Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235342e302f32342d3234203d3e20383334.roa
File: 37372e38332e3235342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: OBU2Su06PCoNuwF3fDn33RHLNsAPOA+v7XjN2fwvrgI=
Subject key identifier: 16:FD:0C:08:9A:F6:88:A3:BD:CF:CD:4C:44:53:05:DD:69:7E:47:A2
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 728E02136784376D914192B5EB4E361E3B7C5E18
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235342e302f32342d3234203d3e20383334.roa
Signing time: Mon 30 Jun 2025 07:25:42 +0000
ROA not before: Mon 30 Jun 2025 07:20:42 +0000
ROA not after: Mon 29 Jun 2026 07:25:42 +0000
asID: 834
IP address blocks: 77.83.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 12:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:8e:02:13:67:84:37:6d:91:41:92:b5:eb:4e:36:1e:3b:7c:5e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jun 30 07:20:42 2025 GMT
Not After : Jun 29 07:25:42 2026 GMT
Subject: CN=16FD0C089AF688A3BDCFCD4C445305DD697E47A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:f2:52:a8:fb:55:1e:35:73:ff:01:ce:8f:
f1:70:a2:71:40:99:84:a2:b6:41:39:b8:c8:d7:06:
40:1f:7d:b4:ad:ff:48:25:1e:1d:8e:64:56:c0:a1:
45:c5:74:2f:19:8b:57:07:13:32:fa:e5:36:63:73:
06:3e:a0:ca:4e:0b:06:f1:9a:8b:35:04:d8:b3:96:
8f:b1:5d:6b:8c:be:57:8a:2f:cc:af:5f:50:c5:78:
f9:44:8c:f2:49:9b:ae:9b:a0:76:88:d8:14:1f:44:
76:91:ce:2b:8f:09:04:91:93:70:8c:72:82:1e:61:
3b:db:fb:84:98:2f:29:cd:ed:8f:1f:b2:54:54:76:
c6:40:4b:8c:d9:2f:e5:ff:60:78:e9:c9:a0:b5:e1:
d9:3e:90:4e:40:b5:e5:e8:66:93:f5:b2:a5:01:e0:
f7:22:ae:22:9a:5a:e4:4f:5c:e0:83:47:07:c6:da:
ee:52:f7:17:37:a0:f6:ec:39:fa:29:7e:e1:be:77:
7d:92:24:be:66:e3:c2:a0:8b:f5:f5:14:37:33:8b:
69:fe:c4:68:81:75:83:7e:20:06:5f:a1:2f:20:d0:
c2:ad:99:fa:44:1e:49:c2:d3:b4:30:ec:2e:a2:17:
a3:a1:05:dd:a2:05:e4:01:59:9e:73:11:43:df:99:
56:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FD:0C:08:9A:F6:88:A3:BD:CF:CD:4C:44:53:05:DD:69:7E:47:A2
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.254.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6b:f1:1e:c1:c7:ba:5a:d6:79:0f:68:03:e3:d6:0f:56:6d:
74:97:29:44:63:17:bf:a5:af:08:19:a8:b2:c3:a0:42:25:19:
64:6b:cb:8f:8c:96:7c:49:af:d1:69:0d:bf:ad:0e:39:bb:86:
e4:be:3f:41:c0:97:eb:e7:22:65:8f:bf:6a:89:8d:de:43:03:
09:99:a2:08:28:10:e9:49:b6:da:01:c5:17:d8:81:17:dd:a2:
5e:13:0c:ed:4e:08:e7:6d:74:fa:67:74:01:d4:de:ca:ab:95:
24:27:ac:a5:6a:df:44:10:77:c1:ff:82:62:4f:e3:94:eb:7e:
d8:c3:ea:c7:e1:5a:77:10:ae:01:a3:5a:63:c0:4d:c3:6a:9c:
93:54:be:aa:e1:48:62:b2:fa:71:fb:60:61:c1:a1:1b:25:85:
ad:8d:b1:fc:21:44:93:e3:7f:4e:7d:13:7d:7c:2e:ad:23:c4:
3a:0b:60:2c:6d:67:1d:68:59:95:d0:c8:94:be:2d:83:1a:6c:
ab:b0:ae:23:fe:48:6b:e2:61:1c:c2:88:53:1a:3b:28:2a:aa:
6f:b5:5e:a4:b4:65:b5:25:ea:0b:b7:0d:85:ae:96:e6:27:a8:
07:51:b1:04:2f:b6:ed:8b:8a:ce:1d:4c:3c:08:49:9d:30:4e:
6d:ec:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:45:12 2025 by rpki-client