Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gE_eccpxRC5J4EoTQ4KtlF8fUwc.roa
File: gE_eccpxRC5J4EoTQ4KtlF8fUwc.roa (raw, json)
Hash identifier: 6n7znmamvBfWRx7a3ERECzd7dmQLHhNQ/kFU9YAhPIo=
Subject key identifier: 80:4F:DE:71:CA:71:44:2E:49:E0:4A:13:43:82:AD:94:5F:1F:53:07
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194222018E860435A21394711B032ADDBCB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gE_eccpxRC5J4EoTQ4KtlF8fUwc.roa
Signing time: Wed 01 Jan 2025 13:48:36 +0000
ROA not before: Wed 01 Jan 2025 13:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214580
IP address blocks: 77.90.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 05:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:18:e8:60:43:5a:21:39:47:11:b0:32:ad:db:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=804fde71ca71442e49e04a134382ad945f1f5307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:83:1a:17:5b:60:16:59:79:40:a7:d1:dd:
c0:3e:d7:b2:b9:8f:6a:ab:5c:12:5a:4a:f3:6f:e9:
4d:f1:5a:ff:bd:99:e6:4f:6c:fe:97:b7:17:26:28:
b8:3d:31:a6:6f:34:5a:4a:53:01:ba:2e:3d:77:a4:
e8:ca:a7:9c:1d:35:55:75:8f:94:e7:f3:8d:37:d5:
03:67:3f:38:0c:df:f4:e3:d1:68:8a:da:4f:e3:61:
b7:a4:a0:35:bc:25:b8:4f:36:de:af:50:d5:e9:3a:
d1:e6:00:5e:66:64:c6:fd:a9:01:49:c9:8b:69:69:
b3:2b:6f:9d:e1:74:31:cf:25:6b:cd:39:dd:de:51:
d0:08:cf:bf:ca:cf:a2:4d:1a:df:e6:27:98:89:a3:
db:3a:9f:3b:c8:c2:2b:d6:06:35:7f:49:ff:c1:02:
65:08:ec:3c:64:3c:b6:92:3f:c3:8f:3d:72:ce:29:
95:ac:ef:54:f2:a8:c4:6b:f5:7b:b5:69:9c:80:36:
b5:2f:67:86:d7:30:e1:21:45:ca:ab:7d:19:7f:c2:
22:75:dc:ae:3a:00:e9:ce:90:1d:41:b5:65:6b:2f:
65:b3:9d:07:9c:d5:bd:6a:9c:b5:b0:58:f5:6c:df:
f2:02:09:20:0d:31:23:0c:e5:cb:29:5d:a3:2e:7b:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4F:DE:71:CA:71:44:2E:49:E0:4A:13:43:82:AD:94:5F:1F:53:07
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gE_eccpxRC5J4EoTQ4KtlF8fUwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e5:b4:bf:9e:0c:72:e0:21:a1:eb:2c:f8:e7:0b:2b:87:6b:
70:f0:3c:a5:f1:ba:59:da:68:ee:f7:44:a6:c7:e9:da:03:db:
3d:b3:94:01:cd:44:13:f8:5b:2d:ab:80:50:1d:bd:98:e9:ca:
c8:39:76:62:a2:ac:ad:b8:bf:0a:19:3c:16:d1:a4:72:fb:0a:
3a:c4:3d:22:e7:0a:6e:cf:12:fd:39:9f:fd:56:6d:95:f0:ec:
b6:0d:95:74:7a:3f:e9:ad:26:2a:d3:38:88:eb:07:80:b4:43:
3c:3d:99:9d:17:f0:52:82:d7:cc:3a:ae:18:94:5c:80:92:5a:
f2:f9:c0:f4:b0:22:fa:fc:eb:49:55:95:e1:24:6b:7b:20:69:
27:1a:52:cf:ec:65:f9:cf:4a:88:e1:5f:d9:b6:2d:3f:b0:b9:
09:eb:b6:f8:c0:55:c8:b4:1c:b9:70:90:f1:e1:35:54:9b:d3:
b6:35:da:e1:49:0b:1b:0d:36:69:a5:54:36:d6:10:92:d8:a2:
8d:d8:0a:03:59:d0:0c:1a:e3:1d:09:96:2b:20:dd:0e:9b:1c:
a4:28:f9:a2:22:3f:49:7f:71:cf:8b:63:ab:ad:a1:ad:ca:d9:
b0:1b:e9:45:4a:fd:b7:eb:25:e8:31:64:52:51:54:2a:ba:b9:
65:71:0e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:02 2025 by rpki-client