Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7MzQ8hgaWhX8klJE2LBfZwzRpTI.roa
File: 7MzQ8hgaWhX8klJE2LBfZwzRpTI.roa (raw, json)
Hash identifier: j6YYiOzqqrbMhpxNIYqp6oBcsHw7KK4inZbBC4OZetM=
Subject key identifier: EC:CC:D0:F2:18:1A:5A:15:FC:92:52:44:D8:B0:5F:67:0C:D1:A5:32
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01977D1C545182C587B864739331B5FDB6EA
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7MzQ8hgaWhX8klJE2LBfZwzRpTI.roa
Signing time: Tue 17 Jun 2025 08:58:17 +0000
ROA not before: Tue 17 Jun 2025 08:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 79.172.208.0/24 maxlen: 24
87.229.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 18 Jun 2025 06:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1c:54:51:82:c5:87:b8:64:73:93:31:b5:fd:b6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 17 08:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecccd0f2181a5a15fc925244d8b05f670cd1a532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bd:ae:d6:7d:8e:70:da:49:0d:81:4a:ec:9b:
e3:e4:79:5d:19:f8:f0:d5:c4:da:8d:e3:73:89:35:
b5:1e:87:ca:bb:e0:19:24:d3:c0:18:10:37:56:4f:
7b:82:ef:55:3c:4a:5f:44:19:56:68:20:7b:ba:b3:
c4:a8:ad:ec:c3:19:fa:70:54:70:60:d7:f6:6f:da:
c1:7f:ac:82:b1:d5:97:bd:82:3c:9b:76:30:71:0f:
d0:33:3e:5e:de:fc:41:c2:20:23:f3:aa:44:c1:12:
fa:54:26:82:15:56:cc:09:2c:09:6d:8c:25:b4:ea:
65:90:47:5e:cd:ea:96:f8:e1:cb:37:77:61:f2:ea:
66:54:92:c2:8c:c1:b0:e0:28:34:40:5b:60:f6:da:
40:9e:eb:77:87:f6:79:d0:bb:ba:0c:f6:3d:44:bd:
38:b0:50:a6:cf:1e:08:b9:8a:95:86:a1:ba:85:80:
4f:e4:44:5d:ea:de:1a:d2:57:ba:71:8b:08:5f:92:
f9:00:6b:f4:e6:2d:dd:d7:dd:f3:81:bb:a5:6f:60:
3b:6e:7d:20:4c:18:02:c6:fa:d4:21:55:17:2f:72:
bd:cf:b0:49:63:b1:e0:ee:4f:a9:cc:17:d0:cb:ce:
40:90:12:b0:64:65:24:39:55:6e:67:1a:44:93:df:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CC:D0:F2:18:1A:5A:15:FC:92:52:44:D8:B0:5F:67:0C:D1:A5:32
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7MzQ8hgaWhX8klJE2LBfZwzRpTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.208.0/24
87.229.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:19:93:ff:77:b2:0c:bf:2c:d2:2a:92:41:ba:61:e3:65:ab:
81:e4:e4:a4:1d:40:f7:3a:79:97:a8:f6:1f:b4:9f:57:20:ae:
5b:ea:5a:aa:6d:28:12:32:cb:c9:1c:b7:ae:90:ab:e5:33:6a:
aa:0f:d9:31:47:c1:af:b9:cb:5f:af:1f:14:3d:c6:77:4d:6c:
6d:64:5c:9c:bc:4d:83:05:8a:87:84:c8:fe:b9:5a:2a:d6:f0:
e0:76:52:92:cd:3a:bb:2a:14:41:13:3c:25:ac:8b:c7:0a:3e:
27:38:83:ba:bd:b5:90:50:2f:1b:03:bb:e9:f8:af:26:90:a9:
2c:f0:b4:82:81:92:bc:98:2a:18:90:bc:74:c1:2d:ed:02:fe:
4d:81:a6:88:db:10:e4:81:8d:0d:b3:f0:c7:9f:b9:a4:f0:9f:
af:ba:02:6f:ea:17:e9:2d:40:3a:9b:d4:41:f4:84:c1:7d:2d:
36:a7:47:85:55:e4:46:d5:4a:73:a5:d2:a2:1f:80:8e:fb:b8:
c6:a7:61:01:09:ba:74:9f:46:56:a1:ed:18:fb:6c:29:71:f8:
98:9f:ff:04:ab:bc:4e:8b:05:6e:eb:88:20:be:58:95:2c:e3:
be:5a:b5:a3:94:c6:05:0e:43:ba:41:c5:4c:f7:12:a5:f4:74:
0e:1e:5a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:31:56 2025 by rpki-client