Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IgfayKcjqqMJvor-BAre7f9EaJ8.roa
File: IgfayKcjqqMJvor-BAre7f9EaJ8.roa (raw, json)
Hash identifier: rQROzo82Dr+M73/rtNymuwFByz6ftPXH+65hRuwOqtM=
Subject key identifier: 22:07:DA:C8:A7:23:AA:A3:09:BE:8A:FE:04:0A:DE:ED:FF:44:68:9F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019536E8D4C4A050CF2D0DA4E4A2BCD8CA99
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IgfayKcjqqMJvor-BAre7f9EaJ8.roa
Signing time: Mon 24 Feb 2025 07:43:03 +0000
ROA not before: Mon 24 Feb 2025 07:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214771
IP address blocks: 77.90.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 05:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:36:e8:d4:c4:a0:50:cf:2d:0d:a4:e4:a2:bc:d8:ca:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 24 07:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2207dac8a723aaa309be8afe040adeedff44689f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:00:44:cd:e1:b2:f6:69:71:c9:64:0e:0a:41:
10:7a:ed:69:de:d6:0c:41:d1:59:5a:23:9b:f5:de:
cd:4d:6f:bb:7c:f9:e8:40:72:e2:44:c6:29:c3:3f:
99:a8:81:79:52:96:e6:42:54:84:92:2c:77:d6:27:
1d:00:1e:d3:ff:cf:6c:9a:36:57:69:69:70:d8:1a:
64:5a:56:bd:24:fa:33:19:1a:52:4d:37:4a:f8:f8:
dc:d3:33:b6:63:90:93:b1:b1:40:55:19:fa:ad:49:
d0:a2:99:2e:b7:f6:2c:d3:35:48:25:6f:8b:1b:60:
c6:5e:b6:c0:d9:47:b9:be:10:04:b0:ce:46:25:70:
ba:23:ab:18:51:68:53:d3:ef:0a:b4:be:8d:03:1a:
02:3f:fc:31:d2:17:ef:c0:fc:98:2e:fb:b0:e0:29:
77:c4:5a:e1:7b:70:8a:b7:b8:00:6f:3e:98:ec:37:
62:01:e3:69:ff:30:6f:0b:52:1e:a9:ba:47:b2:89:
b6:69:90:a6:07:9f:91:9e:0d:52:b0:89:b2:41:32:
de:19:0d:4f:de:ca:ec:ec:15:1a:57:ce:d3:52:0a:
f0:b7:b9:f5:43:bc:d3:5c:76:e5:5f:85:d9:a4:7a:
3e:48:d1:43:ec:c8:cd:a1:76:4d:34:a6:b9:49:bf:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:07:DA:C8:A7:23:AA:A3:09:BE:8A:FE:04:0A:DE:ED:FF:44:68:9F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IgfayKcjqqMJvor-BAre7f9EaJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.20.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e7:56:d2:61:a3:29:c2:15:eb:1a:df:3b:53:5f:b1:5f:04:
b9:1b:ae:3b:1f:aa:8d:0c:16:49:e0:d6:32:30:e7:d8:d0:b5:
b0:b3:51:f5:b4:50:36:17:5d:b2:f3:5a:59:83:2e:68:d6:bf:
b5:5e:89:ad:3f:c4:82:ee:2d:81:ba:a7:9e:a9:11:bd:66:24:
41:1a:b7:8e:23:1b:99:ef:33:13:3c:85:dd:45:f9:a8:5c:86:
81:26:59:21:07:8e:77:16:99:a3:3f:48:d4:48:78:af:ed:f7:
ed:fb:57:12:e0:0c:50:72:99:22:7e:3d:0b:b6:ec:84:ff:18:
3f:ec:66:55:97:ef:2d:30:56:41:3f:25:be:d8:08:78:f1:3b:
76:3c:1b:30:9c:f3:e0:ee:12:70:1a:8f:cb:fe:46:4a:19:40:
2c:0f:a2:cd:22:34:c8:56:21:f4:f6:6a:3a:01:f6:5f:11:95:
92:d1:39:8b:c6:69:24:f3:3d:a9:c1:aa:81:0f:ef:73:63:fe:
22:4d:12:50:3a:da:84:88:6c:c4:6a:14:e3:f5:07:9d:dd:64:
c6:2a:e1:bf:87:8a:a5:7b:86:af:9e:86:60:79:f6:51:16:39:
eb:4a:0d:b4:06:81:66:8e:45:64:20:d6:c5:f5:9a:7f:f2:73:
0a:79:cc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:43 2025 by rpki-client