Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/tNoMAiBidOUu5eBv1pGmMRRby9g.roa
File: tNoMAiBidOUu5eBv1pGmMRRby9g.roa (raw, json)
Hash identifier: rY5luo2uMrf/J7Ebop/xg8lEKbLC7gPX+l0WPvhjFX0=
Subject key identifier: B4:DA:0C:02:20:62:74:E5:2E:E5:E0:6F:D6:91:A6:31:14:5B:CB:D8
Certificate issuer: /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial: 0196861D51300BB4DDAD5447A1B67EBEA2C0
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/tNoMAiBidOUu5eBv1pGmMRRby9g.roa
Signing time: Wed 30 Apr 2025 09:53:10 +0000
ROA not before: Wed 30 Apr 2025 09:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59835
IP address blocks: 77.80.128.0/17 maxlen: 17
77.80.253.0/24 maxlen: 24
77.80.254.0/24 maxlen: 24
77.80.255.0/24 maxlen: 24
185.69.168.0/22 maxlen: 24
2a05:2240::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 03 May 2025 18:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:1d:51:30:0b:b4:dd:ad:54:47:a1:b6:7e:be:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
Validity
Not Before: Apr 30 09:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4da0c02206274e52ee5e06fd691a631145bcbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:da:4e:25:ad:9d:9c:fb:09:dc:81:18:76:fb:
59:2c:a4:a3:ba:b8:ee:c2:99:32:9c:64:af:e7:76:
59:89:83:1a:d7:f7:11:a0:34:ef:12:c8:75:e4:84:
ad:7d:c4:6d:f3:8a:40:24:50:71:e1:1d:84:b6:04:
31:2d:fd:7b:c5:3c:fd:12:77:ab:cc:be:15:93:0d:
ca:67:57:49:52:ca:28:e2:89:cf:9b:08:fd:d5:e1:
0b:01:39:2d:f5:83:bf:9c:6d:6b:23:e5:84:2e:4c:
30:67:d9:31:c0:1f:9c:3d:36:02:db:44:49:a3:aa:
03:fa:61:e4:91:29:25:fc:22:db:b1:af:07:b6:66:
aa:c4:0f:e8:a1:8b:91:e0:ed:b4:75:b1:44:1e:5b:
1e:aa:a0:ca:ab:c2:64:9b:3e:cc:ec:94:e5:10:ad:
36:0d:f8:d6:0e:05:bd:b3:32:7b:69:4c:5e:18:ec:
13:1c:b3:00:43:35:3a:e0:82:21:3a:02:f2:d8:15:
a2:46:17:ef:48:0f:27:d2:68:6c:7e:d8:8a:f1:50:
42:05:32:4b:a2:ef:b7:a1:77:28:72:34:6d:77:5f:
05:a3:46:96:e8:67:f4:2f:44:63:ef:64:90:e2:ed:
53:e4:04:83:48:a2:89:66:ce:5e:4f:f7:7b:81:15:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DA:0C:02:20:62:74:E5:2E:E5:E0:6F:D6:91:A6:31:14:5B:CB:D8
X509v3 Authority Key Identifier:
keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/tNoMAiBidOUu5eBv1pGmMRRby9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.80.128.0/17
185.69.168.0/22
IPv6:
2a05:2240::/32
Signature Algorithm: sha256WithRSAEncryption
6c:12:b4:17:88:78:0b:54:a4:c3:78:f6:12:79:e9:cf:0c:fd:
6e:67:e6:68:66:b1:86:19:24:ed:1b:c2:ea:d1:d0:e4:48:fe:
6e:9b:ca:a4:39:80:67:5a:7c:2f:46:ab:f4:4c:4e:d9:86:52:
61:71:2e:4d:ec:fd:c9:12:f1:09:b6:f9:35:66:9e:7f:6e:18:
c1:5f:9a:74:05:fc:d7:8e:c9:7a:6b:42:29:f8:a4:c3:05:00:
37:d7:12:5f:ab:fe:57:f4:26:aa:e1:4e:c2:3c:f9:1d:2b:26:
a0:13:22:1e:7c:02:43:be:d0:cf:0a:3a:b6:ac:b0:aa:72:0b:
7c:4e:23:62:64:67:f7:7c:ca:cf:db:83:79:3c:26:63:9c:2f:
b1:1a:b9:80:8d:20:a2:62:e7:e5:da:8d:17:44:02:b1:34:b2:
82:4d:d3:4f:a6:aa:0f:1f:f7:0a:e2:01:04:bd:2b:c3:d2:51:
d4:81:10:15:cc:2d:58:ef:3d:df:71:94:70:8c:86:3d:17:d8:
f9:a9:76:b6:16:6a:c9:c7:c7:d6:82:e7:8a:10:6a:22:e8:01:
e1:41:3c:04:0b:fd:3d:ce:ab:81:e0:ab:96:42:cc:27:3c:bc:
5b:92:c9:00:6c:51:ae:7b:8d:c1:56:c7:c2:a8:fc:9a:07:2a:
43:d1:52:9c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZaGHVEwC7TdrVRHobZ+vqLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MmM4NDJkZmEyYTFlNzE0NzI3YmNjYjk1ZjE2NTM0NzEw
M2YyNzcwHhcNMjUwNDMwMDk1MzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGRhMGMwMjIwNjI3NGU1MmVlNWUwNmZkNjkxYTYzMTE0NWJjYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NpOJa2dnPsJ3IEYdvtZLKSjurju
wpkynGSv53ZZiYMa1/cRoDTvEsh15IStfcRt84pAJFBx4R2EtgQxLf17xTz9Ener
zL4Vkw3KZ1dJUsoo4onPmwj91eELATkt9YO/nG1rI+WELkwwZ9kxwB+cPTYC20RJ
o6oD+mHkkSkl/CLbsa8HtmaqxA/ooYuR4O20dbFEHlseqqDKq8Jkmz7M7JTlEK02
DfjWDgW9szJ7aUxeGOwTHLMAQzU64IIhOgLy2BWiRhfvSA8n0mhsftiK8VBCBTJL
ou+3oXcocjRtd18Fo0aW6Gf0L0Rj72SQ4u1T5ASDSKKJZs5eT/d7gRXn1QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLTaDAIgYnTlLuXgb9aRpjEUW8vYMB8GA1UdIwQY
MBaAFGgshC36Kh5xRye8y5XxZTRxA/J3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAt
MDhkNjViMzg2MzlkLzEvdE5vTUFpQmlkT1V1NWVCdjFwR21NUlJieTlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAtMDhkNjViMzg2Mzlk
LzEvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHTVCAAwQC
uUWoMA0EAgACMAcDBQAqBSJAMA0GCSqGSIb3DQEBCwUAA4IBAQBsErQXiHgLVKTD
ePYSeenPDP1uZ+ZoZrGGGSTtG8Lq0dDkSP5um8qkOYBnWnwvRqv0TE7ZhlJhcS5N
7P3JEvEJtvk1Zp5/bhjBX5p0BfzXjsl6a0Ip+KTDBQA31xJfq/5X9Caq4U7CPPkd
KyagEyIefAJDvtDPCjq2rLCqcgt8TiNiZGf3fMrP24N5PCZjnC+xGrmAjSCiYufl
2o0XRAKxNLKCTdNPpqoPH/cK4gEEvSvD0lHUgRAVzC1Y7z3fcZRwjIY9F9j5qXa2
FmrJx8fWgueKEGoi6AHhQTwEC/09zquB4KuWQswnPLxbkskAbFGue43BVsfCqPya
BypD0VKc
-----END CERTIFICATE-----
Generated at Sat May 10 02:25:52 2025 by rpki-client