Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/eFeJSqoQ2fECCkDRMnJHD4BB5ys.roa
File: eFeJSqoQ2fECCkDRMnJHD4BB5ys.roa (raw, json)
Hash identifier: HcuXwwnPEdVXHnlPfCbriRwUdn6M+Bxb4rJyUF4JxwQ=
Subject key identifier: 78:57:89:4A:AA:10:D9:F1:02:0A:40:D1:32:72:47:0F:80:41:E7:2B
Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial: 01926D6D98FB21E9722782B7E401FE4E9E4C
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/eFeJSqoQ2fECCkDRMnJHD4BB5ys.roa
Signing time: Tue 08 Oct 2024 18:39:11 +0000
ROA not before: Tue 08 Oct 2024 18:39:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34120
IP address blocks: 77.90.73.0/24 maxlen: 24
77.90.100.0/23 maxlen: 24
77.90.112.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 19:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6d:6d:98:fb:21:e9:72:27:82:b7:e4:01:fe:4e:9e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Validity
Not Before: Oct 8 18:39:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7857894aaa10d9f1020a40d13272470f8041e72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:cc:1e:72:b7:fe:10:8c:8f:ab:78:81:50:
ef:93:a9:f0:54:47:a7:e8:b9:01:aa:0d:dc:ec:a5:
4f:a0:1c:a9:75:32:85:13:d9:18:ba:2b:70:be:52:
c7:78:2c:e8:b0:63:25:32:46:2e:f0:5d:09:b8:d7:
64:03:a5:22:6a:06:d9:67:06:08:87:c9:e9:f7:d4:
f8:71:73:84:97:56:e2:ca:88:5b:8f:3e:2a:c2:2d:
fd:90:6b:4e:5f:bc:80:87:09:98:ea:6a:4d:ab:cb:
7f:01:9b:44:04:ff:87:b1:8e:93:56:3f:8d:18:0a:
2b:6f:01:f2:85:cb:f7:4c:7e:07:22:36:c4:f0:7f:
71:11:4f:1f:c9:b1:3e:94:5a:f6:f3:39:37:c8:c4:
b3:93:0a:6f:c7:0e:73:ad:be:58:aa:31:84:8e:0a:
80:1c:1a:29:02:44:ed:27:a2:00:5d:23:bb:4a:f8:
8e:8e:d0:76:87:ed:5c:17:ca:40:9c:de:d4:9c:6d:
ed:f5:74:83:91:41:ee:e4:5a:17:05:3f:2a:af:a7:
71:45:d4:19:16:c5:dd:2c:cd:2d:a9:8d:2a:05:24:
36:d7:04:f2:ef:a8:4f:cb:95:4a:b1:a9:6f:3d:6f:
e7:96:f6:81:ec:a5:c6:65:ca:11:9f:8f:2c:67:bc:
5e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:57:89:4A:AA:10:D9:F1:02:0A:40:D1:32:72:47:0F:80:41:E7:2B
X509v3 Authority Key Identifier:
keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/eFeJSqoQ2fECCkDRMnJHD4BB5ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.73.0/24
77.90.100.0/23
77.90.112.0/20
Signature Algorithm: sha256WithRSAEncryption
53:1f:b1:23:53:6b:f3:c5:2c:d1:04:fb:9e:45:32:97:54:59:
f2:a0:d3:55:68:d2:8a:34:ab:29:74:7c:05:a3:22:5a:f4:d8:
92:18:31:e9:10:b7:33:83:f6:0a:9f:6a:81:b0:fb:86:63:18:
00:00:06:b4:8b:cd:40:07:14:7e:e7:2b:54:87:3a:6d:85:1c:
b3:50:0d:63:ce:7a:b5:9f:a2:b5:c6:12:71:7e:8a:5e:be:ee:
e7:ce:9a:4e:89:d7:42:c2:25:5d:a8:e4:bb:51:48:ab:0a:d5:
f6:90:b2:d4:97:4a:0b:8e:74:04:56:a4:3b:e2:59:4e:a3:0b:
89:9f:07:b6:99:7e:9f:3f:a4:9c:ea:96:ec:63:16:af:53:63:
af:19:8b:f0:8e:e8:5b:13:1c:61:26:64:5c:bb:58:2a:2c:5b:
58:cb:03:2e:00:ed:ba:17:93:cf:99:75:25:77:b2:28:27:52:
31:78:8b:2f:de:1f:64:33:c1:89:05:30:d3:5b:e9:30:54:e1:
18:c4:8f:99:f2:84:15:13:0d:3a:9c:6e:bf:b7:07:89:c4:7d:
44:ba:17:65:ce:9a:a4:b6:f2:68:d8:99:b5:eb:fe:86:5d:94:
e8:aa:6a:f9:c0:eb:76:2a:c8:c1:36:1f:4e:f8:08:64:b4:1c:
95:4d:0b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:38:48 2025 by rpki-client