Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZQ7SCws0q2YHcorqVd0MbyW9D5U.roa
File: ZQ7SCws0q2YHcorqVd0MbyW9D5U.roa (raw, json)
Hash identifier: Vup2BKqm2cK4KaYe8KLmkbjAVi9CMNpbJjc2fFaZUHM=
Subject key identifier: 65:0E:D2:0B:0B:34:AB:66:07:72:8A:EA:55:DD:0C:6F:25:BD:0F:95
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01957564441DEC8688581C8543FCCDDBF9EA
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZQ7SCws0q2YHcorqVd0MbyW9D5U.roa
Signing time: Sat 08 Mar 2025 10:54:20 +0000
ROA not before: Sat 08 Mar 2025 10:54:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 77.90.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 15:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:75:64:44:1d:ec:86:88:58:1c:85:43:fc:cd:db:f9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 8 10:54:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=650ed20b0b34ab6607728aea55dd0c6f25bd0f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:bb:1f:5a:e9:43:5d:55:9d:7a:77:27:28:
fe:1c:36:a7:de:71:bc:bd:be:cc:f7:45:8f:77:12:
ff:05:7f:f1:66:d0:f8:16:c2:99:7e:d9:e2:9d:02:
4a:93:4c:46:76:a5:f4:54:fd:0c:0b:c0:a2:89:19:
d0:34:8e:63:ba:9e:4b:74:b1:e7:73:5c:57:28:e4:
fe:28:d6:1b:bf:08:97:93:f6:e2:f2:16:ce:bd:32:
d4:82:c5:91:d1:f2:8c:11:43:44:fb:50:f5:65:49:
28:5d:eb:62:93:6b:50:02:6f:f5:f2:36:5b:4c:ae:
96:9c:d2:2a:fa:57:2e:b6:b7:6c:c9:1c:de:08:0d:
e7:c3:6b:0e:0a:c2:b9:58:4f:1e:66:08:b0:79:b9:
59:10:e8:e5:b3:27:ac:d5:38:c6:f7:8c:30:bc:e2:
ad:56:a6:08:05:8f:4f:f1:23:ed:57:33:6e:34:d4:
db:2b:3e:cb:3a:a1:24:72:90:b2:3a:06:30:e6:8b:
1e:cf:25:82:ff:a6:72:ae:2e:39:0b:93:e6:1a:1d:
91:14:13:3c:2d:1a:91:70:69:bf:18:d2:74:2d:85:
c8:73:ab:77:a5:a9:1c:65:93:48:c1:0c:a9:14:66:
19:7d:27:66:9d:7d:ac:38:51:91:41:6c:67:d8:c6:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0E:D2:0B:0B:34:AB:66:07:72:8A:EA:55:DD:0C:6F:25:BD:0F:95
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZQ7SCws0q2YHcorqVd0MbyW9D5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.178.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d3:af:d9:d8:7f:aa:e8:52:49:66:89:42:cd:10:06:a3:e1:
70:56:4c:e9:57:87:a5:6c:8f:51:7f:a8:44:ad:b1:a0:11:70:
77:aa:c5:34:7b:58:e7:75:f8:7e:88:6f:86:69:27:63:05:3c:
a1:28:21:00:d3:e9:d4:d9:d0:60:59:2f:1f:2d:da:97:82:f1:
40:25:8d:e6:7e:72:5d:e7:e9:4c:ab:78:90:da:33:b6:87:71:
ec:d2:59:1f:6e:d8:05:f0:03:e8:0f:96:08:7e:cf:ae:81:81:
11:64:cd:e3:f2:9a:75:af:24:25:5a:e1:41:d3:0d:46:c3:c9:
c1:3c:fa:75:4a:db:8b:4d:24:c8:19:0a:d6:a7:8e:1a:07:36:
87:6e:30:c1:4f:cd:66:29:4a:bb:39:d9:e2:e2:b4:8e:78:45:
93:f9:dd:84:73:a5:92:d3:b1:7d:51:72:ad:50:db:4f:1b:4e:
19:e2:28:a6:72:26:f5:66:19:34:d9:31:92:01:f9:f5:42:42:
65:5c:c9:4c:50:2d:8f:0e:e1:3a:3c:3d:7f:14:89:a5:86:d5:
0c:19:0e:f6:41:9c:b8:50:af:35:56:6f:a5:46:bc:d0:f7:ad:
e1:c2:7d:55:23:4f:fc:35:ad:1f:86:0b:8f:e3:20:70:2f:91:
2b:97:97:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:44 2025 by rpki-client