Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/710oSYdx1-NllZVBaT7RdxpZlUQ.roa
File: 710oSYdx1-NllZVBaT7RdxpZlUQ.roa (raw, json)
Hash identifier: Mcn9TSUsys85hRWh7Qe5OerGM8v4BEoeyr90HueIutk=
Subject key identifier: EF:5D:28:49:87:71:D7:E3:65:95:95:41:69:3E:D1:77:1A:59:95:44
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01977771374191697C92A1A5BD744CD0CD1A
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/710oSYdx1-NllZVBaT7RdxpZlUQ.roa
Signing time: Mon 16 Jun 2025 06:33:17 +0000
ROA not before: Mon 16 Jun 2025 06:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 79.172.208.0/24 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jun 2025 06:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:71:37:41:91:69:7c:92:a1:a5:bd:74:4c:d0:cd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 16 06:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef5d28498771d7e365959541693ed1771a599544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:8b:df:61:c0:7b:8c:af:c9:a2:0a:7f:0e:
19:83:2f:de:7d:93:46:82:23:a5:83:d3:2a:16:96:
6c:29:07:25:b3:78:93:57:64:49:55:3d:3f:c0:e7:
5b:10:44:75:6d:f2:47:07:b4:a1:70:02:f0:7e:ff:
61:10:66:34:46:6d:88:14:50:9c:7e:e9:03:99:2d:
6c:1d:a7:53:5b:9b:20:7e:f9:14:59:12:23:76:1a:
2a:1d:3f:94:3c:d5:d4:fc:e5:b8:64:d7:6b:74:5e:
32:7a:68:15:13:93:6b:2e:de:e9:de:b8:44:a2:c6:
0d:50:ea:a5:d0:52:e1:a6:72:07:d3:7d:9d:70:78:
10:4b:f2:3a:1e:a1:4e:58:d2:d8:7a:db:f9:7f:a2:
cb:44:b2:b3:db:ec:22:4c:85:92:2f:a4:fc:0a:95:
c0:bf:8d:c3:ab:7d:48:e1:e7:3f:63:19:42:f8:17:
bc:54:a7:f3:ff:a0:47:66:e3:75:79:a6:f4:b4:5d:
4a:06:f2:fb:41:94:4c:4b:bc:d8:72:4b:75:0a:03:
50:00:a2:8b:78:91:f1:ba:56:82:b3:9d:38:19:65:
40:f7:7a:00:06:75:f2:2b:d9:7e:67:23:2d:45:32:
b5:5d:bc:3b:14:5c:9d:36:25:4e:2c:c8:56:9d:f3:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5D:28:49:87:71:D7:E3:65:95:95:41:69:3E:D1:77:1A:59:95:44
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/710oSYdx1-NllZVBaT7RdxpZlUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.208.0/24
87.229.8.0/22
87.229.79.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b7:e4:79:1c:16:ad:70:71:f1:c0:d7:96:d8:4f:a2:2c:28:
6a:1b:30:f2:5a:26:d2:01:76:f4:a8:a8:a8:06:62:13:c3:74:
da:30:fa:45:c8:b5:ca:e7:9e:9e:21:63:38:4f:9f:c4:e9:fe:
c7:d3:bd:1b:b0:f1:37:9a:08:34:71:e2:ff:92:21:38:99:e0:
80:a2:cf:59:3a:3a:de:02:f4:9b:28:f2:e0:74:80:7a:9a:a1:
e1:b5:dd:32:68:ad:2e:7e:52:6b:66:dd:b6:fe:92:aa:72:9f:
7b:aa:07:09:8b:df:7b:d9:82:60:1f:7c:31:eb:9a:10:ff:00:
bf:69:0e:74:22:71:9d:be:45:21:ee:c4:f8:fc:7f:37:68:40:
eb:2d:05:90:5d:f8:6c:46:71:85:a3:e5:db:89:0e:75:29:27:
c1:28:3b:6a:e1:54:c7:e4:4e:01:2d:45:e5:cd:d4:b8:ae:20:
98:ec:8f:8a:87:46:10:0c:e1:5b:78:68:97:63:c0:5e:a6:5d:
8f:b5:4c:ae:44:14:8c:67:45:1c:a8:d1:20:28:26:40:f7:3b:
61:79:07:7c:d8:69:2d:74:3b:0e:6a:a6:ca:1d:09:b6:af:95:
eb:09:24:ae:a1:ea:2b:75:56:08:2c:2d:74:90:77:3f:d1:5d:
20:a9:41:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:50:37 2025 by rpki-client