Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/304Jx0-933KHhjKJcb2_yuS4U8o.roa
File: 304Jx0-933KHhjKJcb2_yuS4U8o.roa (raw, json)
Hash identifier: ZE4UvrtQmNqcH7QKw+Mfk0WQHX8arzBYFQGYHPbVR4I=
Subject key identifier: DF:4E:09:C7:4F:BD:DF:72:87:86:32:89:71:BD:BF:CA:E4:B8:53:CA
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0197A5D4B1342D62B528E8230C84419BF92E
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/304Jx0-933KHhjKJcb2_yuS4U8o.roa
Signing time: Wed 25 Jun 2025 06:44:29 +0000
ROA not before: Wed 25 Jun 2025 06:44:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.229.8.0/22 maxlen: 22
87.229.23.0/24 maxlen: 24
87.229.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jun 2025 06:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a5:d4:b1:34:2d:62:b5:28:e8:23:0c:84:41:9b:f9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 25 06:44:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df4e09c74fbddf728786328971bdbfcae4b853ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:2d:99:f9:19:19:06:df:c7:d0:16:a2:04:
25:8e:41:45:b1:41:7b:72:7d:ca:43:34:9b:21:72:
84:4d:e7:10:81:02:f4:81:40:8c:57:4c:fc:af:c6:
d3:39:de:4d:30:13:f4:5f:6c:d8:e5:fb:3a:f8:0d:
ab:69:3a:77:51:8e:9a:4e:d5:63:0d:49:93:4a:e3:
b9:a2:9f:de:af:70:31:f7:b4:2e:17:db:66:d2:61:
ac:d4:c3:a2:d3:6f:5f:ca:7d:29:cb:7f:60:8e:bd:
86:97:fa:da:ff:8d:de:7f:05:c8:0d:b1:28:b9:0c:
ab:c6:e4:82:14:18:b8:7e:f8:23:b8:6e:c3:77:4b:
90:76:2a:3e:62:dd:8f:3c:04:ea:b1:cb:9e:e3:db:
73:93:1f:a5:dc:da:2f:61:d3:ef:52:e2:58:43:5c:
fb:f8:0c:02:62:36:13:34:0f:fe:bf:5f:6e:df:4e:
60:df:c8:35:6a:e4:f5:c7:31:5a:34:c8:33:0b:db:
e9:ea:6c:83:f7:f6:15:bc:41:25:5f:c4:3e:0c:63:
3e:88:ef:6f:82:05:f3:fe:af:26:16:61:67:42:8f:
41:97:76:24:e5:54:81:62:8c:f1:d2:3b:02:92:71:
84:72:e2:1f:ca:45:86:2c:39:98:b1:5f:22:fd:f2:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4E:09:C7:4F:BD:DF:72:87:86:32:89:71:BD:BF:CA:E4:B8:53:CA
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/304Jx0-933KHhjKJcb2_yuS4U8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.8.0/22
87.229.23.0/24
87.229.44.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f5:20:18:80:c0:de:57:c8:b3:8a:36:ef:fe:08:77:88:e9:
8a:13:fe:56:e3:68:08:6d:a2:e4:5a:a7:73:36:8a:e2:3e:6a:
64:1f:3c:84:f6:f6:ef:36:d6:7d:5f:43:03:a2:6a:77:51:a8:
4c:9f:05:e8:22:41:28:99:42:8b:8b:9c:1d:5e:ab:59:84:f9:
4d:e2:5f:00:8f:8d:b9:0b:de:37:da:78:6e:28:ab:a4:c6:67:
1b:ce:28:04:f7:9d:cf:8c:49:1e:3a:b5:ea:29:5a:e0:5a:41:
9b:3a:72:9f:5e:09:39:3c:a7:40:45:1b:cf:11:2e:34:f8:e4:
df:63:da:02:91:e6:e6:1a:32:4d:12:f8:bc:56:51:87:db:cc:
d9:e9:f2:22:bc:44:91:b7:b9:18:7a:9b:6f:ed:36:6d:de:0c:
ab:ef:b3:bd:81:bb:59:f2:2e:af:08:95:bd:2c:4c:51:3d:94:
f2:9c:cb:63:34:22:c2:f3:76:9c:78:d4:45:f4:e0:89:81:d5:
dd:62:b3:4e:77:2c:ac:eb:0d:b3:90:61:82:13:6b:fc:7a:e2:
26:29:c2:6d:5a:91:6c:1e:cc:e8:6a:3b:d8:c2:90:9d:d5:2d:
5c:10:9e:67:e6:7a:bf:0d:9f:f9:c3:21:c6:74:81:a4:d7:52:
62:99:4e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:42:13 2025 by rpki-client