Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/gMdD_VXSyo94G-BnLblB_ugIGAE.roa
File: gMdD_VXSyo94G-BnLblB_ugIGAE.roa (raw, json)
Hash identifier: 9nCb51TSQbfXDAKCN53dfxa767DQLXFXaeqP+pGISx0=
Subject key identifier: 80:C7:43:FD:55:D2:CA:8F:78:1B:E0:67:2D:B9:41:FE:E8:08:18:01
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01966B8CC9AB90B17E57171365F6B41946BD
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/gMdD_VXSyo94G-BnLblB_ugIGAE.roa
Signing time: Fri 25 Apr 2025 06:05:10 +0000
ROA not before: Fri 25 Apr 2025 06:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 77.242.146.0/23 maxlen: 24
83.137.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 06:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:8c:c9:ab:90:b1:7e:57:17:13:65:f6:b4:19:46:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 25 06:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80c743fd55d2ca8f781be0672db941fee8081801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:3c:cd:28:55:ea:b5:48:4b:f2:02:2c:93:
fc:1b:76:4b:d4:aa:88:6a:ca:1f:33:28:e7:18:ef:
f4:47:b3:9b:57:9d:ef:f7:36:ab:ed:d3:d8:11:25:
c4:ed:e9:7b:80:d2:66:67:c4:b1:b5:27:12:3e:fd:
68:e7:01:06:00:f2:e9:60:d3:d7:ce:2b:ba:1d:ec:
0e:91:f0:b7:df:61:3e:f2:07:0e:2b:a4:17:aa:43:
71:74:57:31:9c:bd:aa:93:3b:9e:09:14:2b:00:01:
7e:30:24:24:4d:6a:b2:d3:77:c9:f9:ff:fc:c0:5b:
b6:c0:e1:31:5c:07:4d:73:6b:14:2f:a1:59:bb:cd:
c6:16:36:9c:d7:46:40:d0:08:a8:db:50:0c:07:6f:
e4:23:48:b5:d5:c8:e1:27:53:f6:9d:eb:2c:9c:35:
3f:38:df:4f:74:2b:db:f8:6c:70:0a:3b:6e:6c:ee:
3a:90:aa:6e:88:aa:4d:a4:7e:2d:55:c5:a8:a1:6a:
c5:59:ab:00:f4:59:2a:d0:03:68:f6:6d:44:2f:e8:
10:30:f9:01:94:93:33:03:2e:d9:a9:4c:3e:08:c8:
44:8b:a5:09:85:3e:6d:f1:d1:d1:10:84:f2:74:f2:
b5:db:15:82:fc:30:e7:f6:4e:55:4a:ab:9d:8e:d0:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C7:43:FD:55:D2:CA:8F:78:1B:E0:67:2D:B9:41:FE:E8:08:18:01
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/gMdD_VXSyo94G-BnLblB_ugIGAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.146.0/23
83.137.154.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:0c:1d:7a:36:93:ca:37:58:0b:6b:aa:23:fa:66:7f:59:ec:
26:78:be:2b:1f:2a:b4:13:b1:b9:e4:c9:ed:dc:78:90:e1:43:
b8:f6:80:e4:2f:09:08:0d:d0:8d:7d:5f:2e:54:b7:a5:0b:ef:
be:32:db:cf:93:5d:c4:19:c7:d9:d6:be:35:6a:94:dd:16:ef:
50:e7:66:55:46:d2:f9:ad:25:3d:16:08:e0:16:6f:e5:f7:fe:
53:e2:5e:18:80:f6:38:26:a1:70:1f:96:1c:60:16:4a:43:c5:
e7:29:69:e4:dc:2b:60:5f:27:3f:39:c0:47:36:2e:d2:59:e0:
2c:8f:f9:1f:2d:c6:ab:1a:71:74:28:c0:76:b0:4f:72:0b:bc:
64:1b:1f:22:57:b0:b1:63:80:69:72:1b:a8:be:cd:8c:aa:42:
8f:e1:65:07:ce:0b:89:4e:26:ee:0b:d4:5f:5b:4b:83:01:10:
b4:3e:c9:b6:fc:66:32:d7:ac:06:93:17:70:97:e6:f2:a6:c3:
b6:b0:fa:76:bf:53:ef:1a:b0:57:b3:ef:38:43:9f:bb:2a:5a:
b6:9e:04:0b:4a:cf:9b:7f:47:04:26:86:32:dd:b6:5d:2f:c4:
e1:bd:74:7e:2d:33:1e:45:dc:92:a9:43:f2:88:6a:b3:8a:bd:
d6:eb:15:b9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZZrjMmrkLF+VxcTZfa0GUa9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjUwNDI1MDYwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGM3NDNmZDU1ZDJjYThmNzgxYmUwNjcyZGI5NDFmZWU4MDgxODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5t08zShV6rVIS/ICLJP8G3ZL1KqI
asofMyjnGO/0R7ObV53v9zar7dPYESXE7el7gNJmZ8SxtScSPv1o5wEGAPLpYNPX
ziu6HewOkfC332E+8gcOK6QXqkNxdFcxnL2qkzueCRQrAAF+MCQkTWqy03fJ+f/8
wFu2wOExXAdNc2sUL6FZu83GFjac10ZA0Aio21AMB2/kI0i11cjhJ1P2nessnDU/
ON9PdCvb+GxwCjtubO46kKpuiKpNpH4tVcWooWrFWasA9Fkq0ANo9m1EL+gQMPkB
lJMzAy7ZqUw+CMhEi6UJhT5t8dHREITydPK12xWC/DDn9k5VSqudjtBmGQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIDHQ/1V0sqPeBvgZy25Qf7oCBgBMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvZ01kRF9WWFN5bzk0Ry1CbkxibEJfdWdJR0FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTfKSAwQA
U4maMA0GCSqGSIb3DQEBCwUAA4IBAQAuDB16NpPKN1gLa6oj+mZ/WewmeL4rHyq0
E7G55Mnt3HiQ4UO49oDkLwkIDdCNfV8uVLelC+++MtvPk13EGcfZ1r41apTdFu9Q
52ZVRtL5rSU9FgjgFm/l9/5T4l4YgPY4JqFwH5YcYBZKQ8XnKWnk3CtgXyc/OcBH
Ni7SWeAsj/kfLcarGnF0KMB2sE9yC7xkGx8iV7CxY4Bpchuovs2MqkKP4WUHzguJ
TibuC9RfW0uDARC0Psm2/GYy16wGkxdwl+bypsO2sPp2v1PvGrBXs+84Q5+7Klq2
ngQLSs+bf0cEJoYy3bZdL8ThvXR+LTMeRdySqUPyiGqzir3W6xW5
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:52:25 2025 by rpki-client