Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/97LKfseLZhVDDcl2h7BfWa73iWU.roa
File: 97LKfseLZhVDDcl2h7BfWa73iWU.roa (raw, json)
Hash identifier: LggWCjt4F9VZ51pAIIWFL7mt3g6Czzchu3RlzvDWzJw=
Subject key identifier: F7:B2:CA:7E:C7:8B:66:15:43:0D:C9:76:87:B0:5F:59:AE:F7:89:65
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 019687566D86BBB9C89DE39FA1EF2C7A357F
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/97LKfseLZhVDDcl2h7BfWa73iWU.roa
Signing time: Wed 30 Apr 2025 15:35:10 +0000
ROA not before: Wed 30 Apr 2025 15:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398464
IP address blocks: 77.247.116.0/22 maxlen: 22
195.64.122.0/24 maxlen: 24
2a10:d501::/32 maxlen: 32
2a10:d503::/32 maxlen: 32
2a10:d505::/32 maxlen: 32
2a14:2500::/29 maxlen: 29
2a14:2700::/29 maxlen: 29
2a14:2b00::/29 maxlen: 29
2a14:2d00::/29 maxlen: 29
2a14:2f00::/29 maxlen: 29
2a14:3300::/29 maxlen: 29
2a14:3500::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 01 May 2025 01:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:56:6d:86:bb:b9:c8:9d:e3:9f:a1:ef:2c:7a:35:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Apr 30 15:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7b2ca7ec78b6615430dc97687b05f59aef78965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:b1:be:74:d6:b6:9a:9b:75:8b:02:5e:cf:
08:a6:cd:89:61:54:a1:03:a1:ef:68:35:e6:21:d5:
92:21:0a:eb:a2:a5:fd:16:b8:d0:5f:05:fd:cc:53:
e4:9c:fa:e5:63:63:7c:19:a9:87:d6:30:44:62:34:
74:43:13:7a:b5:ae:e6:2c:31:ad:f7:96:31:77:bb:
3e:c6:ec:10:43:df:dd:33:31:2b:25:3f:f2:5e:70:
c2:d3:67:89:7e:91:1e:83:13:23:16:07:11:eb:18:
84:52:28:6d:54:ad:e0:2e:e4:db:f4:78:58:df:b4:
02:1d:85:0b:d4:fd:98:20:2a:f2:18:c9:b2:81:4e:
5d:8e:c3:51:7c:c1:c3:4a:5f:2b:3c:d1:72:30:43:
78:64:7e:bb:d2:e8:8f:03:b0:a8:11:c6:fa:65:04:
96:6e:48:4a:4e:a3:32:46:8f:56:f5:98:33:4b:c9:
d6:c5:2d:85:fe:ab:01:9c:ea:d0:fe:99:a9:6d:eb:
8b:27:fe:bb:8b:e8:7d:94:9a:d7:5e:c1:ca:57:3a:
5c:e2:3d:dc:1b:19:1f:38:e8:08:1b:2d:3f:39:1f:
be:67:1a:77:b3:aa:9c:9b:f6:14:ac:36:62:dc:15:
22:29:3e:09:7a:fc:cb:6d:ef:ea:61:0b:17:d4:24:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B2:CA:7E:C7:8B:66:15:43:0D:C9:76:87:B0:5F:59:AE:F7:89:65
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/97LKfseLZhVDDcl2h7BfWa73iWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.116.0/22
195.64.122.0/24
IPv6:
2a10:d501::/32
2a10:d503::/32
2a10:d505::/32
2a14:2500::/29
2a14:2700::/29
2a14:2b00::/29
2a14:2d00::/29
2a14:2f00::/29
2a14:3300::/29
2a14:3500::/29
Signature Algorithm: sha256WithRSAEncryption
6a:39:a2:10:47:48:13:f7:ab:ae:89:60:f1:0b:06:a3:68:9e:
75:17:2a:f5:ea:fa:87:5b:8d:bd:f7:c0:37:e1:e0:f2:ca:e6:
38:be:59:d3:1e:68:19:6a:5e:76:42:90:f0:43:a0:df:43:b1:
86:c2:17:12:df:f5:8b:1a:63:f1:fb:b8:d9:fb:2e:f9:16:e4:
96:b3:68:f4:7b:9f:23:27:ea:c6:ea:66:c5:d2:50:61:23:07:
39:a9:42:00:a6:0a:93:74:bf:f3:bd:52:4e:5b:2d:63:dd:5c:
de:30:05:ca:91:ce:ae:00:93:36:1a:9f:0d:19:4e:2d:91:be:
18:39:33:b1:95:a4:af:70:09:85:9c:95:d3:63:75:cd:a4:0a:
2f:cf:0d:91:d7:5d:3a:fe:f6:10:4b:da:a7:51:c2:af:b0:66:
14:de:08:43:62:f6:2d:34:44:ef:4b:b8:33:0f:0f:df:b3:f9:
e6:e2:8f:e1:39:ca:32:b0:8d:f5:cd:26:19:be:df:43:a0:2e:
25:e8:c5:df:b1:66:1f:93:5e:ce:23:8b:67:b4:c5:6c:3b:b5:
e7:6c:dd:d6:ff:99:b5:f3:14:c9:86:77:7f:05:17:14:b8:69:
f0:9a:df:4f:e5:da:ee:60:f2:76:4c:8d:03:d6:a5:cd:75:af:
6d:8f:12:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:48:18 2025 by rpki-client