Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/epPynz2Q-ATk1WoM-cenYjV-ywo.roa
File: epPynz2Q-ATk1WoM-cenYjV-ywo.roa (raw, json)
Hash identifier: dgx0fugSAN5aHvmu0eOkLeJqDn8rDe8hvJB24SNgdq0=
Subject key identifier: 7A:93:F2:9F:3D:90:F8:04:E4:D5:6A:0C:F9:C7:A7:62:35:7E:CB:0A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194222012A828AC1A20D9C57D91BDB6E565
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/epPynz2Q-ATk1WoM-cenYjV-ywo.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213851
IP address blocks: 77.90.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 05:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:12:a8:28:ac:1a:20:d9:c5:7d:91:bd:b6:e5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a93f29f3d90f804e4d56a0cf9c7a762357ecb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:6e:55:8c:9d:55:5d:74:c7:86:57:76:99:
f9:8c:d5:e1:fd:37:9e:9e:00:fc:4d:06:8d:07:70:
ad:fc:cc:25:6e:16:40:ad:8a:19:41:8c:ec:b1:f3:
5a:96:e3:e4:95:bb:22:9f:24:ed:d4:6a:91:e6:00:
8a:35:cc:f6:cb:f4:4e:c5:be:46:bb:cc:71:0d:15:
91:e1:8e:32:43:37:31:96:88:77:a8:c4:5a:48:1a:
2e:ef:96:43:68:13:51:56:f1:39:c4:23:b0:90:42:
79:c2:20:53:03:25:a3:96:e1:6b:e3:10:e8:85:0a:
b6:c3:19:9f:4f:f3:88:3b:9f:7b:bd:a5:a5:15:95:
30:fd:cd:e2:b6:d0:1d:5a:e9:87:ac:ac:f9:0b:12:
a3:6b:ef:dc:d4:42:c0:68:cd:1e:82:6f:4f:50:f5:
15:ba:10:4d:5a:66:d0:51:ec:6d:23:21:99:b3:dd:
ba:96:c6:fa:f9:5a:26:ef:48:d9:4b:87:c2:2a:76:
4e:3f:98:0a:c0:9b:44:ec:d1:05:0a:6c:5b:75:28:
1d:cb:8d:f3:0b:3c:61:6a:99:20:d8:7c:6f:8f:95:
73:34:ac:45:f9:c9:f5:73:53:a5:b6:5a:ca:32:c5:
d9:59:82:87:df:45:35:68:3b:9b:e9:f7:51:71:52:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:93:F2:9F:3D:90:F8:04:E4:D5:6A:0C:F9:C7:A7:62:35:7E:CB:0A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/epPynz2Q-ATk1WoM-cenYjV-ywo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.30.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ec:a3:7d:aa:91:d7:26:b3:5f:d7:ff:cd:49:6e:ca:a8:43:
a7:37:67:88:2e:4a:3e:10:1b:e8:6e:85:71:b9:15:71:15:41:
12:cb:71:ca:d5:18:99:a8:5b:5c:cf:01:ba:44:68:2d:c1:35:
ea:fe:1b:9f:9c:0a:a4:49:c0:48:9a:ec:c0:27:62:c4:80:8f:
80:7c:25:14:c5:c7:72:7c:29:7a:7f:6d:ca:b3:ca:f0:da:e5:
cd:89:76:ef:54:03:28:a9:ea:08:f3:b1:68:a5:35:c5:e5:93:
3c:32:71:a0:1b:53:ba:61:8a:22:17:c9:06:0d:2a:b1:cb:95:
45:c6:7b:15:36:d6:b1:2a:d7:73:72:e0:26:b7:0f:1f:53:b9:
9b:bd:86:21:c3:85:7b:51:8e:33:c1:59:f9:3d:7c:4d:ef:bb:
c3:05:3b:16:80:ad:d2:c8:a6:3d:9d:b5:ab:d2:a2:01:0a:c6:
16:ae:12:5b:20:8d:41:75:6d:b7:29:0c:d5:08:28:a3:da:ff:
1d:72:b0:58:bb:2e:27:7d:2f:65:19:f0:3b:7d:f8:ac:98:b0:
f0:33:eb:f6:4a:83:a7:42:43:68:f7:e3:db:98:02:9d:d7:e0:
f9:cc:4c:d3:d6:93:23:37:66:2a:d0:8c:72:2c:e8:c4:f4:0b:
b4:5e:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:46:24 2025 by rpki-client