Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/6PB-fzHXu9qX4EpA4J9v0xNTEY0.roa
File: 6PB-fzHXu9qX4EpA4J9v0xNTEY0.roa (raw, json)
Hash identifier: rXsxbVSCVmgcr3TtTL0NL6VhLU39pPPB5+V6SU4y8ls=
Subject key identifier: E8:F0:7E:7F:31:D7:BB:DA:97:E0:4A:40:E0:9F:6F:D3:13:53:11:8D
Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial: 01926D940CEC7C7684CD8A459C5D77CB261F
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/6PB-fzHXu9qX4EpA4J9v0xNTEY0.roa
Signing time: Tue 08 Oct 2024 19:21:12 +0000
ROA not before: Tue 08 Oct 2024 19:21:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43627
IP address blocks: 77.90.85.0/24 maxlen: 24
77.90.86.0/23 maxlen: 24
77.90.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6d:94:0c:ec:7c:76:84:cd:8a:45:9c:5d:77:cb:26:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Validity
Not Before: Oct 8 19:21:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8f07e7f31d7bbda97e04a40e09f6fd31353118d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:d3:cd:23:78:ba:1c:df:f7:18:76:da:3f:
3e:5c:ba:d7:07:58:0e:9c:37:a2:7d:7a:77:84:39:
e9:7f:01:f8:93:ee:61:11:4c:0a:e7:77:7a:00:d0:
21:eb:59:90:ae:bd:95:28:e2:f6:77:1f:a5:d0:02:
c0:fc:eb:c0:b4:5a:c9:91:ff:69:1b:1a:5a:fa:32:
ed:fc:b7:a1:df:68:ae:c0:32:84:51:8b:50:c1:6a:
6e:d0:e5:08:58:d3:6c:ce:54:59:fc:17:2d:21:07:
9f:1a:77:58:5b:77:79:72:05:09:03:58:1d:d8:bd:
29:05:83:9c:4f:d2:bd:3b:e5:5b:80:cb:90:ee:20:
94:d1:e1:17:1d:b5:f9:96:f0:8b:85:8f:df:a7:54:
29:9e:4b:de:cd:9e:e2:44:72:03:3d:f6:50:6e:aa:
ce:8a:81:bf:8a:7a:47:fa:df:d7:25:29:74:f1:fa:
be:9d:a8:85:a8:f9:05:47:5c:97:1f:e5:fe:8e:e6:
c1:ff:39:75:64:f3:55:3c:4c:94:ba:80:f0:27:5e:
1a:ba:e2:4d:35:11:8c:65:b8:6e:3b:b1:1f:33:2d:
90:95:ac:3a:90:af:52:e1:d7:88:71:0e:96:53:60:
a4:98:77:ee:d9:30:78:7a:72:14:62:2d:59:5d:01:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F0:7E:7F:31:D7:BB:DA:97:E0:4A:40:E0:9F:6F:D3:13:53:11:8D
X509v3 Authority Key Identifier:
keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/6PB-fzHXu9qX4EpA4J9v0xNTEY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.85.0-77.90.91.255
Signature Algorithm: sha256WithRSAEncryption
0c:75:f1:30:70:28:15:f2:c5:29:dd:9e:50:e4:80:7a:be:5f:
94:5e:31:87:c0:67:6f:1d:49:e7:85:73:55:39:fd:54:43:e3:
ab:83:3d:10:e7:8a:c1:c4:e6:2d:94:8a:a6:ec:3c:c5:b9:08:
b0:b4:af:c5:62:0d:21:ac:84:ab:c7:57:29:24:7c:45:8b:8f:
68:1c:29:95:7b:f1:5c:c0:03:5a:b2:91:02:ab:4f:f6:41:69:
07:c3:78:9b:4f:c4:34:a1:28:33:d2:af:2d:11:21:2f:e1:97:
03:a9:37:4f:6a:fb:30:7b:57:2e:54:15:f4:1a:1f:cb:14:b7:
7c:1e:bd:0f:f4:f1:e0:4d:b7:39:28:91:fa:26:d7:17:14:b7:
8e:f3:19:cd:7c:e2:f3:db:51:0f:d6:8b:9a:3b:03:95:bb:10:
c2:79:4f:6c:3c:ba:fe:99:bd:b1:6e:59:a9:cf:c7:0c:82:55:
6b:9c:45:e4:ce:da:6b:fd:3b:e9:ff:d1:40:29:ac:20:f4:71:
52:db:e0:0e:ea:74:10:ac:98:15:c1:0a:d4:2b:6e:5f:44:66:
3a:16:ff:c3:e6:d3:84:2a:71:88:05:4a:e1:80:99:96:16:88:
01:12:a1:a5:40:e8:55:6b:89:b8:7f:14:58:58:e3:ad:52:df:
e4:28:66:2f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZJtlAzsfHaEzYpFnF13yyYfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZDc5NGFjNjAxY2UyNTA1YjY1Zjk3NWE3ZDUxNmEyZjAw
YTViMzEwHhcNMjQxMDA4MTkyMTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGYwN2U3ZjMxZDdiYmRhOTdlMDRhNDBlMDlmNmZkMzEzNTMxMThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO/TzSN4uhzf9xh22j8+XLrXB1gO
nDeifXp3hDnpfwH4k+5hEUwK53d6ANAh61mQrr2VKOL2dx+l0ALA/OvAtFrJkf9p
Gxpa+jLt/Leh32iuwDKEUYtQwWpu0OUIWNNszlRZ/BctIQefGndYW3d5cgUJA1gd
2L0pBYOcT9K9O+VbgMuQ7iCU0eEXHbX5lvCLhY/fp1QpnkvezZ7iRHIDPfZQbqrO
ioG/inpH+t/XJSl08fq+naiFqPkFR1yXH+X+jubB/zl1ZPNVPEyUuoDwJ14auuJN
NRGMZbhuO7EfMy2Qlaw6kK9S4deIcQ6WU2CkmHfu2TB4enIUYi1ZXQGi/QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOjwfn8x17val+BKQOCfb9MTUxGNMB8GA1UdIwQY
MBaAFMrXlKxgHOJQW2X5dafVFqLwClsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMt
M2I5ODhmMTg4ZDkxLzEvNlBCLWZ6SFh1OXFYNEVwQTRKOXYweE5URVkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMtM2I5ODhmMTg4ZDkx
LzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABNWlUD
BAJNWlgwDQYJKoZIhvcNAQELBQADggEBAAx18TBwKBXyxSndnlDkgHq+X5ReMYfA
Z28dSeeFc1U5/VRD46uDPRDnisHE5i2UiqbsPMW5CLC0r8ViDSGshKvHVykkfEWL
j2gcKZV78VzAA1qykQKrT/ZBaQfDeJtPxDShKDPSry0RIS/hlwOpN09q+zB7Vy5U
FfQaH8sUt3wevQ/08eBNtzkokfom1xcUt47zGc184vPbUQ/Wi5o7A5W7EMJ5T2w8
uv6ZvbFuWanPxwyCVWucReTO2mv9O+n/0UAprCD0cVLb4A7qdBCsmBXBCtQrbl9E
ZjoW/8Pm04QqcYgFSuGAmZYWiAESoaVA6FVribh/FFhY461S3+QoZi8=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:34 2025 by rpki-client