7:ca:4b:5a:e7:e0:4e:9d:c0:b1:21:aa:65:f6:a4:
d3:92:ee:a2:6f:00:c4:54:b2:5f:88:e1:d2:7a:7f:87:b7:49:
10:7c:76:15:6a:d6:ca:c9:a8:da:13:40:87:3b:17:ab:a7:49:
df:cd:32:e9:79:50:c2:4a:de:16:8d:8a:9b:e6:44:71:d4:4b:
02:40:4b:99:7a:85:97:dc:0d:2b:31:68:b5:a1:79:9d:39:0a:
ad:00:11:e9:b0:6d:72:a0:bd:89:d4:e4:74:5b:89:89:ee:21:
24:26:d8:05:0b:0a:ce:6d:b9:2a:5c:f3:54:62:77:5f:94:12:
b0:2b:57:7f:8c:80:e8:cd:7c:50:39:69:85:87:eb:73:57:e6:
d5:d7:90:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIByT97NpLZJPIUypd0BxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTAxMTM0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTQyOTBjYjAzMmQ5NGM4MjU4NDRlNzhmNTVkOGM3ZmQ5ZmVhMWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaApAg2dlmnbc/1c3cbhU4bDNlUU
GrHc7JkdphiiijCi75j/To2Or6K2F4abI3AuVJ/roJAQCpkP4psk3+mQrAs9qUsa
quo5VK5cFyFtMj1AJZ+IPbmu8Dg8pDK29twG1j8iMXtjwWMKj/5Mqi3wV45JXDjp
mpF0YnCglPgphVWMiXsQBhe4fQDtwsc3X3kG43LnqmlAy8h6RPAIj0WEcS3z+e86
hjuaJ99/cIhXSdOXIAXwPvYUcraMUe0v4YeunSWfVrn5dzw4e/iCbHg74XrwG3Ek
Oxtx+/FM34sjlLWK5vG25jlZo3K+P9C9571HnfwT2ULklT6mPeZ6mAfUqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFApCkMsDLZTIJYROePVdjH/Z/qHKMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvQ2tLUXl3TXRsTWdsaEU1NDlWMk1mOW4tb2NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVo8MA0G
CSqGSIb3DQEBCwUAA4IBAQAlftY7HzN9f89DZKrMpxaIY/2sH0eDCdwZmfEJL3J5
3X3Q+pj9lvsXD2FCmBurU1L7OxJ11C54xuQWdyXJ0hJR9fX+kLFq6uRN9+kPvWA+
KVZ+2WIjkn4LmYTDLL7ezPoGRudhSdUduPMh3RZvKW33ykta5+BOncCxIapl9qTT
ku6ibwDEVLJfiOHSen+Ht0kQfHYVatbKyajaE0CHOxerp0nfzTLpeVDCSt4WjYqb
5kRx1EsCQEuZeoWX3A0rMWi1oXmdOQqtABHpsG1yoL2J1OR0W4mJ7iEkJtgFCwrO
bbkqXPNUYndflBKwK1d/jIDozXxQOWmFh+tzV+bV15BC
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:59:37 2025 by rpki-client