Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P15hU_nQfDl4IrfsncrHO7eSmgw.roa
File: P15hU_nQfDl4IrfsncrHO7eSmgw.roa (raw, json)
Hash identifier: 6bN3dutN5Ke4WA9RoWpYpnzxK5z0PrOhL2Y2qcow6Wk=
Subject key identifier: 3F:5E:61:53:F9:D0:7C:39:78:22:B7:EC:9D:CA:C7:3B:B7:92:9A:0C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195C92834CEEBF0AFF593D8AA8D65F30675
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P15hU_nQfDl4IrfsncrHO7eSmgw.roa
Signing time: Mon 24 Mar 2025 17:16:50 +0000
ROA not before: Mon 24 Mar 2025 17:16:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214556
IP address blocks: 77.90.27.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 12:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:28:34:ce:eb:f0:af:f5:93:d8:aa:8d:65:f3:06:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 24 17:16:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f5e6153f9d07c397822b7ec9dcac73bb7929a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:50:2c:ef:a1:c5:a0:23:26:0d:04:84:f4:
97:39:a5:7d:65:da:d9:b3:68:6f:35:9d:b7:ac:df:
5e:05:74:57:1d:19:f9:bb:cf:40:20:b9:9e:ef:22:
a6:d7:d7:3a:17:98:8e:8f:db:08:93:2d:a6:31:de:
98:47:74:12:8b:f6:ea:ac:7a:de:82:72:4b:be:a7:
df:f7:1e:b4:37:61:56:25:73:fa:e2:98:c9:4c:bc:
ce:bb:2a:9e:ea:d4:76:5e:b6:cc:09:97:54:07:a7:
cf:af:7b:8e:6f:8c:65:1c:1c:15:39:ab:a8:98:c0:
54:34:17:85:3e:ef:55:d9:28:32:5c:c2:73:0a:8b:
36:ca:c9:15:65:9a:77:30:64:6e:17:da:56:4e:ca:
fd:59:4f:a3:7f:c5:95:92:4a:2c:8a:00:52:f6:af:
24:2f:07:27:e3:19:a9:99:07:f4:2d:87:60:49:f8:
f2:7f:9e:a4:05:e1:a6:bd:80:9c:5c:83:19:bc:2e:
ee:77:70:3e:bf:64:32:16:9b:c4:45:aa:14:1f:8e:
53:df:65:86:16:05:9b:76:14:7f:d9:e0:5c:22:d7:
a2:6d:e4:87:df:b8:1c:6c:73:1d:cf:38:ed:f1:c9:
6e:f2:81:7e:71:c9:7a:34:6b:0d:26:a8:51:b7:04:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5E:61:53:F9:D0:7C:39:78:22:B7:EC:9D:CA:C7:3B:B7:92:9A:0C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P15hU_nQfDl4IrfsncrHO7eSmgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.27.0/24
77.90.47.0/24
Signature Algorithm: sha256WithRSAEncryption
97:2c:9c:cb:34:17:6b:5f:61:23:10:d1:3a:93:04:a4:e1:bd:
24:e7:02:af:21:01:09:37:a0:bb:9a:f2:6a:51:12:3d:8a:d3:
22:1c:dc:66:83:a6:9f:5b:e0:84:67:f2:fb:67:c6:fb:ef:49:
0e:14:04:9f:54:e9:df:d6:d8:85:a9:f5:63:a8:3a:fb:d3:af:
81:82:c5:f9:b4:d8:9e:33:b1:43:19:6f:b7:47:ee:7f:e1:21:
a1:b3:20:16:5b:a8:c5:fb:38:25:b6:1b:67:c4:16:84:f1:77:
58:2f:e9:57:af:2e:9a:10:44:e8:39:59:37:ff:83:58:0a:8a:
e4:a0:e7:18:f8:52:58:f3:af:e2:b1:ba:3f:79:78:16:6b:a8:
28:de:47:36:6d:38:00:3d:00:5d:8a:ab:d5:f1:7f:7a:26:fb:
04:42:6f:bb:35:a7:19:ea:8c:4f:9b:1d:b1:69:7d:5a:2a:90:
29:db:79:58:96:dd:b2:b5:73:b5:df:ae:56:22:43:e8:de:e4:
af:09:95:0c:7f:c8:8c:63:54:72:f6:cd:b7:21:5c:d1:15:e0:
d8:7e:9d:d8:1a:d5:e2:97:3a:20:53:19:9c:6a:c2:0c:c9:75:
46:53:31:25:e3:e6:a2:c4:d9:b5:7a:8a:50:b2:b8:17:2b:b0:
9e:ac:b1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:08:02 2025 by rpki-client