Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7E2ENyHZDa4F05VtfT_i-_Y0mmY.roa
File: 7E2ENyHZDa4F05VtfT_i-_Y0mmY.roa (raw, json)
Hash identifier: 2OwVDvf22dp+n9jUgRHwb8YSOk52jHl07xpFsumTIug=
Subject key identifier: EC:4D:84:37:21:D9:0D:AE:05:D3:95:6D:7D:3F:E2:FB:F6:34:9A:66
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0197F506BC553C99B23F3E981D28C4C8D277
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7E2ENyHZDa4F05VtfT_i-_Y0mmY.roa
Signing time: Thu 10 Jul 2025 15:49:08 +0000
ROA not before: Thu 10 Jul 2025 15:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 79.172.200.0/23 maxlen: 24
79.172.250.0/23 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.23.0/24 maxlen: 24
87.229.97.0/24 maxlen: 24
87.229.108.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Jul 2025 08:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f5:06:bc:55:3c:99:b2:3f:3e:98:1d:28:c4:c8:d2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 10 15:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec4d843721d90dae05d3956d7d3fe2fbf6349a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:8d:aa:20:27:7b:bf:9c:86:3d:6f:20:b2:
dc:24:c8:dc:52:79:8c:a3:d6:9e:39:cf:b0:9a:9a:
68:92:c4:7d:90:33:a9:a6:3d:67:e9:15:ac:cf:a8:
6f:0c:98:37:80:f7:4f:af:16:fe:ac:d1:e1:46:53:
38:aa:10:8e:83:c4:fc:11:1c:2f:d4:5d:47:2a:e2:
0c:79:43:c0:1d:d1:7f:cc:66:23:27:0e:39:fa:4a:
8c:bf:96:ca:71:80:d7:b3:bd:78:ba:74:7c:b8:d5:
75:09:a7:f4:91:b3:ed:2d:a8:6a:cd:af:66:d1:f2:
09:57:fd:c8:9d:f9:06:e0:c2:0c:cd:21:58:b6:20:
db:6a:f2:9b:60:91:9a:d7:c1:d6:7a:3c:ad:11:b0:
fc:0c:8b:cc:04:6f:fb:e9:cc:aa:d2:7e:88:fb:06:
4c:09:d4:02:a4:94:3f:7f:e2:55:42:aa:b4:52:6e:
5a:29:41:1d:80:61:28:71:67:f9:7e:e8:a6:58:7b:
df:c1:21:dd:d7:18:77:fa:54:ec:d9:6f:10:8a:fd:
ed:28:e1:c3:23:a8:1d:f0:5e:e9:2d:8f:ec:f3:ee:
42:d7:40:c6:c8:af:e7:02:75:5b:42:ab:6a:24:09:
b9:52:87:c1:ae:f9:45:73:8e:52:1a:2b:1d:84:17:
38:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4D:84:37:21:D9:0D:AE:05:D3:95:6D:7D:3F:E2:FB:F6:34:9A:66
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7E2ENyHZDa4F05VtfT_i-_Y0mmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/23
79.172.250.0/23
87.229.8.0/22
87.229.23.0/24
87.229.97.0/24
87.229.108.0/24
87.229.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:52:43:df:d0:02:38:ba:28:d0:0f:63:bd:d9:03:0c:95:1b:
8d:48:ba:12:7c:f8:0a:dd:19:7f:0a:89:69:c1:e5:11:9f:86:
d6:3c:08:67:14:24:7a:fa:29:ba:24:b5:ee:5a:b9:88:1f:a1:
f1:08:d7:1d:17:d2:58:d5:fd:b1:aa:d9:99:71:33:df:a9:71:
df:03:7a:18:53:f0:6d:77:fc:05:a0:96:62:a8:01:74:49:43:
a0:27:9e:a4:35:7c:4c:00:e2:db:ae:0d:90:4a:e2:f5:c6:04:
f7:f2:31:af:4b:ff:77:ad:69:cc:6e:24:f6:43:ba:0a:7f:c2:
f4:77:5e:b4:43:3f:bc:d6:d9:af:43:67:70:8b:6b:5d:93:ce:
5c:e4:e4:03:7c:d7:be:28:9f:b6:e7:21:58:af:2d:9c:20:64:
90:9c:77:ca:20:78:6f:60:e9:13:5c:14:02:e9:53:98:39:d7:
e6:22:da:49:5f:bf:20:d3:57:37:55:ca:5a:5b:19:dd:b1:36:
b5:8c:3c:f8:b1:c7:f8:3c:5f:f7:19:07:a6:95:ce:f9:52:ee:
50:88:9a:6a:5b:c8:9b:7b:7c:5f:37:e0:ec:bd:c8:24:25:32:
f0:1e:c5:86:c7:dc:b1:cf:64:e4:38:de:b1:3e:43:13:51:e5:
2d:a8:d1:5a
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZf1BrxVPJmyPz6YHSjEyNJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwNzEwMTU0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzRkODQzNzIxZDkwZGFlMDVkMzk1NmQ3ZDNmZTJmYmY2MzQ5YTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNGNqiAne7+chj1vILLcJMjcUnmM
o9aeOc+wmppoksR9kDOppj1n6RWsz6hvDJg3gPdPrxb+rNHhRlM4qhCOg8T8ERwv
1F1HKuIMeUPAHdF/zGYjJw45+kqMv5bKcYDXs714unR8uNV1Caf0kbPtLahqza9m
0fIJV/3InfkG4MIMzSFYtiDbavKbYJGa18HWejytEbD8DIvMBG/76cyq0n6I+wZM
CdQCpJQ/f+JVQqq0Um5aKUEdgGEocWf5fuimWHvfwSHd1xh3+lTs2W8Qiv3tKOHD
I6gd8F7pLY/s8+5C10DGyK/nAnVbQqtqJAm5UofBrvlFc45SGisdhBc4vQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFOxNhDch2Q2uBdOVbX0/4vv2NJpmMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvN0UyRU55SFpEYTRGMDVWdGZUX2ktX1kwbW1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBT6zIAwQB
T6z6AwQCV+UIAwQAV+UXAwQAV+VhAwQAV+VsAwQAV+VwMA0GCSqGSIb3DQEBCwUA
A4IBAQCLUkPf0AI4uijQD2O92QMMlRuNSLoSfPgK3Rl/ColpweURn4bWPAhnFCR6
+im6JLXuWrmIH6HxCNcdF9JY1f2xqtmZcTPfqXHfA3oYU/Btd/wFoJZiqAF0SUOg
J56kNXxMAOLbrg2QSuL1xgT38jGvS/93rWnMbiT2Q7oKf8L0d160Qz+81tmvQ2dw
i2tdk85c5OQDfNe+KJ+25yFYry2cIGSQnHfKIHhvYOkTXBQC6VOYOdfmItpJX78g
01c3VcpaWxndsTa1jDz4scf4PF/3GQemlc75Uu5QiJpqW8ibe3xfN+DsvcgkJTLw
HsWGx9yxz2TkON6xPkMTUeUtqNFa
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:40:24 2025 by rpki-client